<?xml version="1.0" encoding="UTF-8"?>
	<oval_definitions
		xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd"
		xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
		xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
		xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5"
		xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5">
	  <generator>
	      <oval:product_name>Marcus Updateinfo to OVAL Converter</oval:product_name>
	      <oval:schema_version>5.5</oval:schema_version>
	      <oval:timestamp>2023-02-10T11:15:26</oval:timestamp>
	  </generator>
<definitions>
<definition id="oval:org.opensuse.security:def:20042771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-2771</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2004-2771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2771" source="CVE"/>
    <reference ref_id="SUSE CVE-2004-2771" ref_url="https://www.suse.com/security/cve/CVE-2004-2771" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1713-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00097.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way mailx handled the parsing of email addresses. A syntactically valid email address could allow a local attacker to cause mailx to execute arbitrary shell commands through shell meta-characters (CVE-2004-2771) and the direct command execution functionality (CVE-2014-7844).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2004-2771/">CVE-2004-2771</cve>
	<bugzilla href="https://bugzilla.suse.com/909208">SUSE bug 909208</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480839" comment="mailx-12.5-1.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151013" comment="mailx is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20054900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-4900</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-4900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4900" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-4900" ref_url="https://www.suse.com/security/cve/CVE-2005-4900" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006709.html" source="SUSE-SU"/>
    <description>
    SHA-1 is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of SHA-1 in TLS 1.2.  NOTE: this CVE exists to provide a common identifier for referencing this SHA-1 issue; the existence of an identifier is not, by itself, a technology recommendation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2005-4900/">CVE-2005-4900</cve>
	<bugzilla href="https://bugzilla.suse.com/1026646">SUSE bug 1026646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1026936">SUSE bug 1026936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042640">SUSE bug 1042640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150998">SUSE bug 1150998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20067246" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-7246</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-7246" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7246" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-7246" ref_url="https://www.suse.com/security/cve/CVE-2006-7246" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1273-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00025.html" source="SUSE-SU"/>
    <description>
    NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2006-7246/">CVE-2006-7246</cve>
	<bugzilla href="https://bugzilla.suse.com/1047509">SUSE bug 1047509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047511">SUSE bug 1047511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/574266">SUSE bug 574266</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/777228">SUSE bug 777228</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629088" comment="NetworkManager-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152685" comment="NetworkManager is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684219" comment="NetworkManager-lang-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152687" comment="NetworkManager-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628810" comment="libnm0-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152691" comment="libnm0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628811" comment="typelib-1_0-NM-1_0-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152692" comment="typelib-1_0-NM-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3126" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3126" ref_url="https://www.suse.com/security/cve/CVE-2007-3126" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002784.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0994-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00046.html" source="SUSE-SU"/>
    <description>
    Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2007-3126/">CVE-2007-3126</cve>
	<bugzilla href="https://bugzilla.suse.com/1032241">SUSE bug 1032241</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630151" comment="gimp-2.10.12-7.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151540" comment="gimp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630153" comment="gimp-lang-2.10.12-7.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151542" comment="gimp-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630154" comment="gimp-plugin-aa-2.10.12-7.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151543" comment="gimp-plugin-aa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684230" comment="gimp-plugins-python-2.10.12-3.3.7 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151544" comment="gimp-plugins-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630155" comment="libgimp-2_0-0-2.10.12-7.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151545" comment="libgimp-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630156" comment="libgimpui-2_0-0-2.10.12-7.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151546" comment="libgimpui-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6746</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-6746" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6746" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-6746" ref_url="https://www.suse.com/security/cve/CVE-2007-6746" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1364-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000582.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0806-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0915-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00052.html" source="SUSE-SU"/>
    <description>
    telepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the server hostname matches a domain name in the subject's Common Name (CN), or (3) the expiration date of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-6746/">CVE-2007-6746</cve>
	<bugzilla href="https://bugzilla.suse.com/817120">SUSE bug 817120</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694919" comment="telepathy-idle-0.2.0-bp153.1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151103" comment="telepathy-idle is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1142</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1142" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1142" ref_url="https://www.suse.com/security/cve/CVE-2008-1142" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10222-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YIRRHCE53YNBLDGNULGNED3XGUMUZDMO/" source="SUSE-SU"/>
    <description>
    rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections.  NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected.  NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-02"/>
	<updated date="2022-12-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-1142/">CVE-2008-1142</cve>
	<bugzilla href="https://bugzilla.suse.com/415661">SUSE bug 415661</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009727502" comment="rxvt-unicode-9.26-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151120" comment="rxvt-unicode is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1420</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1420" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1420" ref_url="https://www.suse.com/security/cve/CVE-2008-1420" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html" source="SUSE-SU"/>
    <description>
    Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to execute arbitrary code via a crafted OGG file, which triggers a heap overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-1420/">CVE-2008-1420</cve>
	<bugzilla href="https://bugzilla.suse.com/372246">SUSE bug 372246</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481533" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151122" comment="libvorbis0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630097" comment="libvorbis0-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151123" comment="libvorbis0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481534" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151124" comment="libvorbisenc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630098" comment="libvorbisenc2-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151125" comment="libvorbisenc2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481535" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151126" comment="libvorbisfile3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3522</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3522" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3522" ref_url="https://www.suse.com/security/cve/CVE-2008-3522" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3522/">CVE-2008-3522</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/392410">SUSE bug 392410</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0186</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0186" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0186" ref_url="https://www.suse.com/security/cve/CVE-2009-0186" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0186/">CVE-2009-0186</cve>
	<bugzilla href="https://bugzilla.suse.com/481769">SUSE bug 481769</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0316</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0316" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0316" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0316" ref_url="https://www.suse.com/security/cve/CVE-2009-0316" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:4619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013343.html" source="SUSE-SU"/>
    <description>
    Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0316/">CVE-2009-0316</cve>
	<bugzilla href="https://bugzilla.suse.com/470100">SUSE bug 470100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629044" comment="vim-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151193" comment="vim is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629045" comment="vim-data-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151194" comment="vim-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629046" comment="vim-data-common-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177135" comment="vim-data-common is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2905</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2905" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2905" ref_url="https://www.suse.com/security/cve/CVE-2009-2905" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute arbitrary code via a request to display a crafted text dialog box.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2905/">CVE-2009-2905</cve>
	<bugzilla href="https://bugzilla.suse.com/540930">SUSE bug 540930</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480626" comment="libnewt0_52-0.52.20-5.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151340" comment="libnewt0_52 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3297</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3297" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3297" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3297" ref_url="https://www.suse.com/security/cve/CVE-2009-3297" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-0787, CVE-2010-0788, CVE-2010-0789.  Reason: this candidate was intended for one issue in Samba, but it was used for multiple distinct issues, including one in FUSE and one in ncpfs.  Notes: All CVE users should consult CVE-2010-0787 (Samba), CVE-2010-0788 (ncpfs), and CVE-2010-0789 (FUSE) to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-3297/">CVE-2009-3297</cve>
	<bugzilla href="https://bugzilla.suse.com/550002">SUSE bug 550002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550003">SUSE bug 550003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550004">SUSE bug 550004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/577925">SUSE bug 577925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/583535">SUSE bug 583535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/583536">SUSE bug 583536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/594263">SUSE bug 594263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/620680">SUSE bug 620680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/651598">SUSE bug 651598</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481128" comment="fuse-2.9.7-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151346" comment="fuse is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481131" comment="libfuse2-2.9.7-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151347" comment="libfuse2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3379</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3379" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3379" ref_url="https://www.suse.com/security/cve/CVE-2009-3379" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.  NOTE: this might overlap CVE-2009-2663.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3379/">CVE-2009-3379</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/608192">SUSE bug 608192</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481533" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151122" comment="libvorbis0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630097" comment="libvorbis0-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151123" comment="libvorbis0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481534" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151124" comment="libvorbisenc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630098" comment="libvorbisenc2-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151125" comment="libvorbisenc2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481535" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151126" comment="libvorbisfile3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3627</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3627" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3627" ref_url="https://www.suse.com/security/cve/CVE-2009-3627" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an incomplete SGML numeric character reference, which triggers generation of an invalid UTF-8 character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3627/">CVE-2009-3627</cve>
	<bugzilla href="https://bugzilla.suse.com/550076">SUSE bug 550076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/585716">SUSE bug 585716</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480873" comment="perl-HTML-Parser-3.72-1.26 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151350" comment="perl-HTML-Parser is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4012</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4012" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4012" ref_url="https://www.suse.com/security/cve/CVE-2009-4012" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to (1) thbrk/thbrk.c and (2) thwbrk/thwbrk.c.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4012/">CVE-2009-4012</cve>
	<bugzilla href="https://bugzilla.suse.com/569615">SUSE bug 569615</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480757" comment="libthai-data-0.1.27-1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154088" comment="libthai-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480758" comment="libthai0-0.1.27-1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154089" comment="libthai0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5029</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5029" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5029" ref_url="https://www.suse.com/security/cve/CVE-2009-5029" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0033-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-403" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00016.html" source="SUSE-SU"/>
    <description>
    CVE-2009-5029 glibc: __tzfile_read integer overflow to buffer overflow
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-5029/">CVE-2009-5029</cve>
	<bugzilla href="https://bugzilla.suse.com/735850">SUSE bug 735850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/736174">SUSE bug 736174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/759836">SUSE bug 759836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826666">SUSE bug 826666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5030</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5030" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5030" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5030" ref_url="https://www.suse.com/security/cve/CVE-2009-5030" source="SUSE CVE"/>
    <description>
    The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid free."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-5030/">CVE-2009-5030</cve>
	<bugzilla href="https://bugzilla.suse.com/757260">SUSE bug 757260</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5064</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5064" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5064" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5064" ref_url="https://www.suse.com/security/cve/CVE-2009-5064" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks.  NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion other ways to introduce code if people are downloading arbitrary binaries and install them in appropriate directories or set LD_LIBRARY_PATH etc."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-5064/">CVE-2009-5064</cve>
	<bugzilla href="https://bugzilla.suse.com/677787">SUSE bug 677787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/684385">SUSE bug 684385</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5081</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5081" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5081" ref_url="https://www.suse.com/security/cve/CVE-2009-5081" source="SUSE CVE"/>
    <description>
    The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2004-0969.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-5081/">CVE-2009-5081</cve>
	<bugzilla href="https://bugzilla.suse.com/703666">SUSE bug 703666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628501" comment="groff-1.22.3-5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151377" comment="groff is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628502" comment="groff-full-1.22.3-5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151378" comment="groff-full is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628503" comment="gxditview-1.22.3-5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151379" comment="gxditview is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5155</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5155" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5155" ref_url="https://www.suse.com/security/cve/CVE-2009-5155" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006343.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1877-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005729.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1958-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1958-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005821.html" source="SUSE-SU"/>
    <description>
    In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-17"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2009-5155/">CVE-2009-5155</cve>
	<bugzilla href="https://bugzilla.suse.com/1127223">SUSE bug 1127223</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1172</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1172" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1172" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1172" ref_url="https://www.suse.com/security/cve/CVE-2010-1172" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0968-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0300-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0300-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00025.html" source="SUSE-SU"/>
    <description>
    DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1172/">CVE-2010-1172</cve>
	<bugzilla href="https://bugzilla.suse.com/628607">SUSE bug 628607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633621">SUSE bug 633621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633622">SUSE bug 633622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633623">SUSE bug 633623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633629">SUSE bug 633629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633637">SUSE bug 633637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633639">SUSE bug 633639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633648">SUSE bug 633648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633652">SUSE bug 633652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633653">SUSE bug 633653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633654">SUSE bug 633654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633658">SUSE bug 633658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633660">SUSE bug 633660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633678">SUSE bug 633678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633679">SUSE bug 633679</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633681">SUSE bug 633681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633682">SUSE bug 633682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633685">SUSE bug 633685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633686">SUSE bug 633686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633700">SUSE bug 633700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633701">SUSE bug 633701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633702">SUSE bug 633702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480190" comment="dbus-1-glib-0.108-1.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151408" comment="dbus-1-glib is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480191" comment="dbus-1-glib-32bit-0.108-1.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151409" comment="dbus-1-glib-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480193" comment="dbus-1-glib-tool-0.108-1.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177167" comment="dbus-1-glib-tool is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2074</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2074" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2074" ref_url="https://www.suse.com/security/cve/CVE-2010-2074" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="TID7002558" ref_url="https://www.suse.com/support/kb/doc?id=7002558" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0393-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00019.html" source="SUSE-SU"/>
    <description>
    istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2074/">CVE-2010-2074</cve>
	<bugzilla href="https://bugzilla.suse.com/609451">SUSE bug 609451</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102322" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2322</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2322" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2322" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2322" ref_url="https://www.suse.com/security/cve/CVE-2010-2322" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2635-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009264.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1107-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AJWN7K3ZWIZYG5QW25KKFIGISFYTG2R3/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2565-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OHWHBBR2CBRHE7HR6PAPJLGHP3QCHYHS/" source="SUSE-SU"/>
    <description>
    Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2010-2322/">CVE-2010-2322</cve>
	<bugzilla href="https://bugzilla.suse.com/1188517">SUSE bug 1188517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626940" comment="fastjar-0.98-3.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009627142" comment="fastjar is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2947</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2947" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2947" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2947" ref_url="https://www.suse.com/security/cve/CVE-2010-2947" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0723-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00014.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a string that is inconsistent with the expected number of fields.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2947/">CVE-2010-2947</cve>
	<bugzilla href="https://bugzilla.suse.com/631582">SUSE bug 631582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480358" comment="libHX28-3.22-1.26 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151496" comment="libHX28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3192</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3192" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3192" ref_url="https://www.suse.com/security/cve/CVE-2010-3192" source="SUSE CVE"/>
    <description>
    Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace information, which might allow context-dependent attackers to obtain sensitive information from process memory by executing an incorrect program, as demonstrated by a setuid program that contains a stack-based buffer overflow error, related to the __fortify_fail function in debug/fortify_fail.c, and the __stack_chk_fail (aka stack protection) and __chk_fail (aka FORTIFY_SOURCE) implementations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-3192/">CVE-2010-3192</cve>
	<bugzilla href="https://bugzilla.suse.com/636113">SUSE bug 636113</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0421</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0421" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0421" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0421" ref_url="https://www.suse.com/security/cve/CVE-2011-0421" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0449-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0645-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00032.html" source="SUSE-SU"/>
    <description>
    The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0421/">CVE-2011-0421</cve>
	<bugzilla href="https://bugzilla.suse.com/681193">SUSE bug 681193</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480831" comment="libzip5-1.5.1-1.9 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177169" comment="libzip5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110465" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0465</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0465" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0465" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0465" ref_url="https://www.suse.com/security/cve/CVE-2011-0465" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0298-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00018.html" source="SUSE-SU"/>
    <description>
    xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0465/">CVE-2011-0465</cve>
	<bugzilla href="https://bugzilla.suse.com/674733">SUSE bug 674733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/688931">SUSE bug 688931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480965" comment="xorg-x11-essentials-7.6_1-1.22 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151560" comment="xorg-x11-essentials is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481675" comment="xrdb-1.1.0-3.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151561" comment="xrdb is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0541</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0541" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0541" ref_url="https://www.suse.com/security/cve/CVE-2011-0541" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0264-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0265-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00039.html" source="SUSE-SU"/>
    <description>
    fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary directories via a symlink attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0541/">CVE-2011-0541</cve>
	<bugzilla href="https://bugzilla.suse.com/668820">SUSE bug 668820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/685055">SUSE bug 685055</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481128" comment="fuse-2.9.7-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151346" comment="fuse is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481131" comment="libfuse2-2.9.7-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151347" comment="libfuse2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1098</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1098" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1098" ref_url="https://www.suse.com/security/cve/CVE-2011-1098" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0536-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00055.html" source="SUSE-SU"/>
    <description>
    CVE-2011-1098 logrotate: TOCTOU race condition by creation of new files (between opening the file and moment, final permissions have been applied) [information disclosure]
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1098/">CVE-2011-1098</cve>
	<bugzilla href="https://bugzilla.suse.com/1007000">SUSE bug 1007000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136195">SUSE bug 1136195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/677335">SUSE bug 677335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/677336">SUSE bug 677336</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481596" comment="logrotate-3.13.0-4.3.9 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151568" comment="logrotate is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1154</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1154" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1154" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1154" ref_url="https://www.suse.com/security/cve/CVE-2011-1154" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0536-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00055.html" source="SUSE-SU"/>
    <description>
    The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1154/">CVE-2011-1154</cve>
	<bugzilla href="https://bugzilla.suse.com/677335">SUSE bug 677335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/679661">SUSE bug 679661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/681984">SUSE bug 681984</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481596" comment="logrotate-3.13.0-4.3.9 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151568" comment="logrotate is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1155</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1155" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1155" ref_url="https://www.suse.com/security/cve/CVE-2011-1155" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0536-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00055.html" source="SUSE-SU"/>
    <description>
    The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1155/">CVE-2011-1155</cve>
	<bugzilla href="https://bugzilla.suse.com/677335">SUSE bug 677335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/679662">SUSE bug 679662</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481596" comment="logrotate-3.13.0-4.3.9 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151568" comment="logrotate is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2696</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2696" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2696" ref_url="https://www.suse.com/security/cve/CVE-2011-2696" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0854-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00000.html" source="SUSE-SU"/>
    <description>
    CVE-2011-2696 libsndfile: Application crash due integer overflow by processing certain PAF audio files
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2696/">CVE-2011-2696</cve>
	<bugzilla href="https://bugzilla.suse.com/705681">SUSE bug 705681</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2895</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2895" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2895" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2895" ref_url="https://www.suse.com/security/cve/CVE-2011-2895" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1035-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00004.html" source="SUSE-SU"/>
    <description>
    The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2895/">CVE-2011-2895</cve>
	<bugzilla href="https://bugzilla.suse.com/709851">SUSE bug 709851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711487">SUSE bug 711487</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3079</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3079" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3079" ref_url="https://www.suse.com/security/cve/CVE-2011-3079" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0613-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0935-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3079/">CVE-2011-3079</cve>
	<bugzilla href="https://bugzilla.suse.com/1122983">SUSE bug 1122983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/760264">SUSE bug 760264</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986639">SUSE bug 986639</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4349</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4349" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4349" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4349" ref_url="https://www.suse.com/security/cve/CVE-2011-4349" source="SUSE CVE"/>
    <description>
    Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and (a) device id, (b) property, or (c) profile id.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4349/">CVE-2011-4349</cve>
	<bugzilla href="https://bugzilla.suse.com/698250">SUSE bug 698250</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/732996">SUSE bug 732996</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488885" comment="colord-gtk-lang-0.1.26-1.48 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151656" comment="colord-gtk-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482646" comment="libcolord-gtk1-0.1.26-1.48 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151658" comment="libcolord-gtk1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4405</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4405" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4405" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4405" ref_url="https://www.suse.com/security/cve/CVE-2011-4405" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1331-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1331-2" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00028.html" source="SUSE-SU"/>
    <description>
    The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote attackers to execute arbitrary code via a man-in-the-middle (MITM) attack that modifies packages or repositories.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4405/">CVE-2011-4405</cve>
	<bugzilla href="https://bugzilla.suse.com/733542">SUSE bug 733542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/735322">SUSE bug 735322</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486538" comment="python3-cupshelpers-1.5.7-6.27 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154100" comment="python3-cupshelpers is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694913" comment="system-config-printer-1.5.7-6.27 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151662" comment="system-config-printer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694914" comment="system-config-printer-applet-1.5.7-6.27 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151663" comment="system-config-printer-applet is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486539" comment="system-config-printer-common-1.5.7-6.27 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151664" comment="system-config-printer-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486540" comment="system-config-printer-common-lang-1.5.7-6.27 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151665" comment="system-config-printer-common-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486541" comment="system-config-printer-dbus-service-1.5.7-6.27 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151666" comment="system-config-printer-dbus-service is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486542" comment="udev-configure-printer-1.5.7-6.27 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151667" comment="udev-configure-printer is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114516" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4516</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4516" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4516" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4516" ref_url="https://www.suse.com/security/cve/CVE-2011-4516" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1317-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1317-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-4516/">CVE-2011-4516</cve>
	<bugzilla href="https://bugzilla.suse.com/1006591">SUSE bug 1006591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/725758">SUSE bug 725758</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4517</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4517" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4517" ref_url="https://www.suse.com/security/cve/CVE-2011-4517" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1317-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1317-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
    <description>
    The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memory corruption), via a crafted component registration (CRG) marker segment in a JPEG2000 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-4517/">CVE-2011-4517</cve>
	<bugzilla href="https://bugzilla.suse.com/1006593">SUSE bug 1006593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/725758">SUSE bug 725758</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20115325" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-5325</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-5325" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5325" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-5325" ref_url="https://www.suse.com/security/cve/CVE-2011-5325" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1408-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LTZHQ6OAWXY23IUCNO7X25C5CHHCWLOM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3531-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EXGVAQ34C33F4R3O65TKB73FYUDCIM6B/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2011-5325/">CVE-2011-5325</cve>
	<bugzilla href="https://bugzilla.suse.com/951562">SUSE bug 951562</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152555" comment="busybox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653584" comment="busybox-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0037</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0037" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0037" ref_url="https://www.suse.com/security/cve/CVE-2012-0037" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-March/000062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0457-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0428-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0433-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00052.html" source="SUSE-SU"/>
    <description>
    Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0037/">CVE-2012-0037</cve>
	<bugzilla href="https://bugzilla.suse.com/37195">SUSE bug 37195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/734781">SUSE bug 734781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/740453">SUSE bug 740453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/745298">SUSE bug 745298</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629212" comment="libraptor2-0-2.0.15-9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151673" comment="libraptor2-0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0444</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0444" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0444" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0444" ref_url="https://www.suse.com/security/cve/CVE-2012-0444" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0444/">CVE-2012-0444</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747912">SUSE bug 747912</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481533" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151122" comment="libvorbis0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630097" comment="libvorbis0-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151123" comment="libvorbis0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481534" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151124" comment="libvorbisenc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630098" comment="libvorbisenc2-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151125" comment="libvorbisenc2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481535" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151126" comment="libvorbisfile3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120786" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0786</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0786" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0786" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0786" ref_url="https://www.suse.com/security/cve/CVE-2012-0786" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1017-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000961.html" source="SUSE-SU"/>
    <description>
    The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0786/">CVE-2012-0786</cve>
	<bugzilla href="https://bugzilla.suse.com/853044">SUSE bug 853044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885003">SUSE bug 885003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480071" comment="augeas-1.10.1-1.11 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154101" comment="augeas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480073" comment="augeas-lenses-1.10.1-1.11 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151682" comment="augeas-lenses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480074" comment="libaugeas0-1.10.1-1.11 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151683" comment="libaugeas0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120876" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0876</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0876" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0876" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0876" ref_url="https://www.suse.com/security/cve/CVE-2012-0876" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000155.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00046.html" source="SUSE-SU"/>
    <description>
    The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-0876/">CVE-2012-0876</cve>
	<bugzilla href="https://bugzilla.suse.com/750914">SUSE bug 750914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751464">SUSE bug 751464</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751465">SUSE bug 751465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983215">SUSE bug 983215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983216">SUSE bug 983216</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481942" comment="expat-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481944" comment="libexpat1-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481945" comment="libexpat1-32bit-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1162</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1162" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1162" ref_url="https://www.suse.com/security/cve/CVE-2012-1162" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00041.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a zip archive with the number of directories set to 0, related to an "incorrect loop construct."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1162/">CVE-2012-1162</cve>
	<bugzilla href="https://bugzilla.suse.com/751829">SUSE bug 751829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751830">SUSE bug 751830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480831" comment="libzip5-1.5.1-1.9 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177169" comment="libzip5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1163</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1163" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1163" ref_url="https://www.suse.com/security/cve/CVE-2012-1163" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00041.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size and offset values for the central directory in a zip archive, which triggers "improper restrictions of operations within the bounds of a memory buffer" and an information leak.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1163/">CVE-2012-1163</cve>
	<bugzilla href="https://bugzilla.suse.com/751829">SUSE bug 751829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751830">SUSE bug 751830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480831" comment="libzip5-1.5.1-1.9 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177169" comment="libzip5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1616</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1616" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1616" ref_url="https://www.suse.com/security/cve/CVE-2012-1616" source="SUSE CVE"/>
    <description>
    Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1616/">CVE-2012-1616</cve>
	<bugzilla href="https://bugzilla.suse.com/768322">SUSE bug 768322</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488880" comment="argyllcms-1.9.2-2.27 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151705" comment="argyllcms is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2673</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2673" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2673" ref_url="https://www.suse.com/security/cve/CVE-2012-2673" source="SUSE CVE"/>
    <description>
    Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2673/">CVE-2012-2673</cve>
	<bugzilla href="https://bugzilla.suse.com/765444">SUSE bug 765444</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480250" comment="libgc1-7.6.4-1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151722" comment="libgc1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2808</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2808" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2808" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2808" ref_url="https://www.suse.com/security/cve/CVE-2012-2808" source="SUSE CVE"/>
    <description>
    The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2015-0800.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2808/">CVE-2012-2808</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2812</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2812" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2812" ref_url="https://www.suse.com/security/cve/CVE-2012-2812" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    The exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2812/">CVE-2012-2812</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629201" comment="libexif12-0.6.22-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2813</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2813" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2813" ref_url="https://www.suse.com/security/cve/CVE-2012-2813" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2813/">CVE-2012-2813</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629201" comment="libexif12-0.6.22-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2814</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2814" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2814" ref_url="https://www.suse.com/security/cve/CVE-2012-2814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2814/">CVE-2012-2814</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629201" comment="libexif12-0.6.22-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2836</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2836" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2836" ref_url="https://www.suse.com/security/cve/CVE-2012-2836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2836/">CVE-2012-2836</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629201" comment="libexif12-0.6.22-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2837</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2837" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2837" ref_url="https://www.suse.com/security/cve/CVE-2012-2837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2837/">CVE-2012-2837</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629201" comment="libexif12-0.6.22-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2840</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2840" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2840" ref_url="https://www.suse.com/security/cve/CVE-2012-2840" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2840/">CVE-2012-2840</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629201" comment="libexif12-0.6.22-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2841</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2841" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2841" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2841" ref_url="https://www.suse.com/security/cve/CVE-2012-2841" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2841/">CVE-2012-2841</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629201" comment="libexif12-0.6.22-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2944</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2944" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2944" ref_url="https://www.suse.com/security/cve/CVE-2012-2944" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1077-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-September/000239.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1069-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00049.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-power outage) via a long string containing non-printable characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2944/">CVE-2012-2944</cve>
	<bugzilla href="https://bugzilla.suse.com/764699">SUSE bug 764699</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482443" comment="libupsclient1-2.7.4-4.72 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151733" comment="libupsclient1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488209" comment="nut-2.7.4-4.72 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151734" comment="nut is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694883" comment="nut-cgi-2.7.4-4.72 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151735" comment="nut-cgi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123358" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3358</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3358" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3358" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3358" ref_url="https://www.suse.com/security/cve/CVE-2012-3358" source="SUSE CVE"/>
    <description>
    CVE-2012-3358 openjpeg: heap-based buffer overflow when processing JPEG2000 image files
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3358/">CVE-2012-3358</cve>
	<bugzilla href="https://bugzilla.suse.com/770649">SUSE bug 770649</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123406" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3406</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3406" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3406" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3406" ref_url="https://www.suse.com/security/cve/CVE-2012-3406" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1488-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-November/000297.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1666-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000315.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000539.html" source="SUSE-SU"/>
    <description>
    The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3406/">CVE-2012-3406</cve>
	<bugzilla href="https://bugzilla.suse.com/770891">SUSE bug 770891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123535" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3535</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3535" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3535" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3535" ref_url="https://www.suse.com/security/cve/CVE-2012-3535" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1370-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00061.html" source="SUSE-SU"/>
    <description>
    CVE-2012-3535 openjpeg: heap-based buffer overflow when decoding jpeg2000 files
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3535/">CVE-2012-3535</cve>
	<bugzilla href="https://bugzilla.suse.com/777445">SUSE bug 777445</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4412</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4412" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4412" ref_url="https://www.suse.com/security/cve/CVE-2012-4412" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00072.html" source="SUSE-SU"/>
    <description>
    Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4412/">CVE-2012-4412</cve>
	<bugzilla href="https://bugzilla.suse.com/779320">SUSE bug 779320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/848783">SUSE bug 848783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882910">SUSE bug 882910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920169">SUSE bug 920169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920338">SUSE bug 920338</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4433</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4433" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4433" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4433" ref_url="https://www.suse.com/security/cve/CVE-2012-4433" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002695.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0828-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00093.html" source="SUSE-SU"/>
    <description>
    CVE-2012-4433 gegl: Integer overflow, leading to heap-based buffer overflow by parsing PPM image headers
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4433/">CVE-2012-4433</cve>
	<bugzilla href="https://bugzilla.suse.com/1023636">SUSE bug 1023636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028070">SUSE bug 1028070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089725">SUSE bug 1089725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/789835">SUSE bug 789835</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489199" comment="gegl-0_4-0.4.16-1.99 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662435" comment="gegl-0_4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489200" comment="gegl-0_4-lang-0.4.16-1.99 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662436" comment="gegl-0_4-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489202" comment="libgegl-0_4-0-0.4.16-1.99 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662437" comment="libgegl-0_4-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4510</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4510" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4510" ref_url="https://www.suse.com/security/cve/CVE-2012-4510" source="SUSE CVE"/>
    <description>
    cups-pk-helper before 0.2.3 does not properly wrap the (1) cupsGetFile and (2) cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4510/">CVE-2012-4510</cve>
	<bugzilla href="https://bugzilla.suse.com/783488">SUSE bug 783488</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482654" comment="cups-pk-helper-0.2.6-1.36 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151769" comment="cups-pk-helper is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482655" comment="cups-pk-helper-lang-0.2.6-1.36 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151770" comment="cups-pk-helper-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4564</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4564" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4564" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4564" ref_url="https://www.suse.com/security/cve/CVE-2012-4564" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-January/000333.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0187-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00076.html" source="SUSE-SU"/>
    <description>
    CVE-2012-4564 libtiff: Missing return value check in ppm2tiff leading to heap-buffer overflow when reading a tiff file
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4564/">CVE-2012-4564</cve>
	<bugzilla href="https://bugzilla.suse.com/781995">SUSE bug 781995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/787892">SUSE bug 787892</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/791607">SUSE bug 791607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124929" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4929</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4929" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4929" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4929" ref_url="https://www.suse.com/security/cve/CVE-2012-4929" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-October/000289.html" source="SUSE-SU"/>
		<reference ref_id="TID7014254" ref_url="https://www.suse.com/support/kb/doc/?id=7014254" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1420-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0143-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0157-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1630-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00005.html" source="SUSE-SU"/>
    <description>
    The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a "CRIME" attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4929/">CVE-2012-4929</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/779952">SUSE bug 779952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/793420">SUSE bug 793420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803004">SUSE bug 803004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/847895">SUSE bug 847895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5519</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5519" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5519" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5519" ref_url="https://www.suse.com/security/cve/CVE-2012-5519" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1044-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html" source="SUSE-SU"/>
    <description>
    CVE-2012-5519 cups: privilege escalation for users of the CUPS SystemGroup group
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5519/">CVE-2012-5519</cve>
	<bugzilla href="https://bugzilla.suse.com/1180148">SUSE bug 1180148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/789566">SUSE bug 789566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882905">SUSE bug 882905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924208">SUSE bug 924208</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6702</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6702" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6702" ref_url="https://www.suse.com/security/cve/CVE-2012-6702" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0483-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00071.html" source="SUSE-SU"/>
    <description>
    Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2012-6702/">CVE-2012-6702</cve>
	<bugzilla href="https://bugzilla.suse.com/983215">SUSE bug 983215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983216">SUSE bug 983216</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481942" comment="expat-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481944" comment="libexpat1-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481945" comment="libexpat1-32bit-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6708</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6708" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6708" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6708" ref_url="https://www.suse.com/security/cve/CVE-2012-6708" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006630.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html" source="SUSE-SU"/>
    <description>
    jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '&lt;' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '&lt;' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2012-6708/">CVE-2012-6708</cve>
	<bugzilla href="https://bugzilla.suse.com/1111661">SUSE bug 1111661</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6709</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6709" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6709" ref_url="https://www.suse.com/security/cve/CVE-2012-6709" source="SUSE CVE"/>
    <description>
    ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-29"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-6709/">CVE-2012-6709</cve>
	<bugzilla href="https://bugzilla.suse.com/1082814">SUSE bug 1082814</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695514" comment="elinks-0.13~0.20190723-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695515" comment="elinks is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0211</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0211" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0211" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0211" ref_url="https://www.suse.com/security/cve/CVE-2013-0211" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0667-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001328.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0568-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00065.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service (crash) via unspecified vectors, which triggers an improper conversion between unsigned and signed types, leading to a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0211/">CVE-2013-0211</cve>
	<bugzilla href="https://bugzilla.suse.com/800024">SUSE bug 800024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979005">SUSE bug 979005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0242</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0242" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0242" ref_url="https://www.suse.com/security/cve/CVE-2013-0242" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00072.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, allows context-dependent attackers to cause a denial of service (memory corruption and crash) via crafted multibyte characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0242/">CVE-2013-0242</cve>
	<bugzilla href="https://bugzilla.suse.com/801246">SUSE bug 801246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/848783">SUSE bug 848783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882910">SUSE bug 882910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130292" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0292</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0292" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0292" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0292" ref_url="https://www.suse.com/security/cve/CVE-2013-0292" source="SUSE CVE"/>
    <description>
    The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0292/">CVE-2013-0292</cve>
	<bugzilla href="https://bugzilla.suse.com/792095">SUSE bug 792095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/804392">SUSE bug 804392</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480190" comment="dbus-1-glib-0.108-1.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151408" comment="dbus-1-glib is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480191" comment="dbus-1-glib-32bit-0.108-1.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151409" comment="dbus-1-glib-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480193" comment="dbus-1-glib-tool-0.108-1.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177167" comment="dbus-1-glib-tool is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0779</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0779" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0779" ref_url="https://www.suse.com/security/cve/CVE-2013-0779" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
    <description>
    The nsCodingStateMachine::NextState function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0779/">CVE-2013-0779</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694835" comment="libKF5Codecs5-5.76.0-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695516" comment="libKF5Codecs5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694836" comment="libKF5Codecs5-lang-5.76.0-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695517" comment="libKF5Codecs5-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1447</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1447" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1447" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1447" ref_url="https://www.suse.com/security/cve/CVE-2013-1447" source="SUSE CVE"/>
    <description>
    OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1447/">CVE-2013-1447</cve>
	<bugzilla href="https://bugzilla.suse.com/853644">SUSE bug 853644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/853834">SUSE bug 853834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871412">SUSE bug 871412</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1752</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1752" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1752" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1752" ref_url="https://www.suse.com/security/cve/CVE-2013-1752" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1006-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000958.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0380-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0498-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service (memory consumption) via a long string, related to (1) httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; (2) ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; (3) imaplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; (4) nntplib - fixed in 2.7.6, 2.6.9, 3.3.3; (5) poplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; and (6) smtplib - not yet fixed in 2.7.x, fixed in 2.6.9, not yet fixed in 3.3.x. NOTE: this was REJECTed because it is incompatible with CNT1 "Independently Fixable" in the CVE Counting Decisions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2013-1752/">CVE-2013-1752</cve>
	<bugzilla href="https://bugzilla.suse.com/856835">SUSE bug 856835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/856836">SUSE bug 856836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/863741">SUSE bug 863741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885882">SUSE bug 885882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898572">SUSE bug 898572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912739">SUSE bug 912739</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1753</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1753" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1753" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1753" ref_url="https://www.suse.com/security/cve/CVE-2013-1753" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0380-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0498-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00020.html" source="SUSE-SU"/>
    <description>
    The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2013-1753/">CVE-2013-1753</cve>
	<bugzilla href="https://bugzilla.suse.com/856835">SUSE bug 856835</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131914" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1914</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1914" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1914" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1914" ref_url="https://www.suse.com/security/cve/CVE-2013-1914" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000539.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000661.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00072.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of domain conversion results.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1914/">CVE-2013-1914</cve>
	<bugzilla href="https://bugzilla.suse.com/813121">SUSE bug 813121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826666">SUSE bug 826666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882910">SUSE bug 882910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/941444">SUSE bug 941444</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1960</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1960" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1960" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1960" ref_url="https://www.suse.com/security/cve/CVE-2013-1960" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0795-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0812-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0812-2" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0922-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0944-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00080.html" source="SUSE-SU"/>
    <description>
    CVE-2013-1960 libtiff (tiff2pdf): Heap-based buffer overflow in t2_process_jpeg_strip()
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1960/">CVE-2013-1960</cve>
	<bugzilla href="https://bugzilla.suse.com/817573">SUSE bug 817573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1961</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1961" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1961" ref_url="https://www.suse.com/security/cve/CVE-2013-1961" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0795-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0812-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0812-2" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0922-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0944-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00080.html" source="SUSE-SU"/>
    <description>
    CVE-2013-1961 libtiff (tiff2pdf): Stack-based buffer overflow with malformed image-length and resolution
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1961/">CVE-2013-1961</cve>
	<bugzilla href="https://bugzilla.suse.com/817573">SUSE bug 817573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/818117">SUSE bug 818117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1982</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1982" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1982" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1982" ref_url="https://www.suse.com/security/cve/CVE-2013-1982" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1099-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000500.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1099-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000550.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000906.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1009-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00139.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XcupGetReservedColormapEntries, (2) XcupStoreColors, (3) XdbeGetVisualInfo, (4) XeviGetVisualInfo, (5) XShapeGetRectangles, and (6) XSyncListSystemCounters functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1982/">CVE-2013-1982</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821665">SUSE bug 821665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480415" comment="libXext6-1.3.3-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151824" comment="libXext6 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1983</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1983" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1983" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1983" ref_url="https://www.suse.com/security/cve/CVE-2013-1983" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1097-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000916.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1014-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00144.html" source="SUSE-SU"/>
    <description>
    Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XFixesGetCursorImage function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1983/">CVE-2013-1983</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821667">SUSE bug 821667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880221">SUSE bug 880221</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480418" comment="libXfixes3-5.0.3-1.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151827" comment="libXfixes3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1984</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1984" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1984" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1984" ref_url="https://www.suse.com/security/cve/CVE-2013-1984" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1033-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XGetDeviceControl, (2) XGetFeedbackControl, (3) XGetDeviceDontPropagateList, (4) XGetDeviceMotionEvents, (5) XIGetProperty, (6) XIGetSelectedEvents, (7) XGetDeviceProperties, and (8) XListInputDevices functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1984/">CVE-2013-1984</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482117" comment="libXi6-1.7.9-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151830" comment="libXi6 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1985</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1985" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1985" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1985" ref_url="https://www.suse.com/security/cve/CVE-2013-1985" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00154.html" source="SUSE-SU"/>
    <description>
    Integer overflow in X.org libXinerama 1.1.2 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XineramaQueryScreens function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1985/">CVE-2013-1985</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480427" comment="libXinerama1-1.1.3-1.22 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151833" comment="libXinerama1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1986</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1986" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1986" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1986" ref_url="https://www.suse.com/security/cve/CVE-2013-1986" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1028-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00156.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRRQueryOutputProperty and (2) XRRQueryProviderProperty functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1986/">CVE-2013-1986</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480431" comment="libXrandr2-1.5.1-2.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151836" comment="libXrandr2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131987" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1987</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1987" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1987" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1987" ref_url="https://www.suse.com/security/cve/CVE-2013-1987" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1095-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000929.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1011-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00141.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRenderQueryFilters, (2) XRenderQueryFormats, and (3) XRenderQueryPictIndexValues functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1987/">CVE-2013-1987</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821669">SUSE bug 821669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880221">SUSE bug 880221</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480433" comment="libXrender1-0.9.10-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151839" comment="libXrender1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1988</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1988" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1988" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1988" ref_url="https://www.suse.com/security/cve/CVE-2013-1988" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1027-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00155.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XResQueryClients and (2) XResQueryClientResources functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1988/">CVE-2013-1988</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480408" comment="libXRes1-1.2.0-1.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151841" comment="libXRes1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131989" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1989</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1989" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1989" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1989" ref_url="https://www.suse.com/security/cve/CVE-2013-1989" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1104-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1010-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00140.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXv 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvQueryPortAttributes, (2) XvListImageFormats, and (3) XvCreateImage function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1989/">CVE-2013-1989</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821671">SUSE bug 821671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880221">SUSE bug 880221</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480441" comment="libXv1-1.0.11-1.23 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151844" comment="libXv1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131990" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1990</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1990" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1990" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1990" ref_url="https://www.suse.com/security/cve/CVE-2013-1990" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1025-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00153.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXvMC 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvMCListSurfaceTypes and (2) XvMCListSubpictureTypes functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1990/">CVE-2013-1990</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480443" comment="libXvMC1-1.0.10-1.23 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151847" comment="libXvMC1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1992</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1992" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1992" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1992" ref_url="https://www.suse.com/security/cve/CVE-2013-1992" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1029-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00157.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libdmx 1.1.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) DMXGetScreenAttributes, (2) DMXGetWindowAttributes, and (3) DMXGetInputAttributes functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1992/">CVE-2013-1992</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480524" comment="libdmx1-1.1.3-1.23 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151851" comment="libdmx1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1995</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1995" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1995" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1995" ref_url="https://www.suse.com/security/cve/CVE-2013-1995" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1033-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html" source="SUSE-SU"/>
    <description>
    X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1995/">CVE-2013-1995</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482117" comment="libXi6-1.7.9-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151830" comment="libXi6 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131998" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1998</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1998" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1998" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1998" ref_url="https://www.suse.com/security/cve/CVE-2013-1998" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1033-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1998/">CVE-2013-1998</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482117" comment="libXi6-1.7.9-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151830" comment="libXi6 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131999" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1999</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1999" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1999" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1999" ref_url="https://www.suse.com/security/cve/CVE-2013-1999" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1025-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00153.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in X.org libXvMC 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvMCGetDRInfo function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1999/">CVE-2013-1999</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480443" comment="libXvMC1-1.0.10-1.23 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151847" comment="libXvMC1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2001</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2001" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2001" ref_url="https://www.suse.com/security/cve/CVE-2013-2001" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1041-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00165.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XF86VidModeGetGammaRamp function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2001/">CVE-2013-2001</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480451" comment="libXxf86vm1-1.1.4-1.23 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151854" comment="libXxf86vm1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2002</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2002" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2002" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2002" ref_url="https://www.suse.com/security/cve/CVE-2013-2002" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000502.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1101-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000914.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00138.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the _XtResourceConfigurationEH function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2002/">CVE-2013-2002</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821670">SUSE bug 821670</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480436" comment="libXt6-1.1.5-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151857" comment="libXt6 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132003" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2003</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2003" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2003" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2003" ref_url="https://www.suse.com/security/cve/CVE-2013-2003" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1031-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00159.html" source="SUSE-SU"/>
    <description>
    Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the _XcursorFileHeaderCreate function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2003/">CVE-2013-2003</cve>
	<bugzilla href="https://bugzilla.suse.com/1065386">SUSE bug 1065386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480411" comment="libXcursor1-1.1.15-1.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151860" comment="libXcursor1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2005</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2005" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2005" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2005" ref_url="https://www.suse.com/security/cve/CVE-2013-2005" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000502.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1101-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000914.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00138.html" source="SUSE-SU"/>
    <description>
    X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2005/">CVE-2013-2005</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821670">SUSE bug 821670</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480436" comment="libXt6-1.1.5-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151857" comment="libXt6 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2063</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2063" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2063" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2063" ref_url="https://www.suse.com/security/cve/CVE-2013-2063" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1032-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00160.html" source="SUSE-SU"/>
    <description>
    CVE-2013-2063 libXtst:Integer overflow leading to heap-based buffer overlow
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2063/">CVE-2013-2063</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480438" comment="libXtst6-1.2.3-1.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151865" comment="libXtst6 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2066</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2066" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2066" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2066" ref_url="https://www.suse.com/security/cve/CVE-2013-2066" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1104-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1010-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00140.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvQueryPortAttributes function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2066/">CVE-2013-2066</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821671">SUSE bug 821671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880221">SUSE bug 880221</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480441" comment="libXv1-1.0.11-1.23 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151844" comment="libXv1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2207</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2207" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2207" ref_url="https://www.suse.com/security/cve/CVE-2013-2207" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00072.html" source="SUSE-SU"/>
    <description>
    pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2207/">CVE-2013-2207</cve>
	<bugzilla href="https://bugzilla.suse.com/830257">SUSE bug 830257</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3495</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3495" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3495" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3495" ref_url="https://www.suse.com/security/cve/CVE-2013-3495" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1732-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001354.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html" source="SUSE-SU"/>
    <description>
    The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message Signaled Interrupt (MSI) from a PCI device that is bus mastering capable that triggers a System Error Reporting (SERR) Non-Maskable Interrupt (NMI).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3495/">CVE-2013-3495</cve>
	<bugzilla href="https://bugzilla.suse.com/826717">SUSE bug 826717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/903970">SUSE bug 903970</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4231</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4231" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4231" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4231" ref_url="https://www.suse.com/security/cve/CVE-2013-4231" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1638-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1482-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00053.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c.  NOTE: vectors 1 and 3 are disputed by Red Hat, which states that the input cannot exceed the allocated buffer size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4231/">CVE-2013-4231</cve>
	<bugzilla href="https://bugzilla.suse.com/834477">SUSE bug 834477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4232</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4232" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4232" ref_url="https://www.suse.com/security/cve/CVE-2013-4232" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1638-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1482-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00053.html" source="SUSE-SU"/>
    <description>
    CVE-2013-4232 libtiff (tiff2pdf): use-after-free in t2p_readwrite_pdf_image()
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4232/">CVE-2013-4232</cve>
	<bugzilla href="https://bugzilla.suse.com/834477">SUSE bug 834477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134237" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4237</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4237" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4237" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4237" ref_url="https://www.suse.com/security/cve/CVE-2013-4237" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00072.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds write flaw was found in the way the glibc's readdir_r() function handled file system entries longer than the NAME_MAX character constant. A remote attacker could provide a specially crafted NTFS or CIFS file system that, when processed by an application using readdir_r(), would cause that application to crash or, potentially, allow the attacker to execute arbitrary code with the privileges of the user running the application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4237/">CVE-2013-4237</cve>
	<bugzilla href="https://bugzilla.suse.com/834594">SUSE bug 834594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882910">SUSE bug 882910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883022">SUSE bug 883022</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4243</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4243" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4243" ref_url="https://www.suse.com/security/cve/CVE-2013-4243" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1638-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1482-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00053.html" source="SUSE-SU"/>
    <description>
    CVE-2013-4243 libtiff (gif2tiff): possible heap-based buffer overflow in readgifimage()
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4243/">CVE-2013-4243</cve>
	<bugzilla href="https://bugzilla.suse.com/834779">SUSE bug 834779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4244</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4244" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4244" ref_url="https://www.suse.com/security/cve/CVE-2013-4244" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1638-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1482-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00053.html" source="SUSE-SU"/>
    <description>
    CVE-2013-4244 libtiff (gif2tiff): OOB Write in LZW decompressor
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4244/">CVE-2013-4244</cve>
	<bugzilla href="https://bugzilla.suse.com/834788">SUSE bug 834788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134282" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4282</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4282" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4282" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4282" ref_url="https://www.suse.com/security/cve/CVE-2013-4282" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0884-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0884-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1750-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00032.html" source="SUSE-SU"/>
    <description>
    CVE-2013-4282 spice: stack buffer overflow in reds_handle_ticket() function
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2013-4282/">CVE-2013-4282</cve>
	<bugzilla href="https://bugzilla.suse.com/848279">SUSE bug 848279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629866" comment="libspice-server1-0.14.3-1.48 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4289</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4289" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4289" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4289" ref_url="https://www.suse.com/security/cve/CVE-2013-4289" source="SUSE CVE"/>
    <description>
    Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4289/">CVE-2013-4289</cve>
	<bugzilla href="https://bugzilla.suse.com/839879">SUSE bug 839879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4290</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4290" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4290" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4290" ref_url="https://www.suse.com/security/cve/CVE-2013-4290" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openjp3d/opj_jp3d_compress.c, (2) bin/jp3d/convert.c, or (3) lib/openjp3d/event.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4290/">CVE-2013-4290</cve>
	<bugzilla href="https://bugzilla.suse.com/839879">SUSE bug 839879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134326" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4326</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4326" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4326" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4326" ref_url="https://www.suse.com/security/cve/CVE-2013-4326" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1548-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1597-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00051.html" source="SUSE-SU"/>
    <description>
    RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4326/">CVE-2013-4326</cve>
	<bugzilla href="https://bugzilla.suse.com/836931">SUSE bug 836931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/836932">SUSE bug 836932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/836937">SUSE bug 836937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/836939">SUSE bug 836939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/864716">SUSE bug 864716</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486543" comment="rtkit-0.11+git.20130926-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151925" comment="rtkit is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134332" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4332</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4332" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4332" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4332" ref_url="https://www.suse.com/security/cve/CVE-2013-4332" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00072.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in glibc's memory allocator functions (pvalloc, valloc, and memalign). If an application used such a function, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4332/">CVE-2013-4332</cve>
	<bugzilla href="https://bugzilla.suse.com/839870">SUSE bug 839870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882910">SUSE bug 882910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4342</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4342" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4342" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4342" ref_url="https://www.suse.com/security/cve/CVE-2013-4342" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0466-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-March/000774.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000898.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0494-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0517-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00034.html" source="SUSE-SU"/>
    <description>
    CVE-2013-4342 xinetd: ignores user and group directives for tcpmux services
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4342/">CVE-2013-4342</cve>
	<bugzilla href="https://bugzilla.suse.com/844230">SUSE bug 844230</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/855685">SUSE bug 855685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882917">SUSE bug 882917</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694930" comment="xinetd-2.3.15.4-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151685" comment="xinetd is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4458</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4458" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4458" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4458" ref_url="https://www.suse.com/security/cve/CVE-2013-4458" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
    <description>
    It was found that getaddrinfo() did not limit the amount of stack memory used during name resolution. An attacker able to make an application resolve an attacker-controlled hostname or IP address could possibly cause the application to exhaust all stack memory and crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4458/">CVE-2013-4458</cve>
	<bugzilla href="https://bugzilla.suse.com/847227">SUSE bug 847227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883217">SUSE bug 883217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/941444">SUSE bug 941444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955181">SUSE bug 955181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967023">SUSE bug 967023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980483">SUSE bug 980483</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4509</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4509" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4509" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4509" ref_url="https://www.suse.com/security/cve/CVE-2013-4509" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1686-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1825-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0068-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00045.html" source="SUSE-SU"/>
    <description>
    The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the entered password characters, which allows physically proximate attackers to obtain a user password by reading the lockscreen.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4509/">CVE-2013-4509</cve>
	<bugzilla href="https://bugzilla.suse.com/847718">SUSE bug 847718</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487314" comment="ibus-chewing-1.6.1-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151927" comment="ibus-chewing is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486644" comment="ibus-pinyin-1.5.0-4.37 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151928" comment="ibus-pinyin is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4533</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4533" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4533" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4533" ref_url="https://www.suse.com/security/cve/CVE-2013-4533" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s-&gt;rx_level value in a savevm image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4533/">CVE-2013-4533</cve>
	<bugzilla href="https://bugzilla.suse.com/1072223">SUSE bug 1072223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/864655">SUSE bug 864655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871442">SUSE bug 871442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964644">SUSE bug 964644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4534</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4534" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4534" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4534" ref_url="https://www.suse.com/security/cve/CVE-2013-4534" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4534/">CVE-2013-4534</cve>
	<bugzilla href="https://bugzilla.suse.com/864811">SUSE bug 864811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871442">SUSE bug 871442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964452">SUSE bug 964452</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4537</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4537" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4537" ref_url="https://www.suse.com/security/cve/CVE-2013-4537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4537/">CVE-2013-4537</cve>
	<bugzilla href="https://bugzilla.suse.com/864391">SUSE bug 864391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871442">SUSE bug 871442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962642">SUSE bug 962642</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4538</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4538" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4538" ref_url="https://www.suse.com/security/cve/CVE-2013-4538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7.2 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4538/">CVE-2013-4538</cve>
	<bugzilla href="https://bugzilla.suse.com/1072223">SUSE bug 1072223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/864769">SUSE bug 864769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871442">SUSE bug 871442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962335">SUSE bug 962335</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4539</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4539" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4539" ref_url="https://www.suse.com/security/cve/CVE-2013-4539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4539/">CVE-2013-4539</cve>
	<bugzilla href="https://bugzilla.suse.com/1072223">SUSE bug 1072223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/864805">SUSE bug 864805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871442">SUSE bug 871442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962758">SUSE bug 962758</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4540</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4540" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4540" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4540" ref_url="https://www.suse.com/security/cve/CVE-2013-4540" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-October/001039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a large (1) prev_level, (2) gpio_level, or (3) gpio_dir value in a savevm image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4540/">CVE-2013-4540</cve>
	<bugzilla href="https://bugzilla.suse.com/864801">SUSE bug 864801</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871442">SUSE bug 871442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880751">SUSE bug 880751</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135123" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5123</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5123" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5123" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5123" ref_url="https://www.suse.com/security/cve/CVE-2013-5123" source="SUSE CVE"/>
    <description>
    The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2013-5123/">CVE-2013-5123</cve>
	<bugzilla href="https://bugzilla.suse.com/864406">SUSE bug 864406</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009511085" comment="python39-pip-20.2.4-7.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623213" comment="python39-pip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009511086" comment="python39-setuptools-44.1.1-7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623214" comment="python39-setuptools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135653" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5653</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5653" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5653" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5653" ref_url="https://www.suse.com/security/cve/CVE-2013-5653" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2492-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2493-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002404.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2574-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2648-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00084.html" source="SUSE-SU"/>
    <description>
    The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5653/">CVE-2013-5653</cve>
	<bugzilla href="https://bugzilla.suse.com/1001951">SUSE bug 1001951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004237">SUSE bug 1004237</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007816">SUSE bug 1007816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036453">SUSE bug 1036453</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5704</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5704" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5704" ref_url="https://www.suse.com/security/cve/CVE-2013-5704" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001415.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1726-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00108.html" source="SUSE-SU"/>
    <description>
    The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding.  NOTE: the vendor states "this is not a security issue in httpd as such."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-5704/">CVE-2013-5704</cve>
	<bugzilla href="https://bugzilla.suse.com/871310">SUSE bug 871310</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914535">SUSE bug 914535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930944">SUSE bug 930944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938728">SUSE bug 938728</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6045</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6045" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6045" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6045" ref_url="https://www.suse.com/security/cve/CVE-2013-6045" source="SUSE CVE"/>
    <description>
    Multiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6045/">CVE-2013-6045</cve>
	<bugzilla href="https://bugzilla.suse.com/1012822">SUSE bug 1012822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/853644">SUSE bug 853644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/853838">SUSE bug 853838</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6052</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6052" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6052" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6052" ref_url="https://www.suse.com/security/cve/CVE-2013-6052" source="SUSE CVE"/>
    <description>
    OpenJPEG 1.3 and earlier allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6052/">CVE-2013-6052</cve>
	<bugzilla href="https://bugzilla.suse.com/853644">SUSE bug 853644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6053</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6053" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6053" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6053" ref_url="https://www.suse.com/security/cve/CVE-2013-6053" source="SUSE CVE"/>
    <description>
    OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6053/">CVE-2013-6053</cve>
	<bugzilla href="https://bugzilla.suse.com/853644">SUSE bug 853644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6054</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6054" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6054" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6054" ref_url="https://www.suse.com/security/cve/CVE-2013-6054" source="SUSE CVE"/>
    <description>
    Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6054/">CVE-2013-6054</cve>
	<bugzilla href="https://bugzilla.suse.com/853644">SUSE bug 853644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6369</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6369" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6369" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6369" ref_url="https://www.suse.com/security/cve/CVE-2013-6369" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0978-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00009.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the jbg_dec_in function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6369/">CVE-2013-6369</cve>
	<bugzilla href="https://bugzilla.suse.com/870855">SUSE bug 870855</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480587" comment="libjbig2-2.1-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151938" comment="libjbig2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6370</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6370" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6370" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6370" ref_url="https://www.suse.com/security/cve/CVE-2013-6370" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0558-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00059.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6370/">CVE-2013-6370</cve>
	<bugzilla href="https://bugzilla.suse.com/870147">SUSE bug 870147</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480594" comment="libjson-c3-0.13-1.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177189" comment="libjson-c3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6371</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6371" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6371" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6371" ref_url="https://www.suse.com/security/cve/CVE-2013-6371" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0558-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00059.html" source="SUSE-SU"/>
    <description>
    The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6371/">CVE-2013-6371</cve>
	<bugzilla href="https://bugzilla.suse.com/870147">SUSE bug 870147</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480594" comment="libjson-c3-0.13-1.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177189" comment="libjson-c3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6393</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6393" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6393" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6393" ref_url="https://www.suse.com/security/cve/CVE-2013-6393" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0403-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-March/000756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-March/000769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0953-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001412.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0272-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0273-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0381-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0319-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html" source="SUSE-SU"/>
    <description>
    The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6393/">CVE-2013-6393</cve>
	<bugzilla href="https://bugzilla.suse.com/860617">SUSE bug 860617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911782">SUSE bug 911782</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480828" comment="libyaml-0-2-0.1.7-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151942" comment="libyaml-0-2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6401</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6401" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6401" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6401" ref_url="https://www.suse.com/security/cve/CVE-2013-6401" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0467-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-March/000775.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0394-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00057.html" source="SUSE-SU"/>
    <description>
    Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted JSON document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6401/">CVE-2013-6401</cve>
	<bugzilla href="https://bugzilla.suse.com/863301">SUSE bug 863301</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480580" comment="libjansson4-2.9-1.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177191" comment="libjansson4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481404" comment="libjansson4-32bit-2.9-1.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695518" comment="libjansson4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6462</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6462" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6462" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6462" ref_url="https://www.suse.com/security/cve/CVE-2013-6462" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000721.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="TID7021434" ref_url="https://www.suse.com/support/kb/doc/?id=7021434" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021738" ref_url="https://www.suse.com/support/kb/doc/?id=7021738" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0073-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0075-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00052.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6462/">CVE-2013-6462</cve>
	<bugzilla href="https://bugzilla.suse.com/854915">SUSE bug 854915</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882908">SUSE bug 882908</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136487" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6487</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6487" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6487" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6487" ref_url="https://www.suse.com/security/cve/CVE-2013-6487" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000865.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0742-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu (gg) parser in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a large Content-Length value, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6487/">CVE-2013-6487</cve>
	<bugzilla href="https://bugzilla.suse.com/861019">SUSE bug 861019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/878540">SUSE bug 878540</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694849" comment="libgadu3-1.12.2-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151952" comment="libgadu3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136887" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6887</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6887" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6887" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6887" ref_url="https://www.suse.com/security/cve/CVE-2013-6887" source="SUSE CVE"/>
    <description>
    OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6887/">CVE-2013-6887</cve>
	<bugzilla href="https://bugzilla.suse.com/853644">SUSE bug 853644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137322" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7322</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7322" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7322" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7322" ref_url="https://www.suse.com/security/cve/CVE-2013-7322" source="SUSE CVE"/>
    <description>
    usersfile.c in liboath in OATH Toolkit before 2.4.1 does not properly handle lines containing an invalid one-time-password (OTP) type and a user name in /etc/users.oath, which causes the wrong line to be updated when invalidating an OTP and allows context-dependent attackers to conduct replay attacks, as demonstrated by a commented out line when using libpam-oath.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7322/">CVE-2013-7322</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488933" comment="libpskc0-2.6.2-1.15 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177192" comment="libpskc0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7423</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7423" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7423" ref_url="https://www.suse.com/security/cve/CVE-2013-7423" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001305.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0351-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html" source="SUSE-SU"/>
    <description>
    The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended locations via a large number of requests that trigger a call to the getaddrinfo function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7423/">CVE-2013-7423</cve>
	<bugzilla href="https://bugzilla.suse.com/915526">SUSE bug 915526</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7437</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7437" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7437" ref_url="https://www.suse.com/security/cve/CVE-2013-7437" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0685-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1909-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00034.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-7437/">CVE-2013-7437</cve>
	<bugzilla href="https://bugzilla.suse.com/924904">SUSE bug 924904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486490" comment="libpotrace0-1.15-3.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151954" comment="libpotrace0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7447</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7447" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7447" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7447" ref_url="https://www.suse.com/security/cve/CVE-2013-7447" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002333.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002336.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0647-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2366-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2374-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00089.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service (crash) via a large image file, which triggers a large memory allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7447/">CVE-2013-7447</cve>
	<bugzilla href="https://bugzilla.suse.com/966682">SUSE bug 966682</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487201" comment="eog-3.34.2-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151978" comment="eog is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487203" comment="eog-lang-3.34.2-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151980" comment="eog-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489210" comment="gnome-photos-3.34.1-1.62 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154116" comment="gnome-photos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489211" comment="gnome-photos-lang-3.34.1-1.62 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177193" comment="gnome-photos-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489212" comment="gnome-shell-search-provider-gnome-photos-3.34.1-1.62 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154117" comment="gnome-shell-search-provider-gnome-photos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487294" comment="gtk2-data-2.24.32+67-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151985" comment="gtk2-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694745" comment="gtk2-immodule-amharic-2.24.32+67-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152005" comment="gtk2-immodule-amharic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694746" comment="gtk2-immodule-inuktitut-2.24.32+67-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152007" comment="gtk2-immodule-inuktitut is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694747" comment="gtk2-immodule-thai-2.24.32+67-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152011" comment="gtk2-immodule-thai is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694748" comment="gtk2-immodule-tigrigna-2.24.32+67-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695519" comment="gtk2-immodule-tigrigna is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694749" comment="gtk2-immodule-vietnamese-2.24.32+67-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152013" comment="gtk2-immodule-vietnamese is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694750" comment="gtk2-immodule-xim-2.24.32+67-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152015" comment="gtk2-immodule-xim is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482037" comment="gtk2-lang-2.24.32+67-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152019" comment="gtk2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482038" comment="gtk2-tools-2.24.32+67-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152026" comment="gtk2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482039" comment="libgtk-2_0-0-2.24.32+67-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152028" comment="libgtk-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0191</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0191" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0191" ref_url="https://www.suse.com/security/cve/CVE-2014-0191" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002905.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008797.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0645-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0701-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0716-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0741-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0753-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
    <description>
    The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-0191/">CVE-2014-0191</cve>
	<bugzilla href="https://bugzilla.suse.com/1014873">SUSE bug 1014873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/876652">SUSE bug 876652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/877506">SUSE bug 877506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/996079">SUSE bug 996079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0209</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0209" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0209" ref_url="https://www.suse.com/security/cve/CVE-2014-0209" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0711-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-0209/">CVE-2014-0209</cve>
	<bugzilla href="https://bugzilla.suse.com/857544">SUSE bug 857544</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0210</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0210" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0210" ref_url="https://www.suse.com/security/cve/CVE-2014-0210" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0711-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol reply to the (1) _fs_recv_conn_setup, (2) fs_read_open_font, (3) fs_read_query_info, (4) fs_read_extent_info, (5) fs_read_glyphs, (6) fs_read_list, or (7) fs_read_list_info function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0210/">CVE-2014-0210</cve>
	<bugzilla href="https://bugzilla.suse.com/857544">SUSE bug 857544</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0211</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0211" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0211" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0211" ref_url="https://www.suse.com/security/cve/CVE-2014-0211" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0711-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0211/">CVE-2014-0211</cve>
	<bugzilla href="https://bugzilla.suse.com/857544">SUSE bug 857544</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0222</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0222" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0222" ref_url="https://www.suse.com/security/cve/CVE-2014-0222" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-October/001032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1952-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1965-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    An integer overflow flaw was found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could use this flaw to corrupt QEMU process memory on the host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0222/">CVE-2014-0222</cve>
	<bugzilla href="https://bugzilla.suse.com/1072223">SUSE bug 1072223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/877642">SUSE bug 877642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964925">SUSE bug 964925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0223</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0223" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0223" ref_url="https://www.suse.com/security/cve/CVE-2014-0223" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-October/001032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00021.html" source="SUSE-SU"/>
    <description>
    An integer overflow flaw was found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could use this flaw to corrupt QEMU process memory on the host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0223/">CVE-2014-0223</cve>
	<bugzilla href="https://bugzilla.suse.com/877645">SUSE bug 877645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140224" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0224</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0224" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0224" ref_url="https://www.suse.com/security/cve/CVE-2014-0224" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0761-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/001012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0743-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7008708" ref_url="https://www.suse.com/support/kb/doc/?id=7008708" source="SUSE-SU"/>
		<reference ref_id="TID7010166" ref_url="https://www.suse.com/support/kb/doc/?id=7010166" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="TID7015158" ref_url="https://www.suse.com/support/kb/doc/?id=7015158" source="SUSE-SU"/>
		<reference ref_id="TID7015162" ref_url="https://www.suse.com/support/kb/doc?id=7015162" source="SUSE-SU"/>
		<reference ref_id="TID7015189" ref_url="https://www.suse.com/support/kb/doc?id=7015189" source="SUSE-SU"/>
		<reference ref_id="TID7015264" ref_url="https://www.suse.com/support/kb/doc?id=7015264" source="SUSE-SU"/>
		<reference ref_id="TID7015300" ref_url="https://www.suse.com/support/kb/doc?id=7015300" source="SUSE-SU"/>
		<reference ref_id="TID7017332" ref_url="https://www.suse.com/support/kb/doc/?id=7017332" source="SUSE-SU"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7021432" ref_url="https://www.suse.com/support/kb/doc/?id=7021432" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021739" ref_url="https://www.suse.com/support/kb/doc/?id=7021739" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
		<reference ref_id="TID7021990" ref_url="https://www.suse.com/support/kb/doc/?id=7021990" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="TID7022768" ref_url="https://www.suse.com/support/kb/doc/?id=7022768" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0765-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-0224/">CVE-2014-0224</cve>
	<bugzilla href="https://bugzilla.suse.com/1146657">SUSE bug 1146657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880891">SUSE bug 880891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883126">SUSE bug 883126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885777">SUSE bug 885777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/892403">SUSE bug 892403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901237">SUSE bug 901237</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/903703">SUSE bug 903703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905018">SUSE bug 905018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914447">SUSE bug 914447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915913">SUSE bug 915913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916239">SUSE bug 916239</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0250</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0250" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0250" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0250" ref_url="https://www.suse.com/security/cve/CVE-2014-0250" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002324.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0862-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0250/">CVE-2014-0250</cve>
	<bugzilla href="https://bugzilla.suse.com/880317">SUSE bug 880317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975218">SUSE bug 975218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0475</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0475" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0475" ref_url="https://www.suse.com/security/cve/CVE-2014-0475" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00009.html" source="SUSE-SU"/>
    <description>
    Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass ForceCommand restrictions and possibly have other unspecified impact via a .. (dot dot) in a (1) LC_*, (2) LANG, or other locale environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0475/">CVE-2014-0475</cve>
	<bugzilla href="https://bugzilla.suse.com/887022">SUSE bug 887022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/896776">SUSE bug 896776</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916222">SUSE bug 916222</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0574</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0574" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0574" ref_url="https://www.suse.com/security/cve/CVE-2014-0574" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1442-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK &amp; Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0574/">CVE-2014-0574</cve>
	<bugzilla href="https://bugzilla.suse.com/905032">SUSE bug 905032</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0791</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0791" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0791" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0791" ref_url="https://www.suse.com/security/cve/CVE-2014-0791" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002324.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0862-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2400-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2402-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00102.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0791/">CVE-2014-0791</cve>
	<bugzilla href="https://bugzilla.suse.com/857491">SUSE bug 857491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975218">SUSE bug 975218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1569</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1569" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1569" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1569" ref_url="https://www.suse.com/security/cve/CVE-2014-1569" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0076-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1569/">CVE-2014-1569</cve>
	<bugzilla href="https://bugzilla.suse.com/910647">SUSE bug 910647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913096">SUSE bug 913096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1587</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1587" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1587" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1587" ref_url="https://www.suse.com/security/cve/CVE-2014-1587" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1654-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1656-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1587/">CVE-2014-1587</cve>
	<bugzilla href="https://bugzilla.suse.com/908009">SUSE bug 908009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141588" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1588</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1588" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1588" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1588" ref_url="https://www.suse.com/security/cve/CVE-2014-1588" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1656-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00069.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1588/">CVE-2014-1588</cve>
	<bugzilla href="https://bugzilla.suse.com/908009">SUSE bug 908009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141589" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1589</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1589" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1589" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1589" ref_url="https://www.suse.com/security/cve/CVE-2014-1589" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1656-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00069.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 34.0 and SeaMonkey before 2.31 provide stylesheets with an incorrect primary namespace, which allows remote attackers to bypass intended access restrictions via an XBL binding.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1589/">CVE-2014-1589</cve>
	<bugzilla href="https://bugzilla.suse.com/908009">SUSE bug 908009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1590</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1590" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1590" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1590" ref_url="https://www.suse.com/security/cve/CVE-2014-1590" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1654-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1656-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application crash) via a crafted JavaScript object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1590/">CVE-2014-1590</cve>
	<bugzilla href="https://bugzilla.suse.com/908009">SUSE bug 908009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1591</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1591" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1591" ref_url="https://www.suse.com/security/cve/CVE-2014-1591" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1656-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00069.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1591/">CVE-2014-1591</cve>
	<bugzilla href="https://bugzilla.suse.com/908009">SUSE bug 908009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1592</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1592" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1592" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1592" ref_url="https://www.suse.com/security/cve/CVE-2014-1592" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1654-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1656-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document during parsing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1592/">CVE-2014-1592</cve>
	<bugzilla href="https://bugzilla.suse.com/908009">SUSE bug 908009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1593</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1593" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1593" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1593" ref_url="https://www.suse.com/security/cve/CVE-2014-1593" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1654-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1656-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code via crafted media content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1593/">CVE-2014-1593</cve>
	<bugzilla href="https://bugzilla.suse.com/908009">SUSE bug 908009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1594</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1594" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1594" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1594" ref_url="https://www.suse.com/security/cve/CVE-2014-1594" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1654-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1656-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 might allow remote attackers to execute arbitrary code by leveraging an incorrect cast from the BasicThebesLayer data type to the BasicContainerLayer data type.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1594/">CVE-2014-1594</cve>
	<bugzilla href="https://bugzilla.suse.com/908009">SUSE bug 908009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2240</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2240" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2240" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2240" ref_url="https://www.suse.com/security/cve/CVE-2014-2240" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-2240/">CVE-2014-2240</cve>
	<bugzilla href="https://bugzilla.suse.com/867620">SUSE bug 867620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916867">SUSE bug 916867</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2497</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2497" ref_url="https://www.suse.com/security/cve/CVE-2014-2497" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0873-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0784-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0786-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00025.html" source="SUSE-SU"/>
    <description>
    The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-2497/">CVE-2014-2497</cve>
	<bugzilla href="https://bugzilla.suse.com/868624">SUSE bug 868624</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2525</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2525" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2525" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2525" ref_url="https://www.suse.com/security/cve/CVE-2014-2525" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-March/000769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0953-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001412.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0500-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0319-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-2525/">CVE-2014-2525</cve>
	<bugzilla href="https://bugzilla.suse.com/868944">SUSE bug 868944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911782">SUSE bug 911782</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480828" comment="libyaml-0-2-0.1.7-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151942" comment="libyaml-0-2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142892" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2892</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2892" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2892" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2892" ref_url="https://www.suse.com/security/cve/CVE-2014-2892" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0590-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00001.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the get_answer function in mmsh.c in libmms before 0.6.4 allows remote attackers to execute arbitrary code via a long line in an MMS over HTTP (MMSH) server response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-2892/">CVE-2014-2892</cve>
	<bugzilla href="https://bugzilla.suse.com/874723">SUSE bug 874723</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486462" comment="libmms0-0.6.4-1.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152113" comment="libmms0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3158</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3158" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3158" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3158" ref_url="https://www.suse.com/security/cve/CVE-2014-3158" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/000983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00026.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "[corrupts] security-relevant variables."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3158/">CVE-2014-3158</cve>
	<bugzilla href="https://bugzilla.suse.com/891489">SUSE bug 891489</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487583" comment="ppp-2.4.7-5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152115" comment="ppp is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3214</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3214" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3214" ref_url="https://www.suse.com/security/cve/CVE-2014-3214" source="SUSE CVE"/>
    <description>
    The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a DNS query that triggers a response with unspecified attributes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3214/">CVE-2014-3214</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143230" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3230</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3230" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3230" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3230" ref_url="https://www.suse.com/security/cve/CVE-2014-3230" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0710-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00072.html" source="SUSE-SU"/>
    <description>
    The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the (1) HTTPS_CA_DIR or (2) HTTPS_CA_FILE environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-3230/">CVE-2014-3230</cve>
	<bugzilla href="https://bugzilla.suse.com/876862">SUSE bug 876862</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480874" comment="perl-LWP-Protocol-https-6.06-1.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152116" comment="perl-LWP-Protocol-https is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3421</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3421" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3421" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3421" ref_url="https://www.suse.com/security/cve/CVE-2014-3421" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001372.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1460-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00080.html" source="SUSE-SU"/>
    <description>
    lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3421/">CVE-2014-3421</cve>
	<bugzilla href="https://bugzilla.suse.com/876847">SUSE bug 876847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628430" comment="emacs-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151668" comment="emacs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628432" comment="emacs-info-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151669" comment="emacs-info is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628433" comment="emacs-nox-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151670" comment="emacs-nox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628434" comment="etags-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151672" comment="etags is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3422</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3422" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3422" ref_url="https://www.suse.com/security/cve/CVE-2014-3422" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001372.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1460-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00080.html" source="SUSE-SU"/>
    <description>
    lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3422/">CVE-2014-3422</cve>
	<bugzilla href="https://bugzilla.suse.com/876847">SUSE bug 876847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628430" comment="emacs-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151668" comment="emacs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628432" comment="emacs-info-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151669" comment="emacs-info is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628433" comment="emacs-nox-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151670" comment="emacs-nox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628434" comment="etags-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151672" comment="etags is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3423</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3423" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3423" ref_url="https://www.suse.com/security/cve/CVE-2014-3423" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001372.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1460-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00080.html" source="SUSE-SU"/>
    <description>
    lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.##### temporary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3423/">CVE-2014-3423</cve>
	<bugzilla href="https://bugzilla.suse.com/876847">SUSE bug 876847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628430" comment="emacs-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151668" comment="emacs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628432" comment="emacs-info-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151669" comment="emacs-info is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628433" comment="emacs-nox-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151670" comment="emacs-nox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628434" comment="etags-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151672" comment="etags is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3424</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3424" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3424" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3424" ref_url="https://www.suse.com/security/cve/CVE-2014-3424" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001372.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1460-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00080.html" source="SUSE-SU"/>
    <description>
    lisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/tramp.##### temporary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3424/">CVE-2014-3424</cve>
	<bugzilla href="https://bugzilla.suse.com/876847">SUSE bug 876847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628430" comment="emacs-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151668" comment="emacs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628432" comment="emacs-info-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151669" comment="emacs-info is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628433" comment="emacs-nox-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151670" comment="emacs-nox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628434" comment="etags-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151672" comment="etags is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3461</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3461" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3461" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3461" ref_url="https://www.suse.com/security/cve/CVE-2014-3461" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-October/001032.html" source="SUSE-SU"/>
    <description>
    CVE-2014-3461 Qemu: usb: fix up post load checks
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3461/">CVE-2014-3461</cve>
	<bugzilla href="https://bugzilla.suse.com/878541">SUSE bug 878541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3504</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3504" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3504" ref_url="https://www.suse.com/security/cve/CVE-2014-3504" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1059-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00038.html" source="SUSE-SU"/>
    <description>
    The (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate functions in Serf 0.2.0 through 1.3.x before 1.3.7 does not properly handle a NUL byte in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3504/">CVE-2014-3504</cve>
	<bugzilla href="https://bugzilla.suse.com/890510">SUSE bug 890510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890511">SUSE bug 890511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480712" comment="libserf-1-1-1.3.9-2.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152131" comment="libserf-1-1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3513</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3513" ref_url="https://www.suse.com/security/cve/CVE-2014-3513" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1357-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001084.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00059.html" source="SUSE-SU"/>
    <description>
    Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2014-3513/">CVE-2014-3513</cve>
	<bugzilla href="https://bugzilla.suse.com/901277">SUSE bug 901277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3537</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3537" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3537" ref_url="https://www.suse.com/security/cve/CVE-2014-3537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1022-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1023-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000963.html" source="SUSE-SU"/>
    <description>
    It was discovered that CUPS allowed certain users to create symbolic links in certain directories under /var/cache/cups/. A local user with the 'lp' group privileges could use this flaw to read the contents of arbitrary files on the system or, potentially, escalate their privileges on the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3537/">CVE-2014-3537</cve>
	<bugzilla href="https://bugzilla.suse.com/887240">SUSE bug 887240</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3567</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3567" ref_url="https://www.suse.com/security/cve/CVE-2014-3567" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1357-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1387-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001084.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3567/">CVE-2014-3567</cve>
	<bugzilla href="https://bugzilla.suse.com/877506">SUSE bug 877506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901277">SUSE bug 901277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3568</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3568" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3568" ref_url="https://www.suse.com/security/cve/CVE-2014-3568" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1357-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1387-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1409-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001094.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-3568/">CVE-2014-3568</cve>
	<bugzilla href="https://bugzilla.suse.com/901277">SUSE bug 901277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911399">SUSE bug 911399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986238">SUSE bug 986238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3569</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3569" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3569" ref_url="https://www.suse.com/security/cve/CVE-2014-3569" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="TID7016027" ref_url="https://www.suse.com/support/kb/doc/?id=7016027" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling.  NOTE: this issue became relevant after the CVE-2014-3568 fix.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3569/">CVE-2014-3569</cve>
	<bugzilla href="https://bugzilla.suse.com/911399">SUSE bug 911399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927623">SUSE bug 927623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986238">SUSE bug 986238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3570</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3570" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3570" ref_url="https://www.suse.com/security/cve/CVE-2014-3570" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3570/">CVE-2014-3570</cve>
	<bugzilla href="https://bugzilla.suse.com/912296">SUSE bug 912296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927623">SUSE bug 927623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/944456">SUSE bug 944456</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3571</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3571" ref_url="https://www.suse.com/security/cve/CVE-2014-3571" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake body, related to the dtls1_get_record function in d1_pkt.c and the ssl3_read_n function in s3_pkt.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3571/">CVE-2014-3571</cve>
	<bugzilla href="https://bugzilla.suse.com/912294">SUSE bug 912294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927623">SUSE bug 927623</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143572" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3572</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3572" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3572" ref_url="https://www.suse.com/security/cve/CVE-2014-3572" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3572/">CVE-2014-3572</cve>
	<bugzilla href="https://bugzilla.suse.com/912015">SUSE bug 912015</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927623">SUSE bug 927623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143581" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3581</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3581" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3581" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3581" ref_url="https://www.suse.com/security/cve/CVE-2014-3581" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001415.html" source="SUSE-SU"/>
    <description>
    The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-3581/">CVE-2014-3581</cve>
	<bugzilla href="https://bugzilla.suse.com/899836">SUSE bug 899836</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3583</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3583" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3583" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3583" ref_url="https://www.suse.com/security/cve/CVE-2014-3583" source="SUSE CVE"/>
    <description>
    The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service (buffer over-read and daemon crash) via long response headers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-3583/">CVE-2014-3583</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3591</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3591" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3591" ref_url="https://www.suse.com/security/cve/CVE-2014-3591" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001473.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1626-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001602.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1503-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00005.html" source="SUSE-SU"/>
    <description>
    Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-3591/">CVE-2014-3591</cve>
	<bugzilla href="https://bugzilla.suse.com/920057">SUSE bug 920057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/949135">SUSE bug 949135</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482233" comment="libgcrypt20-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482234" comment="libgcrypt20-32bit-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3618</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3618" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3618" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3618" ref_url="https://www.suse.com/security/cve/CVE-2014-3618" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1137-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1114-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00008.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send an email with specially crafted headers that, when processed by formail, could cause procmail to crash or, possibly, execute arbitrary code as the user running formail.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3618/">CVE-2014-3618</cve>
	<bugzilla href="https://bugzilla.suse.com/1068648">SUSE bug 1068648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/894999">SUSE bug 894999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898303">SUSE bug 898303</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480880" comment="procmail-3.22-2.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152141" comment="procmail is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3622</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3622" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3622" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3622" ref_url="https://www.suse.com/security/cve/CVE-2014-3622" source="SUSE CVE"/>
    <description>
    Use-after-free vulnerability in the add_post_var function in the Posthandler component in PHP 5.6.x before 5.6.1 might allow remote attackers to execute arbitrary code by leveraging a third-party filter extension that accesses a certain ksep value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-3622/">CVE-2014-3622</cve>
	<bugzilla href="https://bugzilla.suse.com/900934">SUSE bug 900934</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3636</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3636" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3636" ref_url="https://www.suse.com/security/cve/CVE-2014-3636" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001137.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1228-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html" source="SUSE-SU"/>
    <description>
    D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine to have more than the allowed number of file descriptors for a single sendmsg call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3636/">CVE-2014-3636</cve>
	<bugzilla href="https://bugzilla.suse.com/896453">SUSE bug 896453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904017">SUSE bug 904017</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481908" comment="dbus-1-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481910" comment="dbus-1-x11-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481911" comment="libdbus-1-3-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481912" comment="libdbus-1-3-32bit-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3637</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3637" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3637" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3637" ref_url="https://www.suse.com/security/cve/CVE-2014-3637" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1228-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html" source="SUSE-SU"/>
    <description>
    D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3637/">CVE-2014-3637</cve>
	<bugzilla href="https://bugzilla.suse.com/896453">SUSE bug 896453</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481908" comment="dbus-1-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481910" comment="dbus-1-x11-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481911" comment="libdbus-1-3-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481912" comment="libdbus-1-3-32bit-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3639</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3639" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3639" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3639" ref_url="https://www.suse.com/security/cve/CVE-2014-3639" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1228-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html" source="SUSE-SU"/>
    <description>
    The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3639/">CVE-2014-3639</cve>
	<bugzilla href="https://bugzilla.suse.com/896453">SUSE bug 896453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/903055">SUSE bug 903055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/903057">SUSE bug 903057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481908" comment="dbus-1-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481910" comment="dbus-1-x11-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481911" comment="libdbus-1-3-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481912" comment="libdbus-1-3-32bit-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3640</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3640" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3640" ref_url="https://www.suse.com/security/cve/CVE-2014-3640" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001247.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference flaw was found in the way QEMU handled UDP packets with a source port and address of 0 when QEMU's user networking was in use. A local guest user could use this flaw to crash the guest.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<cve href="https://www.suse.com/security/cve/CVE-2014-3640/">CVE-2014-3640</cve>
	<bugzilla href="https://bugzilla.suse.com/897654">SUSE bug 897654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/965112">SUSE bug 965112</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143660" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3660</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3660" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3660" ref_url="https://www.suse.com/security/cve/CVE-2014-3660" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001142.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1330-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
    <description>
    parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the "billion laughs" attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3660/">CVE-2014-3660</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901546">SUSE bug 901546</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3668</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3668" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3668" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3668" ref_url="https://www.suse.com/security/cve/CVE-2014-3668" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1377-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1391-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1733-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0014-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00006.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) via (1) a crafted first argument to the xmlrpc_set_type function or (2) a crafted argument to the xmlrpc_decode function, related to an out-of-bounds read operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3668/">CVE-2014-3668</cve>
	<bugzilla href="https://bugzilla.suse.com/902368">SUSE bug 902368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980366">SUSE bug 980366</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3669</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3669" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3669" ref_url="https://www.suse.com/security/cve/CVE-2014-3669" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1377-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1391-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1733-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0014-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00006.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an argument to the unserialize function that triggers calculation of a large length value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3669/">CVE-2014-3669</cve>
	<bugzilla href="https://bugzilla.suse.com/902360">SUSE bug 902360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980366">SUSE bug 980366</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3670</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3670" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3670" ref_url="https://www.suse.com/security/cve/CVE-2014-3670" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1377-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1391-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1733-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0014-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00006.html" source="SUSE-SU"/>
    <description>
    The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted JPEG image with TIFF thumbnail data that is improperly handled by the exif_thumbnail function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3670/">CVE-2014-3670</cve>
	<bugzilla href="https://bugzilla.suse.com/902357">SUSE bug 902357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980366">SUSE bug 980366</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3672</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3672" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3672" ref_url="https://www.suse.com/security/cve/CVE-2014-3672" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3672/">CVE-2014-3672</cve>
	<bugzilla href="https://bugzilla.suse.com/981264">SUSE bug 981264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3675</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3675" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3675" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3675" ref_url="https://www.suse.com/security/cve/CVE-2014-3675" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00011.html" source="SUSE-SU"/>
    <description>
    Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3675/">CVE-2014-3675</cve>
	<bugzilla href="https://bugzilla.suse.com/889332">SUSE bug 889332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629015" comment="shim-15.4-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152144" comment="shim is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3676</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3676" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3676" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3676" ref_url="https://www.suse.com/security/cve/CVE-2014-3676" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00011.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3676/">CVE-2014-3676</cve>
	<bugzilla href="https://bugzilla.suse.com/889332">SUSE bug 889332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629015" comment="shim-15.4-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152144" comment="shim is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143677" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3677</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3677" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3677" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3677" ref_url="https://www.suse.com/security/cve/CVE-2014-3677" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00011.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3677/">CVE-2014-3677</cve>
	<bugzilla href="https://bugzilla.suse.com/889332">SUSE bug 889332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629015" comment="shim-15.4-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152144" comment="shim is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3686</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3686" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3686" ref_url="https://www.suse.com/security/cve/CVE-2014-3686" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001423.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1313-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1314-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00028.html" source="SUSE-SU"/>
    <description>
    wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3686/">CVE-2014-3686</cve>
	<bugzilla href="https://bugzilla.suse.com/1063667">SUSE bug 1063667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/900611">SUSE bug 900611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915323">SUSE bug 915323</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3693</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3693" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3693" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3693" ref_url="https://www.suse.com/security/cve/CVE-2014-3693" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1412-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1443-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00156.html" source="SUSE-SU"/>
    <description>
    A use-after-free flaw was found in the "Remote Control" capabilities of the LibreOffice Impress application. An attacker could use this flaw to remotely execute code with the permissions of the user running LibreOffice Impress.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3693/">CVE-2014-3693</cve>
	<bugzilla href="https://bugzilla.suse.com/900214">SUSE bug 900214</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3694</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3694" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3694" ref_url="https://www.suse.com/security/cve/CVE-2014-3694" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1376-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html" source="SUSE-SU"/>
    <description>
    The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 do not properly consider the Basic Constraints extension during verification of X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3694/">CVE-2014-3694</cve>
	<bugzilla href="https://bugzilla.suse.com/902495">SUSE bug 902495</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489234" comment="libpurple-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489237" comment="libpurple-lang-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630146" comment="libpurple-tcl-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489239" comment="pidgin-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3695</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3695" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3695" ref_url="https://www.suse.com/security/cve/CVE-2014-3695" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1376-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0925-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00013.html" source="SUSE-SU"/>
    <description>
    markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a large length value in an emoticon response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3695/">CVE-2014-3695</cve>
	<bugzilla href="https://bugzilla.suse.com/902409">SUSE bug 902409</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489234" comment="libpurple-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489237" comment="libpurple-lang-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630146" comment="libpurple-tcl-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489239" comment="pidgin-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3696</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3696" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3696" ref_url="https://www.suse.com/security/cve/CVE-2014-3696" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1376-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0925-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00013.html" source="SUSE-SU"/>
    <description>
    nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a crafted server message that triggers a large memory allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3696/">CVE-2014-3696</cve>
	<bugzilla href="https://bugzilla.suse.com/902410">SUSE bug 902410</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489234" comment="libpurple-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489237" comment="libpurple-lang-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630146" comment="libpurple-tcl-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489239" comment="pidgin-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3697</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3697" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3697" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3697" ref_url="https://www.suse.com/security/cve/CVE-2014-3697" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1376-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html" source="SUSE-SU"/>
    <description>
    Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin before 2.10.10 on Windows allows remote attackers to write to arbitrary files via a drive name in a tar archive of a smiley theme.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3697/">CVE-2014-3697</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489234" comment="libpurple-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489237" comment="libpurple-lang-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630146" comment="libpurple-tcl-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489239" comment="pidgin-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3698</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3698" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3698" ref_url="https://www.suse.com/security/cve/CVE-2014-3698" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1376-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0925-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00013.html" source="SUSE-SU"/>
    <description>
    The jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows remote attackers to obtain sensitive information from process memory via a crafted XMPP message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3698/">CVE-2014-3698</cve>
	<bugzilla href="https://bugzilla.suse.com/902408">SUSE bug 902408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489234" comment="libpurple-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489237" comment="libpurple-lang-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630146" comment="libpurple-tcl-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489239" comment="pidgin-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3710</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3710" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3710" ref_url="https://www.suse.com/security/cve/CVE-2014-3710" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1516-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00113.html" source="SUSE-SU"/>
    <description>
    The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3710/">CVE-2014-3710</cve>
	<bugzilla href="https://bugzilla.suse.com/902367">SUSE bug 902367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/910252">SUSE bug 910252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628435" comment="file-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151700" comment="file is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628437" comment="file-magic-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151702" comment="file-magic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628438" comment="libmagic1-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151703" comment="libmagic1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628439" comment="libmagic1-32bit-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151704" comment="libmagic1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3775</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3775" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3775" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3775" ref_url="https://www.suse.com/security/cve/CVE-2014-3775" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0742-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00004.html" source="SUSE-SU"/>
    <description>
    libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3775/">CVE-2014-3775</cve>
	<bugzilla href="https://bugzilla.suse.com/878540">SUSE bug 878540</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694849" comment="libgadu3-1.12.2-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151952" comment="libgadu3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143859" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3859</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3859" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3859" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3859" ref_url="https://www.suse.com/security/cve/CVE-2014-3859" source="SUSE CVE"/>
    <description>
    libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted packet, as demonstrated by an attack against named, dig, or delv.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3859/">CVE-2014-3859</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3985</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3985" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3985" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3985" ref_url="https://www.suse.com/security/cve/CVE-2014-3985" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0815-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00039.html" source="SUSE-SU"/>
    <description>
    The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a denial of service (crash) via crafted headers that trigger an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3985/">CVE-2014-3985</cve>
	<bugzilla href="https://bugzilla.suse.com/881990">SUSE bug 881990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694858" comment="libminiupnpc16-2.0.20171102-bp153.1.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177201" comment="libminiupnpc16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4038</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4038" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4038" ref_url="https://www.suse.com/security/cve/CVE-2014-4038" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0928-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0953-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0953-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00023.html" source="SUSE-SU"/>
    <description>
    ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or (3) lpd/test/lpd_ela_test.sh and /var/tmp/ras.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-4038/">CVE-2014-4038</cve>
	<bugzilla href="https://bugzilla.suse.com/882667">SUSE bug 882667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628979" comment="ppc64-diag-2.7.6-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695520" comment="ppc64-diag is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4039</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4039" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4039" ref_url="https://www.suse.com/security/cve/CVE-2014-4039" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0928-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0953-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0953-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00023.html" source="SUSE-SU"/>
    <description>
    ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-4039/">CVE-2014-4039</cve>
	<bugzilla href="https://bugzilla.suse.com/882667">SUSE bug 882667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628979" comment="ppc64-diag-2.7.6-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695520" comment="ppc64-diag is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4040</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4040" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4040" ref_url="https://www.suse.com/security/cve/CVE-2014-4040" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/001013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001210.html" source="SUSE-SU"/>
    <description>
    snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-4040/">CVE-2014-4040</cve>
	<bugzilla href="https://bugzilla.suse.com/883174">SUSE bug 883174</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628978" comment="powerpc-utils-1.3.8-7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695521" comment="powerpc-utils is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144043" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4043</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4043" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4043" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4043" ref_url="https://www.suse.com/security/cve/CVE-2014-4043" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000930.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00012.html" source="SUSE-SU"/>
    <description>
    The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allows context-dependent attackers to trigger use-after-free vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-4043/">CVE-2014-4043</cve>
	<bugzilla href="https://bugzilla.suse.com/882600">SUSE bug 882600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939797">SUSE bug 939797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4607</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4607" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4607" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4607" ref_url="https://www.suse.com/security/cve/CVE-2014-4607" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0904-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0932-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00034.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-4607/">CVE-2014-4607</cve>
	<bugzilla href="https://bugzilla.suse.com/883947">SUSE bug 883947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480611" comment="liblzo2-2-2.10-2.22 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152169" comment="liblzo2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4650</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4650" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4650" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4650" ref_url="https://www.suse.com/security/cve/CVE-2014-4650" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000948.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1006-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1009-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1011-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000958.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1041-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1042-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1046-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1070-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1734-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00111.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-4650/">CVE-2014-4650</cve>
	<bugzilla href="https://bugzilla.suse.com/856835">SUSE bug 856835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/856836">SUSE bug 856836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/863741">SUSE bug 863741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885882">SUSE bug 885882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898572">SUSE bug 898572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912739">SUSE bug 912739</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144877" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4877</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4877" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4877" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4877" ref_url="https://www.suse.com/security/cve/CVE-2014-4877" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1366-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1366-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1464-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1380-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00026.html" source="SUSE-SU"/>
    <description>
    Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and consequently execute arbitrary code, via a LIST response that references the same filename within two entries, one of which indicates that the filename is for a symlink.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-4877/">CVE-2014-4877</cve>
	<bugzilla href="https://bugzilla.suse.com/902709">SUSE bug 902709</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482565" comment="wget-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694929" comment="wget-lang-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695522" comment="wget-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5029</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5029" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5029" ref_url="https://www.suse.com/security/cve/CVE-2014-5029" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1022-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000962.html" source="SUSE-SU"/>
    <description>
    The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5029/">CVE-2014-5029</cve>
	<bugzilla href="https://bugzilla.suse.com/887240">SUSE bug 887240</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5030</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5030" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5030" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5030" ref_url="https://www.suse.com/security/cve/CVE-2014-5030" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1022-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000962.html" source="SUSE-SU"/>
    <description>
    CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5030/">CVE-2014-5030</cve>
	<bugzilla href="https://bugzilla.suse.com/887240">SUSE bug 887240</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5031</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5031" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5031" ref_url="https://www.suse.com/security/cve/CVE-2014-5031" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1022-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000962.html" source="SUSE-SU"/>
    <description>
    The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5031/">CVE-2014-5031</cve>
	<bugzilla href="https://bugzilla.suse.com/887240">SUSE bug 887240</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5119</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5119" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5119" ref_url="https://www.suse.com/security/cve/CVE-2014-5119" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1125-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1129-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00009.html" source="SUSE-SU"/>
    <description>
    An off-by-one heap-based buffer overflow flaw was found in glibc's internal __gconv_translit_find() function. An attacker able to make an application call the iconv_open() function with a specially crafted argument could possibly use this flaw to execute arbitrary code with the privileges of that application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5119/">CVE-2014-5119</cve>
	<bugzilla href="https://bugzilla.suse.com/892073">SUSE bug 892073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/903057">SUSE bug 903057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916222">SUSE bug 916222</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5351</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5351" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5351" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5351" ref_url="https://www.suse.com/security/cve/CVE-2014-5351" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00044.html" source="SUSE-SU"/>
    <description>
    The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13 sends old keys in a response to a -randkey -keepold request, which allows remote authenticated users to forge tickets by leveraging administrative access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5351/">CVE-2014-5351</cve>
	<bugzilla href="https://bugzilla.suse.com/897874">SUSE bug 897874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5352</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5352" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5352" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5352" ref_url="https://www.suse.com/security/cve/CVE-2014-5352" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00044.html" source="SUSE-SU"/>
    <description>
    The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the libgssapi_krb5 library in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly maintain security-context handles, which allows remote authenticated users to cause a denial of service (use-after-free and double free, and daemon crash) or possibly execute arbitrary code via crafted GSSAPI traffic, as demonstrated by traffic to kadmind.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5352/">CVE-2014-5352</cve>
	<bugzilla href="https://bugzilla.suse.com/1005509">SUSE bug 1005509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912002">SUSE bug 912002</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5353</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5353" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5353" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5353" ref_url="https://www.suse.com/security/cve/CVE-2014-5353" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001507.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0542-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00061.html" source="SUSE-SU"/>
    <description>
    The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (daemon crash) via a successful LDAP query with no results, as demonstrated by using an incorrect object type for a password policy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-5353/">CVE-2014-5353</cve>
	<bugzilla href="https://bugzilla.suse.com/910457">SUSE bug 910457</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5354</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5354" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5354" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5354" ref_url="https://www.suse.com/security/cve/CVE-2014-5354" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001507.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0542-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00061.html" source="SUSE-SU"/>
    <description>
    plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by creating a database entry for a keyless principal, as demonstrated by a kadmin "add_principal -nokey" or "purgekeys -all" command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-5354/">CVE-2014-5354</cve>
	<bugzilla href="https://bugzilla.suse.com/910458">SUSE bug 910458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5355</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5355" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5355" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5355" ref_url="https://www.suse.com/security/cve/CVE-2014-5355" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001507.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0542-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00061.html" source="SUSE-SU"/>
    <description>
    MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a string ending with a '\0' character, which allows remote attackers to (1) cause a denial of service (NULL pointer dereference) via a zero-byte version string or (2) cause a denial of service (out-of-bounds read) by omitting the '\0' character, related to appl/user_user/server.c and lib/krb5/krb/recvauth.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5355/">CVE-2014-5355</cve>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/918595">SUSE bug 918595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6040</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6040" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6040" ref_url="https://www.suse.com/security/cve/CVE-2014-6040" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1129-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0167-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001214.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00009.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read flaw was found in the way glibc's iconv() function converted certain encoded data to UTF-8. An attacker able to make an application call the iconv() function with a specially crafted argument could use this flaw to crash that application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-6040/">CVE-2014-6040</cve>
	<bugzilla href="https://bugzilla.suse.com/894553">SUSE bug 894553</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/903057">SUSE bug 903057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916222">SUSE bug 916222</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6272</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6272" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6272" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6272" ref_url="https://www.suse.com/security/cve/CVE-2014-6272" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-October/001034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0132-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00070.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_expand, or (3) bufferevent_write function, which triggers a heap-based buffer overflow or an infinite loop.  NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2015-6525 for the functions that are only affected in 2.0 and later.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-27"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-6272/">CVE-2014-6272</cve>
	<bugzilla href="https://bugzilla.suse.com/897243">SUSE bug 897243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943011">SUSE bug 943011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/947373">SUSE bug 947373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480525" comment="libevent-2_1-8-2.1.8-2.23 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177202" comment="libevent-2_1-8 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146588" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6588</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6588" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6588" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6588" ref_url="https://www.suse.com/security/cve/CVE-2014-6588" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6589, CVE-2014-6590, CVE-2014-6595, and CVE-2015-0427.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-6588/">CVE-2014-6588</cve>
	<bugzilla href="https://bugzilla.suse.com/914447">SUSE bug 914447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146589" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6589</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6589" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6589" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6589" ref_url="https://www.suse.com/security/cve/CVE-2014-6589" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6590, CVE-2014-6595, and CVE-2015-0427.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-6589/">CVE-2014-6589</cve>
	<bugzilla href="https://bugzilla.suse.com/914447">SUSE bug 914447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6590</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6590" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6590" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6590" ref_url="https://www.suse.com/security/cve/CVE-2014-6590" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6595, and CVE-2015-0427.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-6590/">CVE-2014-6590</cve>
	<bugzilla href="https://bugzilla.suse.com/914447">SUSE bug 914447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146595" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6595</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6595" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6595" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6595" ref_url="https://www.suse.com/security/cve/CVE-2014-6595" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2015-0427.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-6595/">CVE-2014-6595</cve>
	<bugzilla href="https://bugzilla.suse.com/914447">SUSE bug 914447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7271</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7271" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7271" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7271" ref_url="https://www.suse.com/security/cve/CVE-2014-7271" source="SUSE CVE"/>
    <description>
    Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user "sddm" without authentication.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7271/">CVE-2014-7271</cve>
	<bugzilla href="https://bugzilla.suse.com/897788">SUSE bug 897788</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694917" comment="sddm-0.18.0-lp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152215" comment="sddm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694918" comment="sddm-branding-openSUSE-0.18.0-lp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152216" comment="sddm-branding-openSUSE is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7272</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7272" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7272" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7272" ref_url="https://www.suse.com/security/cve/CVE-2014-7272" source="SUSE CVE"/>
    <description>
    Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to gain root privileges because code running as root performs write operations within a user home directory, and this user may have created links in advance (exploitation requires the user to win a race condition in the ~/.Xauthority chown case, but not other cases).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7272/">CVE-2014-7272</cve>
	<bugzilla href="https://bugzilla.suse.com/897788">SUSE bug 897788</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694917" comment="sddm-0.18.0-lp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152215" comment="sddm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694918" comment="sddm-branding-openSUSE-0.18.0-lp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152216" comment="sddm-branding-openSUSE is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7300</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7300" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7300" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7300" ref_url="https://www.suse.com/security/cve/CVE-2014-7300" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001293.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1348-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00005.html" source="SUSE-SU"/>
    <description>
    GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7300/">CVE-2014-7300</cve>
	<bugzilla href="https://bugzilla.suse.com/900031">SUSE bug 900031</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629140" comment="gnome-settings-daemon-3.34.2+0-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154123" comment="gnome-settings-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629142" comment="gnome-settings-daemon-lang-3.34.2+0-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154124" comment="gnome-settings-daemon-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7815</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7815" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7815" ref_url="https://www.suse.com/security/cve/CVE-2014-7815" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1782-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7815/">CVE-2014-7815</cve>
	<bugzilla href="https://bugzilla.suse.com/902737">SUSE bug 902737</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962627">SUSE bug 962627</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7817</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7817" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7817" ref_url="https://www.suse.com/security/cve/CVE-2014-7817" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001305.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0351-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html" source="SUSE-SU"/>
    <description>
    It was found that the wordexp() function would perform command substitution even when the WRDE_NOCMD flag was specified. An attacker able to provide specially crafted input to an application using the wordexp() function, and not sanitizing the input correctly, could potentially use this flaw to execute arbitrary commands with the credentials of the user running that application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7817/">CVE-2014-7817</cve>
	<bugzilla href="https://bugzilla.suse.com/906371">SUSE bug 906371</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7823</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7823" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7823" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7823" ref_url="https://www.suse.com/security/cve/CVE-2014-7823" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001247.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1471-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00083.html" source="SUSE-SU"/>
    <description>
    The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_SECURE flag.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-7823/">CVE-2014-7823</cve>
	<bugzilla href="https://bugzilla.suse.com/904176">SUSE bug 904176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7824</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7824" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7824" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7824" ref_url="https://www.suse.com/security/cve/CVE-2014-7824" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1455-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00078.html" source="SUSE-SU"/>
    <description>
    D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local users to cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3636.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7824/">CVE-2014-7824</cve>
	<bugzilla href="https://bugzilla.suse.com/904017">SUSE bug 904017</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481908" comment="dbus-1-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481910" comment="dbus-1-x11-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481911" comment="libdbus-1-3-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481912" comment="libdbus-1-3-32bit-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7840</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7840" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7840" ref_url="https://www.suse.com/security/cve/CVE-2014-7840" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001243.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001247.html" source="SUSE-SU"/>
    <description>
    It was found that certain values that were read when loading RAM during migration were not validated. A user able to alter the savevm data (either on the disk or over the wire during migration) could use either of these flaws to corrupt QEMU process memory on the (destination) host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7840/">CVE-2014-7840</cve>
	<bugzilla href="https://bugzilla.suse.com/905097">SUSE bug 905097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7844</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7844" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7844" ref_url="https://www.suse.com/security/cve/CVE-2014-7844" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1713-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00097.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way mailx handled the parsing of email addresses. A syntactically valid email address could allow a local attacker to cause mailx to execute arbitrary shell commands through shell meta-characters (CVE-2004-2771) and the direct command execution functionality (CVE-2014-7844).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-7844/">CVE-2014-7844</cve>
	<bugzilla href="https://bugzilla.suse.com/909208">SUSE bug 909208</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480839" comment="mailx-12.5-1.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151013" comment="mailx is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7899</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7899" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7899" ref_url="https://www.suse.com/security/cve/CVE-2014-7899" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Google Chrome before 38.0.2125.101 allows remote attackers to spoof the address bar by placing a blob: substring at the beginning of the URL, followed by the original URI scheme and a long username string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7899/">CVE-2014-7899</cve>
	<bugzilla href="https://bugzilla.suse.com/906320">SUSE bug 906320</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7900</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7900" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7900" ref_url="https://www.suse.com/security/cve/CVE-2014-7900" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the CPDF_Parser::IsLinearizedFile function in fpdfapi/fpdf_parser/fpdf_parser_parser.cpp in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-7900/">CVE-2014-7900</cve>
	<bugzilla href="https://bugzilla.suse.com/906317">SUSE bug 906317</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147901" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7901</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7901" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7901" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7901" ref_url="https://www.suse.com/security/cve/CVE-2014-7901" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the opj_t2_read_packet_data function in fxcodec/fx_libopenjpeg/libopenjpeg20/t2.c in OpenJPEG in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long segment in a JPEG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-7901/">CVE-2014-7901</cve>
	<bugzilla href="https://bugzilla.suse.com/906322">SUSE bug 906322</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147902" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7902</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7902" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7902" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7902" ref_url="https://www.suse.com/security/cve/CVE-2014-7902" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-7902/">CVE-2014-7902</cve>
	<bugzilla href="https://bugzilla.suse.com/906328">SUSE bug 906328</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147903" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7903</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7903" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7903" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7903" ref_url="https://www.suse.com/security/cve/CVE-2014-7903" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in OpenJPEG before r2911 in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-7903/">CVE-2014-7903</cve>
	<bugzilla href="https://bugzilla.suse.com/906318">SUSE bug 906318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147904" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7904</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7904" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7904" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7904" ref_url="https://www.suse.com/security/cve/CVE-2014-7904" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Skia, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7904/">CVE-2014-7904</cve>
	<bugzilla href="https://bugzilla.suse.com/906321">SUSE bug 906321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7905</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7905" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7905" ref_url="https://www.suse.com/security/cve/CVE-2014-7905" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Google Chrome before 39.0.2171.65 on Android does not prevent navigation to a URL in cases where an intent for the URL lacks CATEGORY_BROWSABLE, which allows remote attackers to bypass intended access restrictions via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7905/">CVE-2014-7905</cve>
	<bugzilla href="https://bugzilla.suse.com/906330">SUSE bug 906330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147906" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7906</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7906" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7906" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7906" ref_url="https://www.suse.com/security/cve/CVE-2014-7906" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Flash content that triggers an attempted PepperMediaDeviceManager access outside of the object's lifetime.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7906/">CVE-2014-7906</cve>
	<bugzilla href="https://bugzilla.suse.com/906319">SUSE bug 906319</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7907</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7907" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7907" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7907" ref_url="https://www.suse.com/security/cve/CVE-2014-7907" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in modules/screen_orientation/ScreenOrientationController.cpp in Blink, as used in Google Chrome before 39.0.2171.65, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger improper handling of a detached frame, related to the (1) lock and (2) unlock methods.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7907/">CVE-2014-7907</cve>
	<bugzilla href="https://bugzilla.suse.com/906323">SUSE bug 906323</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7908</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7908" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7908" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7908" ref_url="https://www.suse.com/security/cve/CVE-2014-7908" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the CheckMov function in media/base/container_names.cc in Google Chrome before 39.0.2171.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a large atom in (1) MPEG-4 or (2) QuickTime .mov data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7908/">CVE-2014-7908</cve>
	<bugzilla href="https://bugzilla.suse.com/906324">SUSE bug 906324</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147909" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7909</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7909" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7909" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7909" ref_url="https://www.suse.com/security/cve/CVE-2014-7909" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00015.html" source="SUSE-SU"/>
    <description>
    effects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a hash key using uninitialized integer values, which might allow remote attackers to cause a denial of service by rendering crafted data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7909/">CVE-2014-7909</cve>
	<bugzilla href="https://bugzilla.suse.com/906326">SUSE bug 906326</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147910" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7910</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7910" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7910" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7910" ref_url="https://www.suse.com/security/cve/CVE-2014-7910" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7910/">CVE-2014-7910</cve>
	<bugzilla href="https://bugzilla.suse.com/906327">SUSE bug 906327</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147923" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7923</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7923" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7923" ref_url="https://www.suse.com/security/cve/CVE-2014-7923" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7923/">CVE-2014-7923</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147924" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7924</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7924" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7924" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7924" ref_url="https://www.suse.com/security/cve/CVE-2014-7924" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering duplicate BLOB references, related to content/browser/indexed_db/indexed_db_callbacks.cc and content/browser/indexed_db/indexed_db_dispatcher_host.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7924/">CVE-2014-7924</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147925" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7925</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7925" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7925" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7925" ref_url="https://www.suse.com/security/cve/CVE-2014-7925" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an audio-rendering thread in which AudioNode data is improperly maintained.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7925/">CVE-2014-7925</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147926" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7926</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7926" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7926" ref_url="https://www.suse.com/security/cve/CVE-2014-7926" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7926/">CVE-2014-7926</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147927" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7927</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7927" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7927" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7927" ref_url="https://www.suse.com/security/cve/CVE-2014-7927" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7927/">CVE-2014-7927</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7928</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7928" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7928" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7928" ref_url="https://www.suse.com/security/cve/CVE-2014-7928" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code that triggers an array copy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7928/">CVE-2014-7928</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147929" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7929</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7929" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7929" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7929" ref_url="https://www.suse.com/security/cve/CVE-2014-7929" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving movement of a SCRIPT element across documents.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7929/">CVE-2014-7929</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147930" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7930</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7930" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7930" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7930" ref_url="https://www.suse.com/security/cve/CVE-2014-7930" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of TreeScope data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7930/">CVE-2014-7930</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147932" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7932</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7932" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7932" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7932" ref_url="https://www.suse.com/security/cve/CVE-2014-7932" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updates of detached elements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7932/">CVE-2014-7932</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147933" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7933</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7933" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7933" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7933" ref_url="https://www.suse.com/security/cve/CVE-2014-7933" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-7933/">CVE-2014-7933</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147934" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7934</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7934" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7934" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7934" ref_url="https://www.suse.com/security/cve/CVE-2014-7934" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unexpected absence of document data structures.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7934/">CVE-2014-7934</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7935</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7935" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7935" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7935" ref_url="https://www.suse.com/security/cve/CVE-2014-7935" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in browser/speech/tts_message_filter.cc in the Speech implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving utterances from a closed tab.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7935/">CVE-2014-7935</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147936" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7936</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7936" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7936" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7936" ref_url="https://www.suse.com/security/cve/CVE-2014-7936" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/location_bar/zoom_bubble_view.cc in the Views implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that triggers improper maintenance of a zoom bubble.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7936/">CVE-2014-7936</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147937" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7937</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7937" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7937" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7937" ref_url="https://www.suse.com/security/cve/CVE-2014-7937" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Vorbis I data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7937/">CVE-2014-7937</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147938" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7938</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7938" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7938" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7938" ref_url="https://www.suse.com/security/cve/CVE-2014-7938" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The Fonts implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7938/">CVE-2014-7938</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7939</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7939" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7939" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7939" ref_url="https://www.suse.com/security/cve/CVE-2014-7939" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an "X-Content-Type-Options: nosniff" header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7939/">CVE-2014-7939</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147940" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7940</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7940" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7940" ref_url="https://www.suse.com/security/cve/CVE-2014-7940" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted character sequence.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7940/">CVE-2014-7940</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147941" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7941</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7941" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7941" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7941" ref_url="https://www.suse.com/security/cve/CVE-2014-7941" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect data type for a certain length value, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted X11 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7941/">CVE-2014-7941</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7942</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7942" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7942" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7942" ref_url="https://www.suse.com/security/cve/CVE-2014-7942" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7942/">CVE-2014-7942</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147943" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7943</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7943" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7943" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7943" ref_url="https://www.suse.com/security/cve/CVE-2014-7943" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7943/">CVE-2014-7943</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7944</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7944" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7944" ref_url="https://www.suse.com/security/cve/CVE-2014-7944" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The sycc422_to_rgb function in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 40.0.2214.91, does not properly handle odd values of image width, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7944/">CVE-2014-7944</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7945</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7945" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7945" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7945" ref_url="https://www.suse.com/security/cve/CVE-2014-7945" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    OpenJPEG before r2908, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document, related to j2k.c, jp2.c, and t2.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7945/">CVE-2014-7945</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147946" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7946</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7946" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7946" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7946" ref_url="https://www.suse.com/security/cve/CVE-2014-7946" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The RenderTable::simplifiedNormalFlowLayout function in core/rendering/RenderTable.cpp in Blink, as used in Google Chrome before 40.0.2214.91, skips captions during table layout in certain situations, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors related to the Fonts implementation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7946/">CVE-2014-7946</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7947</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7947" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7947" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7947" ref_url="https://www.suse.com/security/cve/CVE-2014-7947" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document, related to j2k.c, jp2.c, pi.c, t1.c, t2.c, and tcd.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7947/">CVE-2014-7947</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979911">SUSE bug 979911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147948" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7948</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7948" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7948" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7948" ref_url="https://www.suse.com/security/cve/CVE-2014-7948" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The AppCacheUpdateJob::URLFetcher::OnResponseStarted function in content/browser/appcache/appcache_update_job.cc in Google Chrome before 40.0.2214.91 proceeds with AppCache caching for SSL sessions even if there is an X.509 certificate error, which allows man-in-the-middle attackers to spoof HTML5 application content via a crafted certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7948/">CVE-2014-7948</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8104</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8104" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8104" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8104" ref_url="https://www.suse.com/security/cve/CVE-2014-8104" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1605-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00008.html" source="SUSE-SU"/>
    <description>
    OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control channel packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8104/">CVE-2014-8104</cve>
	<bugzilla href="https://bugzilla.suse.com/907764">SUSE bug 907764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694906" comment="openvpn-2.4.3-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152221" comment="openvpn is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8106</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8106" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8106" ref_url="https://www.suse.com/security/cve/CVE-2014-8106" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001243.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001247.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
    <description>
    It was found that the Cirrus blit region checks were insufficient. A privileged guest user could use this flaw to write outside of VRAM-allocated buffer boundaries in the host's QEMU process address space with attacker-provided data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8106/">CVE-2014-8106</cve>
	<bugzilla href="https://bugzilla.suse.com/1023004">SUSE bug 1023004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/907805">SUSE bug 907805</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8109</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8109" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8109" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8109" ref_url="https://www.suse.com/security/cve/CVE-2014-8109" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001415.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1726-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00108.html" source="SUSE-SU"/>
    <description>
    mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging multiple Require directives, as demonstrated by a configuration that specifies authorization for one group to access a certain directory, and authorization for a second group to access a second directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-8109/">CVE-2014-8109</cve>
	<bugzilla href="https://bugzilla.suse.com/909715">SUSE bug 909715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8116</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8116" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8116" ref_url="https://www.suse.com/security/cve/CVE-2014-8116" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003403.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1721-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00105.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00071.html" source="SUSE-SU"/>
    <description>
    The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8116/">CVE-2014-8116</cve>
	<bugzilla href="https://bugzilla.suse.com/910252">SUSE bug 910252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/910253">SUSE bug 910253</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917152">SUSE bug 917152</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628435" comment="file-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151700" comment="file is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628437" comment="file-magic-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151702" comment="file-magic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628438" comment="libmagic1-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151703" comment="libmagic1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628439" comment="libmagic1-32bit-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151704" comment="libmagic1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8117</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8117" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8117" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8117" ref_url="https://www.suse.com/security/cve/CVE-2014-8117" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003403.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1721-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00105.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00071.html" source="SUSE-SU"/>
    <description>
    softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8117/">CVE-2014-8117</cve>
	<bugzilla href="https://bugzilla.suse.com/910252">SUSE bug 910252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/910253">SUSE bug 910253</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917152">SUSE bug 917152</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628435" comment="file-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151700" comment="file is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628437" comment="file-magic-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151702" comment="file-magic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628438" comment="libmagic1-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151703" comment="libmagic1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628439" comment="libmagic1-32bit-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151704" comment="libmagic1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8119</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8119" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8119" ref_url="https://www.suse.com/security/cve/CVE-2014-8119" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003801.html" source="SUSE-SU"/>
    <description>
    The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of service (application crash) via vectors involving augeas path expressions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-8119/">CVE-2014-8119</cve>
	<bugzilla href="https://bugzilla.suse.com/925225">SUSE bug 925225</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480071" comment="augeas-1.10.1-1.11 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154101" comment="augeas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480073" comment="augeas-lenses-1.10.1-1.11 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151682" comment="augeas-lenses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480074" comment="libaugeas0-1.10.1-1.11 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151683" comment="libaugeas0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8121</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8121" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8121" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8121" ref_url="https://www.suse.com/security/cve/CVE-2014-8121" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001651.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0955-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00084.html" source="SUSE-SU"/>
    <description>
    It was found that the files back end of Name Service Switch (NSS) did not isolate iteration over an entire database from key-based look-up API calls. An application performing look-ups on a database while iterating over it could enter an infinite loop, leading to a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-8121/">CVE-2014-8121</cve>
	<bugzilla href="https://bugzilla.suse.com/918187">SUSE bug 918187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945779">SUSE bug 945779</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8127</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8127" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8127" ref_url="https://www.suse.com/security/cve/CVE-2014-8127" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1420-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001561.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0450-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1213-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    CVE-2014-8127 libtiff: out-of-bounds read with malformed TIFF image in multiple tools
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-04"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-8127/">CVE-2014-8127</cve>
	<bugzilla href="https://bugzilla.suse.com/1206220">SUSE bug 1206220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914890">SUSE bug 914890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916925">SUSE bug 916925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942690">SUSE bug 942690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8128</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8128" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8128" ref_url="https://www.suse.com/security/cve/CVE-2014-8128" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1420-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001561.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0073-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0450-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1213-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0097-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html" source="SUSE-SU"/>
    <description>
    LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-04"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-8128/">CVE-2014-8128</cve>
	<bugzilla href="https://bugzilla.suse.com/1007276">SUSE bug 1007276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1017690">SUSE bug 1017690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1040322">SUSE bug 1040322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206220">SUSE bug 1206220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914890">SUSE bug 914890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916925">SUSE bug 916925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942690">SUSE bug 942690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960341">SUSE bug 960341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/974621">SUSE bug 974621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983436">SUSE bug 983436</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8129</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8129" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8129" ref_url="https://www.suse.com/security/cve/CVE-2014-8129" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1420-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001561.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0450-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1213-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00019.html" source="SUSE-SU"/>
    <description>
    CVE-2014-8129 libtiff: out-of-bounds read/write with malformed TIFF image in tiff2pdf
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-04"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-8129/">CVE-2014-8129</cve>
	<bugzilla href="https://bugzilla.suse.com/1206220">SUSE bug 1206220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914890">SUSE bug 914890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916925">SUSE bug 916925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942690">SUSE bug 942690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8130</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8130" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8130" ref_url="https://www.suse.com/security/cve/CVE-2014-8130" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1420-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001561.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0450-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1213-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00019.html" source="SUSE-SU"/>
    <description>
    The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-04"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-8130/">CVE-2014-8130</cve>
	<bugzilla href="https://bugzilla.suse.com/1206220">SUSE bug 1206220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914890">SUSE bug 914890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916925">SUSE bug 916925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942690">SUSE bug 942690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8131</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8131" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8131" ref_url="https://www.suse.com/security/cve/CVE-2014-8131" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00005.html" source="SUSE-SU"/>
    <description>
    The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-8131/">CVE-2014-8131</cve>
	<bugzilla href="https://bugzilla.suse.com/909274">SUSE bug 909274</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8132</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8132" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8132" ref_url="https://www.suse.com/security/cve/CVE-2014-8132" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0017-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00007.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted kexinit packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8132/">CVE-2014-8132</cve>
	<bugzilla href="https://bugzilla.suse.com/910790">SUSE bug 910790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928323">SUSE bug 928323</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482409" comment="libssh4-0.8.7-10.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151772" comment="libssh4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482410" comment="libssh4-32bit-0.8.7-10.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153278" comment="libssh4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8137</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8137" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8137" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8137" ref_url="https://www.suse.com/security/cve/CVE-2014-8137" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0258-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001216.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0038-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0039-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0042-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8137/">CVE-2014-8137</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909474">SUSE bug 909474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909475">SUSE bug 909475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911837">SUSE bug 911837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968373">SUSE bug 968373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8138</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8138" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8138" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8138" ref_url="https://www.suse.com/security/cve/CVE-2014-8138" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0258-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001216.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0217-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8138/">CVE-2014-8138</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909474">SUSE bug 909474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909475">SUSE bug 909475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911837">SUSE bug 911837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8139</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8139" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8139" ref_url="https://www.suse.com/security/cve/CVE-2014-8139" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0026-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0070-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0377-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001255.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0240-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00036.html" source="SUSE-SU"/>
    <description>
    A buffer overflow flaw was found in the way unzip computed the CRC32 checksum of certain extra fields of a file. A specially crafted Zip archive could cause unzip to crash when the archive was tested with unzip's '-t' option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-8139/">CVE-2014-8139</cve>
	<bugzilla href="https://bugzilla.suse.com/909214">SUSE bug 909214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915880">SUSE bug 915880</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152223" comment="unzip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694925" comment="unzip-doc-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152224" comment="unzip-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8140</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8140" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8140" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8140" ref_url="https://www.suse.com/security/cve/CVE-2014-8140" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0026-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0070-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001161.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0240-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00036.html" source="SUSE-SU"/>
    <description>
    An integer underflow flaw, leading to a buffer overflow, was found in the way unzip uncompressed certain extra fields of a file. A specially crafted Zip archive could cause unzip to crash when the archive was tested with unzip's '-t' option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-8140/">CVE-2014-8140</cve>
	<bugzilla href="https://bugzilla.suse.com/909214">SUSE bug 909214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914442">SUSE bug 914442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915880">SUSE bug 915880</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152223" comment="unzip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694925" comment="unzip-doc-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152224" comment="unzip-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8141</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8141" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8141" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8141" ref_url="https://www.suse.com/security/cve/CVE-2014-8141" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0026-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0070-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001161.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0240-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00036.html" source="SUSE-SU"/>
    <description>
    A buffer overflow flaw was found in the way unzip handled Zip64 files. A specially crafted Zip archive could possibly cause unzip to crash when the archive was uncompressed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-8141/">CVE-2014-8141</cve>
	<bugzilla href="https://bugzilla.suse.com/909214">SUSE bug 909214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915880">SUSE bug 915880</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152223" comment="unzip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694925" comment="unzip-doc-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152224" comment="unzip-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8143</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8143" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8143" ref_url="https://www.suse.com/security/cve/CVE-2014-8143" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
    <description>
    Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set the LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by leveraging delegation of authority for user-account or computer-account creation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8143/">CVE-2014-8143</cve>
	<bugzilla href="https://bugzilla.suse.com/914279">SUSE bug 914279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8146</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8146" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8146" ref_url="https://www.suse.com/security/cve/CVE-2014-8146" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001669.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1401-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004696.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00156.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2364-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1422-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00103.html" source="SUSE-SU"/>
    <description>
    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via crafted text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8146/">CVE-2014-8146</cve>
	<bugzilla href="https://bugzilla.suse.com/1066493">SUSE bug 1066493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/910805">SUSE bug 910805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927951">SUSE bug 927951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/929629">SUSE bug 929629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959178">SUSE bug 959178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8147</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8147" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8147" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8147" ref_url="https://www.suse.com/security/cve/CVE-2014-8147" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001669.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1401-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004696.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00156.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2364-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1422-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00103.html" source="SUSE-SU"/>
    <description>
    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8147/">CVE-2014-8147</cve>
	<bugzilla href="https://bugzilla.suse.com/1066493">SUSE bug 1066493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1079317">SUSE bug 1079317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/910805">SUSE bug 910805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/910806">SUSE bug 910806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927951">SUSE bug 927951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/929629">SUSE bug 929629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959178">SUSE bug 959178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8148</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8148" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8148" ref_url="https://www.suse.com/security/cve/CVE-2014-8148" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0111-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00051.html" source="SUSE-SU"/>
    <description>
    The default D-Bus access control rule in Midgard2 10.05.7.1 allows local users to send arbitrary method calls or signals to any process on the system bus and possibly execute arbitrary code with root privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8148/">CVE-2014-8148</cve>
	<bugzilla href="https://bugzilla.suse.com/912023">SUSE bug 912023</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481908" comment="dbus-1-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481910" comment="dbus-1-x11-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481911" comment="libdbus-1-3-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481912" comment="libdbus-1-3-32bit-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8150</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8150" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8150" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8150" ref_url="https://www.suse.com/security/cve/CVE-2014-8150" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001164.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001199.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0248-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00040.html" source="SUSE-SU"/>
    <description>
    CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8150/">CVE-2014-8150</cve>
	<bugzilla href="https://bugzilla.suse.com/911363">SUSE bug 911363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8157</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8157" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8157" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8157" ref_url="https://www.suse.com/security/cve/CVE-2014-8157" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0288-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001223.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0200-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8157/">CVE-2014-8157</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911837">SUSE bug 911837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8158</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8158" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8158" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8158" ref_url="https://www.suse.com/security/cve/CVE-2014-8158" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0288-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0200-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8158/">CVE-2014-8158</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911837">SUSE bug 911837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8169</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8169" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8169" ref_url="https://www.suse.com/security/cve/CVE-2014-8169" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1020-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001428.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0475-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00033.html" source="SUSE-SU"/>
    <description>
    It was found that program-based automounter maps that used interpreted languages such as Python would use standard environment variables to locate and load modules of those languages. A local attacker could potentially use this flaw to escalate their privileges on the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8169/">CVE-2014-8169</cve>
	<bugzilla href="https://bugzilla.suse.com/917977">SUSE bug 917977</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694718" comment="autofs-5.1.3-7.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152504" comment="autofs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8240</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8240" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8240" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8240" ref_url="https://www.suse.com/security/cve/CVE-2014-8240" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1592-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001100.html" source="SUSE-SU"/>
    <description>
    Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8240/">CVE-2014-8240</cve>
	<bugzilla href="https://bugzilla.suse.com/900896">SUSE bug 900896</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628599" comment="libXvnc1-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628600" comment="tigervnc-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628601" comment="xorg-x11-Xvnc-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628602" comment="xorg-x11-Xvnc-module-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276536" comment="xorg-x11-Xvnc-module is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8242</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8242" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8242" ref_url="https://www.suse.com/security/cve/CVE-2014-8242" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001811.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001813.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1752-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00034.html" source="SUSE-SU"/>
    <description>
    librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-8242/">CVE-2014-8242</cve>
	<bugzilla href="https://bugzilla.suse.com/900914">SUSE bug 900914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922710">SUSE bug 922710</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482539" comment="rsync-3.1.3-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151567" comment="rsync is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148275" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8275</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8275" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8275" ref_url="https://www.suse.com/security/cve/CVE-2014-8275" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate's unsigned portion, related to crypto/asn1/a_verify.c, crypto/dsa/dsa_asn1.c, crypto/ecdsa/ecs_vrf.c, and crypto/x509/x_all.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8275/">CVE-2014-8275</cve>
	<bugzilla href="https://bugzilla.suse.com/912018">SUSE bug 912018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927623">SUSE bug 927623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8483</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8483" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8483" ref_url="https://www.suse.com/security/cve/CVE-2014-8483" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1382-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1406-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0573-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html" source="SUSE-SU"/>
    <description>
    The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a malformed string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-8483/">CVE-2014-8483</cve>
	<bugzilla href="https://bugzilla.suse.com/902670">SUSE bug 902670</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694818" comment="konversation-1.7.5-bp153.1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152510" comment="konversation is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694819" comment="konversation-lang-1.7.5-bp153.1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152511" comment="konversation-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8500</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8500" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8500" ref_url="https://www.suse.com/security/cve/CVE-2014-8500" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0011-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0096-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0480-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0488-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1250-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00039.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8500/">CVE-2014-8500</cve>
	<bugzilla href="https://bugzilla.suse.com/908994">SUSE bug 908994</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8517</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8517" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8517" ref_url="https://www.suse.com/security/cve/CVE-2014-8517" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1383-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00029.html" source="SUSE-SU"/>
    <description>
    The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to execute arbitrary commands via a | (pipe) character at the end of an HTTP redirect.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8517/">CVE-2014-8517</cve>
	<bugzilla href="https://bugzilla.suse.com/903011">SUSE bug 903011</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694921" comment="tnftp-20151004-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152514" comment="tnftp is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8564</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8564" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8564" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8564" ref_url="https://www.suse.com/security/cve/CVE-2014-8564" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1472-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00084.html" source="SUSE-SU"/>
    <description>
    The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR), related to generating key IDs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8564/">CVE-2014-8564</cve>
	<bugzilla href="https://bugzilla.suse.com/904603">SUSE bug 904603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628489" comment="gnutls-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628491" comment="libgnutls30-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177128" comment="libgnutls30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628492" comment="libgnutls30-32bit-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009235745" comment="libgnutls30-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8600</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8600" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8600" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8600" ref_url="https://www.suse.com/security/cve/CVE-2014-8600" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0573-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html" source="SUSE-SU"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in KDE-Runtime 4.14.3 and earlier, kwebkitpart 1.3.4 and earlier, and kio-extras 5.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via a crafted URI using the (1) zip, (2) trash, (3) tar, (4) thumbnail, (5) smtps, (6) smtp, (7) smb, (8) remote, (9) recentdocuments, (10) nntps, (11) nntp, (12) network, (13) mbox, (14) ldaps, (15) ldap, (16) fonts, (17) file, (18) desktop, (19) cgi, (20) bookmarks, or (21) ar scheme, which is not properly handled in an error message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-8600/">CVE-2014-8600</cve>
	<bugzilla href="https://bugzilla.suse.com/905742">SUSE bug 905742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694815" comment="kio-extras5-20.04.2-bp153.2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152515" comment="kio-extras5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694816" comment="kio-extras5-lang-20.04.2-bp153.2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161288" comment="kio-extras5-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694817" comment="libkioarchive5-20.04.2-bp153.2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177203" comment="libkioarchive5 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148634" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8634</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8634" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8634" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8634" ref_url="https://www.suse.com/security/cve/CVE-2014-8634" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0076-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0133-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8634/">CVE-2014-8634</cve>
	<bugzilla href="https://bugzilla.suse.com/913064">SUSE bug 913064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913096">SUSE bug 913096</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8635</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8635" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8635" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8635" ref_url="https://www.suse.com/security/cve/CVE-2014-8635" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0076-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0133-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8635/">CVE-2014-8635</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8636</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8636" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8636" ref_url="https://www.suse.com/security/cve/CVE-2014-8636" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8636/">CVE-2014-8636</cve>
	<bugzilla href="https://bugzilla.suse.com/913096">SUSE bug 913096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913102">SUSE bug 913102</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8637</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8637" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8637" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8637" ref_url="https://www.suse.com/security/cve/CVE-2014-8637" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8637/">CVE-2014-8637</cve>
	<bugzilla href="https://bugzilla.suse.com/913096">SUSE bug 913096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913103">SUSE bug 913103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8638</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8638" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8638" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8638" ref_url="https://www.suse.com/security/cve/CVE-2014-8638" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0076-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0133-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 omits the CORS Origin header, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8638/">CVE-2014-8638</cve>
	<bugzilla href="https://bugzilla.suse.com/913068">SUSE bug 913068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913096">SUSE bug 913096</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8639</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8639" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8639" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8639" ref_url="https://www.suse.com/security/cve/CVE-2014-8639" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0076-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0133-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 (aka Proxy Authentication Required) status code, which allows remote HTTP proxy servers to conduct session fixation attacks by providing a cookie name that corresponds to the session cookie of the origin server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8639/">CVE-2014-8639</cve>
	<bugzilla href="https://bugzilla.suse.com/913066">SUSE bug 913066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913096">SUSE bug 913096</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8640</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8640" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8640" ref_url="https://www.suse.com/security/cve/CVE-2014-8640" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly restrict timeline operations, which allows remote attackers to cause a denial of service (uninitialized-memory read and application crash) via crafted API calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8640/">CVE-2014-8640</cve>
	<bugzilla href="https://bugzilla.suse.com/913096">SUSE bug 913096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913104">SUSE bug 913104</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8641</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8641" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8641" ref_url="https://www.suse.com/security/cve/CVE-2014-8641" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0076-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, and SeaMonkey before 2.32 allows remote attackers to execute arbitrary code via crafted track data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8641/">CVE-2014-8641</cve>
	<bugzilla href="https://bugzilla.suse.com/913067">SUSE bug 913067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913096">SUSE bug 913096</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8642</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8642" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8642" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8642" ref_url="https://www.suse.com/security/cve/CVE-2014-8642" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider the id-pkix-ocsp-nocheck extension in deciding whether to trust an OCSP responder, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during a session in which there was an incorrect decision to accept a compromised and revoked certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8642/">CVE-2014-8642</cve>
	<bugzilla href="https://bugzilla.suse.com/913222">SUSE bug 913222</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8643</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8643" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8643" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8643" ref_url="https://www.suse.com/security/cve/CVE-2014-8643" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin (GMP) sandbox protection mechanism by leveraging access to the GMP process, as demonstrated by the OpenH264 plugin's process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8643/">CVE-2014-8643</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8651</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8651" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8651" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8651" ref_url="https://www.suse.com/security/cve/CVE-2014-8651" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001839.html" source="SUSE-SU"/>
    <description>
    The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-8651/">CVE-2014-8651</cve>
	<bugzilla href="https://bugzilla.suse.com/904625">SUSE bug 904625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694910" comment="plasma5-desktop-5.18.6-bp153.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152518" comment="plasma5-desktop is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694911" comment="plasma5-desktop-emojier-5.18.6-bp153.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695523" comment="plasma5-desktop-emojier is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694912" comment="plasma5-desktop-lang-5.18.6-bp153.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152519" comment="plasma5-desktop-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148680" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8680</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8680" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8680" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8680" ref_url="https://www.suse.com/security/cve/CVE-2014-8680" source="SUSE CVE"/>
    <description>
    The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the lack of GeoIP databases for both IPv4 and IPv6, or (2) IPv6 support with certain options.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8680/">CVE-2014-8680</cve>
	<bugzilla href="https://bugzilla.suse.com/908995">SUSE bug 908995</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8962</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8962" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8962" ref_url="https://www.suse.com/security/cve/CVE-2014-8962" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00034.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8962/">CVE-2014-8962</cve>
	<bugzilla href="https://bugzilla.suse.com/906831">SUSE bug 906831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/907764">SUSE bug 907764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969774">SUSE bug 969774</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628446" comment="libFLAC8-1.3.2-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152524" comment="libFLAC8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630148" comment="libFLAC8-32bit-1.3.2-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152525" comment="libFLAC8-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8964</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8964" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8964" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8964" ref_url="https://www.suse.com/security/cve/CVE-2014-8964" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0858-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00076.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8964/">CVE-2014-8964</cve>
	<bugzilla href="https://bugzilla.suse.com/906574">SUSE bug 906574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924960">SUSE bug 924960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933288">SUSE bug 933288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936408">SUSE bug 936408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958373">SUSE bug 958373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480665" comment="libpcre2-16-0-10.31-1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153649" comment="libpcre2-16-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480667" comment="libpcre2-8-0-10.31-1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153653" comment="libpcre2-8-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8991</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8991" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8991" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8991" ref_url="https://www.suse.com/security/cve/CVE-2014-8991" source="SUSE CVE"/>
    <description>
    pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-8991/">CVE-2014-8991</cve>
	<bugzilla href="https://bugzilla.suse.com/907038">SUSE bug 907038</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628991" comment="python3-pip-20.0.2-6.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151932" comment="python3-pip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009511085" comment="python39-pip-20.2.4-7.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623213" comment="python39-pip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009511086" comment="python39-setuptools-44.1.1-7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623214" comment="python39-setuptools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9028</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9028" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9028" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9028" ref_url="https://www.suse.com/security/cve/CVE-2014-9028" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00034.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9028/">CVE-2014-9028</cve>
	<bugzilla href="https://bugzilla.suse.com/907016">SUSE bug 907016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969774">SUSE bug 969774</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628446" comment="libFLAC8-1.3.2-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152524" comment="libFLAC8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630148" comment="libFLAC8-32bit-1.3.2-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152525" comment="libFLAC8-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9029</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9029" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9029" ref_url="https://www.suse.com/security/cve/CVE-2014-9029" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001206.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9029/">CVE-2014-9029</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/906364">SUSE bug 906364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909474">SUSE bug 909474</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9087</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9087" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9087" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9087" ref_url="https://www.suse.com/security/cve/CVE-2014-9087" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001154.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1682-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00081.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based OpenPGP data, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9087/">CVE-2014-9087</cve>
	<bugzilla href="https://bugzilla.suse.com/907074">SUSE bug 907074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/926826">SUSE bug 926826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/996084">SUSE bug 996084</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480597" comment="libksba8-1.3.5-2.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152539" comment="libksba8 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9092</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9092" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9092" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9092" ref_url="https://www.suse.com/security/cve/CVE-2014-9092" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0029-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001153.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1637-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00055.html" source="SUSE-SU"/>
    <description>
    libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Exif marker.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9092/">CVE-2014-9092</cve>
	<bugzilla href="https://bugzilla.suse.com/906761">SUSE bug 906761</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628779" comment="libjpeg8-8.1.2-5.15.7 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152543" comment="libjpeg8 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9093</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9093" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9093" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9093" ref_url="https://www.suse.com/security/cve/CVE-2014-9093" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1727-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00109.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00156.html" source="SUSE-SU"/>
    <description>
    LibreOffice before 4.3.5 allows remote attackers to cause a denial of service (invalid write operation and crash) and possibly execute arbitrary code via a crafted RTF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9093/">CVE-2014-9093</cve>
	<bugzilla href="https://bugzilla.suse.com/907636">SUSE bug 907636</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9112</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9112" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9112" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9112" ref_url="https://www.suse.com/security/cve/CVE-2014-9112" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1652-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1675-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001118.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1643-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00061.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9112/">CVE-2014-9112</cve>
	<bugzilla href="https://bugzilla.suse.com/907456">SUSE bug 907456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913479">SUSE bug 913479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481843" comment="cpio-2.12-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151389" comment="cpio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481844" comment="cpio-lang-2.12-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151390" comment="cpio-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481845" comment="cpio-mt-2.12-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177165" comment="cpio-mt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9114</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9114" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9114" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9114" ref_url="https://www.suse.com/security/cve/CVE-2014-9114" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001313.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0066-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00035.html" source="SUSE-SU"/>
    <description>
    Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9114/">CVE-2014-9114</cve>
	<bugzilla href="https://bugzilla.suse.com/907434">SUSE bug 907434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/908742">SUSE bug 908742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628636" comment="libblkid1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151787" comment="libblkid1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628637" comment="libblkid1-32bit-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151788" comment="libblkid1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628639" comment="libfdisk1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154114" comment="libfdisk1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628641" comment="libmount1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151789" comment="libmount1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628642" comment="libmount1-32bit-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151790" comment="libmount1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628644" comment="libsmartcols1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151791" comment="libsmartcols1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628647" comment="libuuid1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151793" comment="libuuid1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628648" comment="libuuid1-32bit-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151794" comment="libuuid1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628649" comment="util-linux-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151795" comment="util-linux is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628650" comment="util-linux-lang-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151796" comment="util-linux-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628651" comment="util-linux-systemd-2.36.2-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151797" comment="util-linux-systemd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9130</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9130" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9130" ref_url="https://www.suse.com/security/cve/CVE-2014-9130" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1699-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1699-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0925-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0953-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001412.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1625-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0319-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html" source="SUSE-SU"/>
    <description>
    scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9130/">CVE-2014-9130</cve>
	<bugzilla href="https://bugzilla.suse.com/907809">SUSE bug 907809</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911782">SUSE bug 911782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/921588">SUSE bug 921588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480828" comment="libyaml-0-2-0.1.7-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151942" comment="libyaml-0-2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9402</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9402" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9402" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9402" ref_url="https://www.suse.com/security/cve/CVE-2014-9402" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001305.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0351-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html" source="SUSE-SU"/>
    <description>
    CVE-2014-9402 glibc: denial of service in getnetbyname function
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-9402/">CVE-2014-9402</cve>
	<bugzilla href="https://bugzilla.suse.com/910599">SUSE bug 910599</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9421</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9421" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9421" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9421" ref_url="https://www.suse.com/security/cve/CVE-2014-9421" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00044.html" source="SUSE-SU"/>
    <description>
    The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly handle partial XDR deserialization, which allows remote authenticated users to cause a denial of service (use-after-free and double free, and daemon crash) or possibly execute arbitrary code via malformed XDR data, as demonstrated by data sent to kadmind.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9421/">CVE-2014-9421</cve>
	<bugzilla href="https://bugzilla.suse.com/1005509">SUSE bug 1005509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912002">SUSE bug 912002</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9422</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9422" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9422" ref_url="https://www.suse.com/security/cve/CVE-2014-9422" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00044.html" source="SUSE-SU"/>
    <description>
    The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated users to bypass a kadmin/* authorization check and obtain administrative access by leveraging access to a two-component principal with an initial "kadmind" substring, as demonstrated by a "ka/x" principal.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9422/">CVE-2014-9422</cve>
	<bugzilla href="https://bugzilla.suse.com/1005509">SUSE bug 1005509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912002">SUSE bug 912002</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9423</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9423" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9423" ref_url="https://www.suse.com/security/cve/CVE-2014-9423" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00044.html" source="SUSE-SU"/>
    <description>
    The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9423/">CVE-2014-9423</cve>
	<bugzilla href="https://bugzilla.suse.com/1005509">SUSE bug 1005509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912002">SUSE bug 912002</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9426</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9426" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9426" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9426" ref_url="https://www.suse.com/security/cve/CVE-2014-9426" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0325-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** The apprentice_load function in libmagic/apprentice.c in the Fileinfo component in PHP through 5.6.4 attempts to perform a free operation on a stack-based character array, which allows remote attackers to cause a denial of service (memory corruption or application crash) or possibly have unspecified other impact via unknown vectors.  NOTE: this is disputed by the vendor because the standard erealloc behavior makes the free operation unreachable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-9426/">CVE-2014-9426</cve>
	<bugzilla href="https://bugzilla.suse.com/911663">SUSE bug 911663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9427</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9427" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9427" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9427" ref_url="https://www.suse.com/security/cve/CVE-2014-9427" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0365-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0325-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html" source="SUSE-SU"/>
    <description>
    sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9427/">CVE-2014-9427</cve>
	<bugzilla href="https://bugzilla.suse.com/911664">SUSE bug 911664</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9447</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9447" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9447" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9447" ref_url="https://www.suse.com/security/cve/CVE-2014-9447" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001269.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0123-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00063.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / (slash) in a crafted archive, as demonstrated using the ar program.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9447/">CVE-2014-9447</cve>
	<bugzilla href="https://bugzilla.suse.com/911662">SUSE bug 911662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912408">SUSE bug 912408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481929" comment="elfutils-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481930" comment="elfutils-lang-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481932" comment="libasm1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481934" comment="libdw1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481935" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481937" comment="libebl-plugins-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481938" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481940" comment="libelf1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481941" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9449</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9449" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9449" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9449" ref_url="https://www.suse.com/security/cve/CVE-2014-9449" source="SUSE CVE"/>
    <description>
    Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9449/">CVE-2014-9449</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9474</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9474" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9474" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9474" ref_url="https://www.suse.com/security/cve/CVE-2014-9474" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001208.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for mpn_set_str.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-9474/">CVE-2014-9474</cve>
	<bugzilla href="https://bugzilla.suse.com/911812">SUSE bug 911812</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628800" comment="libmpfr6-4.0.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177207" comment="libmpfr6 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9483</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9483" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9483" ref_url="https://www.suse.com/security/cve/CVE-2014-9483" source="SUSE CVE"/>
    <description>
    Emacs 24.4 allows remote attackers to bypass security restrictions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<cve href="https://www.suse.com/security/cve/CVE-2014-9483/">CVE-2014-9483</cve>
	<bugzilla href="https://bugzilla.suse.com/912872">SUSE bug 912872</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628430" comment="emacs-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151668" comment="emacs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628432" comment="emacs-info-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151669" comment="emacs-info is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628433" comment="emacs-nox-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151670" comment="emacs-nox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628434" comment="etags-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151672" comment="etags is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9488</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9488" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9488" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9488" ref_url="https://www.suse.com/security/cve/CVE-2014-9488" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007445.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0595-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00077.html" source="SUSE-SU"/>
    <description>
    The is_utf8_well_formed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2014-9488/">CVE-2014-9488</cve>
	<bugzilla href="https://bugzilla.suse.com/921719">SUSE bug 921719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480353" comment="less-530-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177208" comment="less is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9496</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9496" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9496" ref_url="https://www.suse.com/security/cve/CVE-2014-9496" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0160-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001187.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0169-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001193.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0041-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00016.html" source="SUSE-SU"/>
    <description>
    The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9496/">CVE-2014-9496</cve>
	<bugzilla href="https://bugzilla.suse.com/911796">SUSE bug 911796</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9512</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9512" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9512" ref_url="https://www.suse.com/security/cve/CVE-2014-9512" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001811.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001813.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1866-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002164.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002227.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1671-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1695-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00112.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00044.html" source="SUSE-SU"/>
    <description>
    rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9512/">CVE-2014-9512</cve>
	<bugzilla href="https://bugzilla.suse.com/915410">SUSE bug 915410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960191">SUSE bug 960191</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482539" comment="rsync-3.1.3-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151567" comment="rsync is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9556</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9556" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9556" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9556" ref_url="https://www.suse.com/security/cve/CVE-2014-9556" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2131-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001703.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0187-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0449-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9556/">CVE-2014-9556</cve>
	<bugzilla href="https://bugzilla.suse.com/912214">SUSE bug 912214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/919283">SUSE bug 919283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934533">SUSE bug 934533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482310" comment="libmspack0-0.6-3.8.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151459" comment="libmspack0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9625</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9625" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9625" ref_url="https://www.suse.com/security/cve/CVE-2014-9625" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0201-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00015.html" source="SUSE-SU"/>
    <description>
    The GetUpdateFile function in misc/update.c in the Updater in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted update status file, aka an "integer truncation" vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9625/">CVE-2014-9625</cve>
	<bugzilla href="https://bugzilla.suse.com/914268">SUSE bug 914268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920781">SUSE bug 920781</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9636</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9636" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9636" ref_url="https://www.suse.com/security/cve/CVE-2014-9636" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0377-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004241.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00013.html" source="SUSE-SU"/>
    <description>
    unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9636/">CVE-2014-9636</cve>
	<bugzilla href="https://bugzilla.suse.com/914442">SUSE bug 914442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152223" comment="unzip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694925" comment="unzip-doc-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152224" comment="unzip-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9638</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9638" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9638" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9638" ref_url="https://www.suse.com/security/cve/CVE-2014-9638" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001634.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0522-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00054.html" source="SUSE-SU"/>
    <description>
    oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9638/">CVE-2014-9638</cve>
	<bugzilla href="https://bugzilla.suse.com/914439">SUSE bug 914439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914441">SUSE bug 914441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486554" comment="vorbis-tools-1.4.0-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151128" comment="vorbis-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486555" comment="vorbis-tools-lang-1.4.0-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151129" comment="vorbis-tools-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9639</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9639" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9639" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9639" ref_url="https://www.suse.com/security/cve/CVE-2014-9639" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001634.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0522-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00054.html" source="SUSE-SU"/>
    <description>
    Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9639/">CVE-2014-9639</cve>
	<bugzilla href="https://bugzilla.suse.com/1081744">SUSE bug 1081744</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914439">SUSE bug 914439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914441">SUSE bug 914441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486554" comment="vorbis-tools-1.4.0-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151128" comment="vorbis-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486555" comment="vorbis-tools-lang-1.4.0-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151129" comment="vorbis-tools-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9640</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9640" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9640" ref_url="https://www.suse.com/security/cve/CVE-2014-9640" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001250.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0231-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00032.html" source="SUSE-SU"/>
    <description>
    oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9640/">CVE-2014-9640</cve>
	<bugzilla href="https://bugzilla.suse.com/912214">SUSE bug 912214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914938">SUSE bug 914938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/919283">SUSE bug 919283</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486554" comment="vorbis-tools-1.4.0-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151128" comment="vorbis-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486555" comment="vorbis-tools-lang-1.4.0-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151129" comment="vorbis-tools-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9645</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9645" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9645" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9645" ref_url="https://www.suse.com/security/cve/CVE-2014-9645" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1445-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013204.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1083-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00041.html" source="SUSE-SU"/>
    <description>
    The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an "ifconfig /usbserial up" command or a "mount -t /snd_pcm none /" command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2023-02-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-9645/">CVE-2014-9645</cve>
	<bugzilla href="https://bugzilla.suse.com/914423">SUSE bug 914423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914660">SUSE bug 914660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725896" comment="busybox-1.35.0-150000.4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152555" comment="busybox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725897" comment="busybox-static-1.35.0-150000.4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653584" comment="busybox-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9655</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9655" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9655" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9655" ref_url="https://www.suse.com/security/cve/CVE-2014-9655" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1420-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001561.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0450-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1213-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00019.html" source="SUSE-SU"/>
    <description>
    The (1) putcontig8bitYCbCr21tile function in tif_getimage.c or (2) NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9655/">CVE-2014-9655</cve>
	<bugzilla href="https://bugzilla.suse.com/1206220">SUSE bug 1206220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914890">SUSE bug 914890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916925">SUSE bug 916925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916927">SUSE bug 916927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149656" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9656</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9656" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9656" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9656" ref_url="https://www.suse.com/security/cve/CVE-2014-9656" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not properly check for an integer overflow, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted OpenType font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9656/">CVE-2014-9656</cve>
	<bugzilla href="https://bugzilla.suse.com/916847">SUSE bug 916847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149657" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9657</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9657" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9657" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9657" ref_url="https://www.suse.com/security/cve/CVE-2014-9657" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="TID7021836" ref_url="https://www.suse.com/support/kb/doc/?id=7021836" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9657/">CVE-2014-9657</cve>
	<bugzilla href="https://bugzilla.suse.com/916856">SUSE bug 916856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9658</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9658" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9658" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9658" ref_url="https://www.suse.com/security/cve/CVE-2014-9658" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="TID7021836" ref_url="https://www.suse.com/support/kb/doc/?id=7021836" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9658/">CVE-2014-9658</cve>
	<bugzilla href="https://bugzilla.suse.com/916857">SUSE bug 916857</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9659</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9659" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9659" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9659" ref_url="https://www.suse.com/security/cve/CVE-2014-9659" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted OpenType font.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2240.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9659/">CVE-2014-9659</cve>
	<bugzilla href="https://bugzilla.suse.com/916867">SUSE bug 916867</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149660" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9660</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9660" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9660" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9660" ref_url="https://www.suse.com/security/cve/CVE-2014-9660" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted BDF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9660/">CVE-2014-9660</cve>
	<bugzilla href="https://bugzilla.suse.com/916858">SUSE bug 916858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149661" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9661</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9661" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9661" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9661" ref_url="https://www.suse.com/security/cve/CVE-2014-9661" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted Type42 font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9661/">CVE-2014-9661</cve>
	<bugzilla href="https://bugzilla.suse.com/916859">SUSE bug 916859</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149662" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9662</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9662" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9662" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9662" ref_url="https://www.suse.com/security/cve/CVE-2014-9662" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    cff/cf2ft.c in FreeType before 2.5.4 does not validate the return values of point-allocation functions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted OTF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9662/">CVE-2014-9662</cve>
	<bugzilla href="https://bugzilla.suse.com/916860">SUSE bug 916860</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9663</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9663" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9663" ref_url="https://www.suse.com/security/cve/CVE-2014-9663" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted cmap SFNT table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9663/">CVE-2014-9663</cve>
	<bugzilla href="https://bugzilla.suse.com/916865">SUSE bug 916865</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9664</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9664" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9664" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9664" ref_url="https://www.suse.com/security/cve/CVE-2014-9664" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.5.4 does not check for the end of the data during certain parsing actions, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted Type42 font, related to type42/t42parse.c and type1/t1load.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9664/">CVE-2014-9664</cve>
	<bugzilla href="https://bugzilla.suse.com/916864">SUSE bug 916864</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9665</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9665" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9665" ref_url="https://www.suse.com/security/cve/CVE-2014-9665" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The Load_SBit_Png function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows and pitch values of PNG data, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact by embedding a PNG file in a .ttf font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9665/">CVE-2014-9665</cve>
	<bugzilla href="https://bugzilla.suse.com/916863">SUSE bug 916863</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149666" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9666</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9666" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9666" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9666" ref_url="https://www.suse.com/security/cve/CVE-2014-9666" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count-to-size association without restricting the count value, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted embedded bitmap.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9666/">CVE-2014-9666</cve>
	<bugzilla href="https://bugzilla.suse.com/916862">SUSE bug 916862</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9667</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9667" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9667" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9667" ref_url="https://www.suse.com/security/cve/CVE-2014-9667" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted SFNT table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9667/">CVE-2014-9667</cve>
	<bugzilla href="https://bugzilla.suse.com/916861">SUSE bug 916861</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9668</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9668" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9668" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9668" ref_url="https://www.suse.com/security/cve/CVE-2014-9668" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The woff_open_font function in sfnt/sfobjs.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting length values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Web Open Font Format (WOFF) file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9668/">CVE-2014-9668</cve>
	<bugzilla href="https://bugzilla.suse.com/916868">SUSE bug 916868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9669</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9669" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9669" ref_url="https://www.suse.com/security/cve/CVE-2014-9669" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9669/">CVE-2014-9669</cve>
	<bugzilla href="https://bugzilla.suse.com/916870">SUSE bug 916870</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9670</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9670" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9670" ref_url="https://www.suse.com/security/cve/CVE-2014-9670" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9670/">CVE-2014-9670</cve>
	<bugzilla href="https://bugzilla.suse.com/916871">SUSE bug 916871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933247">SUSE bug 933247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9671</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9671" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9671" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9671" ref_url="https://www.suse.com/security/cve/CVE-2014-9671" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PCF file with a 0xffffffff size value that is improperly incremented.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9671/">CVE-2014-9671</cve>
	<bugzilla href="https://bugzilla.suse.com/916872">SUSE bug 916872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933247">SUSE bug 933247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9672</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9672" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9672" ref_url="https://www.suse.com/security/cve/CVE-2014-9672" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Array index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9672/">CVE-2014-9672</cve>
	<bugzilla href="https://bugzilla.suse.com/916873">SUSE bug 916873</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9673</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9673" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9673" ref_url="https://www.suse.com/security/cve/CVE-2014-9673" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9673/">CVE-2014-9673</cve>
	<bugzilla href="https://bugzilla.suse.com/916874">SUSE bug 916874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9674</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9674" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9674" ref_url="https://www.suse.com/security/cve/CVE-2014-9674" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9674/">CVE-2014-9674</cve>
	<bugzilla href="https://bugzilla.suse.com/916879">SUSE bug 916879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9675</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9675" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9675" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9675" ref_url="https://www.suse.com/security/cve/CVE-2014-9675" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9675/">CVE-2014-9675</cve>
	<bugzilla href="https://bugzilla.suse.com/916881">SUSE bug 916881</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149680" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9680</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9680" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9680" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9680" ref_url="https://www.suse.com/security/cve/CVE-2014-9680" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0985-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002420.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1849-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1913-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2983-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3004-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00029.html" source="SUSE-SU"/>
    <description>
    sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not view file contents) by running a program within an sudo session, as demonstrated by interfering with terminal output, discarding kernel-log messages, or repositioning tape drives.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-9680/">CVE-2014-9680</cve>
	<bugzilla href="https://bugzilla.suse.com/917806">SUSE bug 917806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/919737">SUSE bug 919737</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/921999">SUSE bug 921999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/953359">SUSE bug 953359</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629025" comment="sudo-1.9.5p2-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629027" comment="sudo-plugin-python-1.9.5p2-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695524" comment="sudo-plugin-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9756</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9756" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9756" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9756" ref_url="https://www.suse.com/security/cve/CVE-2014-9756" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1979-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001676.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2000-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1995-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2119-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00145.html" source="SUSE-SU"/>
    <description>
    The psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service (divide-by-zero error and application crash) via unspecified vectors related to the headindex variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9756/">CVE-2014-9756</cve>
	<bugzilla href="https://bugzilla.suse.com/953516">SUSE bug 953516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/953519">SUSE bug 953519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/953521">SUSE bug 953521</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9761</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9761" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9761" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9761" ref_url="https://www.suse.com/security/cve/CVE-2014-9761" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="TID7017287" ref_url="https://www.suse.com/support/kb/doc?id=7017287" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9761/">CVE-2014-9761</cve>
	<bugzilla href="https://bugzilla.suse.com/962738">SUSE bug 962738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986086">SUSE bug 986086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9862</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9862" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9862" ref_url="https://www.suse.com/security/cve/CVE-2014-9862" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012442.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012445.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012590.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1977-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00026.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-29"/>
	<updated date="2022-10-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9862/">CVE-2014-9862</cve>
	<bugzilla href="https://bugzilla.suse.com/1173974">SUSE bug 1173974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201770">SUSE bug 1201770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990660">SUSE bug 990660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009709689" comment="libostree-2020.8-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009350834" comment="libostree is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009709660" comment="libostree-1-1-2020.8-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009350835" comment="libostree-1-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009709690" comment="libostree-devel-2020.8-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009350836" comment="libostree-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009709813" comment="libostree-grub2-2020.8-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009350837" comment="libostree-grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009709691" comment="typelib-1_0-OSTree-1_0-2020.8-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009350839" comment="typelib-1_0-OSTree-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9913</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9913" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9913" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9913" ref_url="https://www.suse.com/security/cve/CVE-2014-9913" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00013.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2014-9913/">CVE-2014-9913</cve>
	<bugzilla href="https://bugzilla.suse.com/1013993">SUSE bug 1013993</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159417">SUSE bug 1159417</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152223" comment="unzip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694925" comment="unzip-doc-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152224" comment="unzip-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9939</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9939" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9939" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9939" ref_url="https://www.suse.com/security/cve/CVE-2014-9939" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9939/">CVE-2014-9939</cve>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105209">SUSE bug 1105209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0204</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0204" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0204" ref_url="https://www.suse.com/security/cve/CVE-2015-0204" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-4" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7014420" ref_url="https://www.suse.com/support/kb/doc/?id=7014420" source="SUSE-SU"/>
		<reference ref_id="TID7016252" ref_url="https://www.suse.com/support/kb/doc?id=7016252" source="SUSE-SU"/>
		<reference ref_id="TID7016260" ref_url="https://www.suse.com/support/kb/doc/?id=7016260" source="SUSE-SU"/>
		<reference ref_id="TID7016273" ref_url="https://www.suse.com/support/kb/doc/?id=7016273" source="SUSE-SU"/>
		<reference ref_id="TID7016312" ref_url="https://www.suse.com/support/kb/doc/?id=7016312" source="SUSE-SU"/>
		<reference ref_id="TID7016336" ref_url="https://www.suse.com/support/kb/doc/?id=7016336" source="SUSE-SU"/>
		<reference ref_id="TID7016340" ref_url="https://www.suse.com/support/kb/doc/?id=7016340" source="SUSE-SU"/>
		<reference ref_id="TID7016875" ref_url="https://www.suse.com/support/kb/doc/?id=7016875" source="SUSE-SU"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021435" ref_url="https://www.suse.com/support/kb/doc/?id=7021435" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021714" ref_url="https://www.suse.com/support/kb/doc/?id=7021714" source="SUSE-SU"/>
		<reference ref_id="TID7021743" ref_url="https://www.suse.com/support/kb/doc/?id=7021743" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
		<reference ref_id="TID7021863" ref_url="https://www.suse.com/support/kb/doc/?id=7021863" source="SUSE-SU"/>
		<reference ref_id="TID7021977" ref_url="https://www.suse.com/support/kb/doc/?id=7021977" source="SUSE-SU"/>
		<reference ref_id="TID7021993" ref_url="https://www.suse.com/support/kb/doc/?id=7021993" source="SUSE-SU"/>
		<reference ref_id="TID7021994" ref_url="https://www.suse.com/support/kb/doc/?id=7021994" source="SUSE-SU"/>
		<reference ref_id="TID7021995" ref_url="https://www.suse.com/support/kb/doc/?id=7021995" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue.  NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0204/">CVE-2015-0204</cve>
	<bugzilla href="https://bugzilla.suse.com/912014">SUSE bug 912014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920482">SUSE bug 920482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920484">SUSE bug 920484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927591">SUSE bug 927591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927623">SUSE bug 927623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952088">SUSE bug 952088</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0205</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0205" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0205" ref_url="https://www.suse.com/security/cve/CVE-2015-0205" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
    <description>
    The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0205/">CVE-2015-0205</cve>
	<bugzilla href="https://bugzilla.suse.com/912293">SUSE bug 912293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927623">SUSE bug 927623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0206</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0206" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0206" ref_url="https://www.suse.com/security/cve/CVE-2015-0206" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
    <description>
    Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0206/">CVE-2015-0206</cve>
	<bugzilla href="https://bugzilla.suse.com/912292">SUSE bug 912292</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927623">SUSE bug 927623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0209</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0209" ref_url="https://www.suse.com/security/cve/CVE-2015-0209" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="TID7016336" ref_url="https://www.suse.com/support/kb/doc/?id=7016336" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0554-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0209/">CVE-2015-0209</cve>
	<bugzilla href="https://bugzilla.suse.com/919648">SUSE bug 919648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0228</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0228" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0228" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0228" ref_url="https://www.suse.com/security/cve/CVE-2015-0228" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001415.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0418-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00006.html" source="SUSE-SU"/>
    <description>
    The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0228/">CVE-2015-0228</cve>
	<bugzilla href="https://bugzilla.suse.com/918352">SUSE bug 918352</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0231</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0231" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0231" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0231" ref_url="https://www.suse.com/security/cve/CVE-2015-0231" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0365-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0370-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0325-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0231/">CVE-2015-0231</cve>
	<bugzilla href="https://bugzilla.suse.com/910659">SUSE bug 910659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924972">SUSE bug 924972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980366">SUSE bug 980366</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0232</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0232" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0232" ref_url="https://www.suse.com/security/cve/CVE-2015-0232" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0365-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0370-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0325-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html" source="SUSE-SU"/>
    <description>
    The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0232/">CVE-2015-0232</cve>
	<bugzilla href="https://bugzilla.suse.com/914690">SUSE bug 914690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980366">SUSE bug 980366</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150235" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0235</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0235" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0235" ref_url="https://www.suse.com/security/cve/CVE-2015-0235" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0158-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="TID7016113" ref_url="https://www.suse.com/support/kb/doc?id=7016113" source="SUSE-SU"/>
		<reference ref_id="TID7016115" ref_url="https://www.suse.com/support/kb/doc/?id=7016115" source="SUSE-SU"/>
		<reference ref_id="TID7016118" ref_url="https://www.suse.com/support/kb/doc/?id=7016118" source="SUSE-SU"/>
		<reference ref_id="TID7016147" ref_url="https://www.suse.com/support/kb/doc/?id=7016147" source="SUSE-SU"/>
		<reference ref_id="TID7016171" ref_url="https://www.suse.com/support/kb/doc/?id=7016171" source="SUSE-SU"/>
		<reference ref_id="TID7016215" ref_url="https://www.suse.com/support/kb/doc/?id=7016215" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00000.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0235/">CVE-2015-0235</cve>
	<bugzilla href="https://bugzilla.suse.com/844309">SUSE bug 844309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913646">SUSE bug 913646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/949238">SUSE bug 949238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954983">SUSE bug 954983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0236</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0236" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0236" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0236" ref_url="https://www.suse.com/security/cve/CVE-2015-0236" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0304-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001840.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0225-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00028.html" source="SUSE-SU"/>
    <description>
    It was discovered that the virDomainSnapshotGetXMLDesc() and virDomainSaveImageGetXMLDesc() functions did not sufficiently limit the usage of the VIR_DOMAIN_XML_SECURE flag when fine-grained ACLs were enabled. A remote attacker able to establish a connection to libvirtd could use this flaw to obtain certain sensitive information from the domain XML file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0236/">CVE-2015-0236</cve>
	<bugzilla href="https://bugzilla.suse.com/914693">SUSE bug 914693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0240</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0240" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0240" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0240" ref_url="https://www.suse.com/security/cve/CVE-2015-0240" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0353-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0371-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="TID7014420" ref_url="https://www.suse.com/support/kb/doc/?id=7014420" source="SUSE-SU"/>
		<reference ref_id="TID7016875" ref_url="https://www.suse.com/support/kb/doc/?id=7016875" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    An uninitialized pointer use flaw was found in the Samba daemon (smbd). A malicious Samba client could send specially crafted netlogon packets that, when processed by smbd, could potentially lead to arbitrary code execution with the privileges of the user running smbd (by default, the root user).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0240/">CVE-2015-0240</cve>
	<bugzilla href="https://bugzilla.suse.com/917376">SUSE bug 917376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150245" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0245</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0245" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0245" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0245" ref_url="https://www.suse.com/security/cve/CVE-2015-0245" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0457-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0300-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2736-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00017.html" source="SUSE-SU"/>
    <description>
    D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0245/">CVE-2015-0245</cve>
	<bugzilla href="https://bugzilla.suse.com/1003898">SUSE bug 1003898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916343">SUSE bug 916343</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481908" comment="dbus-1-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481910" comment="dbus-1-x11-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481911" comment="libdbus-1-3-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481912" comment="libdbus-1-3-32bit-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0247</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0247" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0247" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0247" ref_url="https://www.suse.com/security/cve/CVE-2015-0247" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1341-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1364-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001530.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1987-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004281.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1006-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2133-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00050.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2015-0247/">CVE-2015-0247</cve>
	<bugzilla href="https://bugzilla.suse.com/1123790">SUSE bug 1123790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915402">SUSE bug 915402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/918346">SUSE bug 918346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628421" comment="e2fsprogs-1.43.8-4.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152602" comment="e2fsprogs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628425" comment="libcom_err2-1.43.8-4.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152605" comment="libcom_err2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628426" comment="libcom_err2-32bit-1.43.8-4.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152606" comment="libcom_err2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628429" comment="libext2fs2-1.43.8-4.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152608" comment="libext2fs2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150253" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0253</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0253" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0253" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0253" ref_url="https://www.suse.com/security/cve/CVE-2015-0253" source="SUSE CVE"/>
    <description>
    The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) by sending a request that lacks a method to an installation that enables the INCLUDES filter and has an ErrorDocument 400 directive specifying a local URI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0253/">CVE-2015-0253</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0255</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0255" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0255" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0255" ref_url="https://www.suse.com/security/cve/CVE-2015-0255" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001262.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0399-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001263.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0400-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0403-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001261.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001268.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0939-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001403.html" source="SUSE-SU"/>
		<reference ref_id="TID7016170" ref_url="https://www.suse.com/support/kb/doc/?id=7016170" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021743" ref_url="https://www.suse.com/support/kb/doc/?id=7021743" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0337-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0338-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00086.html" source="SUSE-SU"/>
    <description>
    X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0255/">CVE-2015-0255</cve>
	<bugzilla href="https://bugzilla.suse.com/915810">SUSE bug 915810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628599" comment="libXvnc1-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628600" comment="tigervnc-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628601" comment="xorg-x11-Xvnc-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628602" comment="xorg-x11-Xvnc-module-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276536" comment="xorg-x11-Xvnc-module is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0273</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0273" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0273" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0273" ref_url="https://www.suse.com/security/cve/CVE-2015-0273" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0273/">CVE-2015-0273</cve>
	<bugzilla href="https://bugzilla.suse.com/917302">SUSE bug 917302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/918768">SUSE bug 918768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980366">SUSE bug 980366</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0286</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0286" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0286" ref_url="https://www.suse.com/security/cve/CVE-2015-0286" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0543-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="TID7016336" ref_url="https://www.suse.com/support/kb/doc/?id=7016336" source="SUSE-SU"/>
		<reference ref_id="TID7021977" ref_url="https://www.suse.com/support/kb/doc/?id=7021977" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0554-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0286/">CVE-2015-0286</cve>
	<bugzilla href="https://bugzilla.suse.com/919648">SUSE bug 919648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922496">SUSE bug 922496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150287" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0287</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0287" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0287" ref_url="https://www.suse.com/security/cve/CVE-2015-0287" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0543-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001545.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="TID7016336" ref_url="https://www.suse.com/support/kb/doc/?id=7016336" source="SUSE-SU"/>
		<reference ref_id="TID7021977" ref_url="https://www.suse.com/support/kb/doc/?id=7021977" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0554-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0287/">CVE-2015-0287</cve>
	<bugzilla href="https://bugzilla.suse.com/919648">SUSE bug 919648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922499">SUSE bug 922499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968888">SUSE bug 968888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991722">SUSE bug 991722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0288</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0288" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0288" ref_url="https://www.suse.com/security/cve/CVE-2015-0288" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0543-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="TID7016336" ref_url="https://www.suse.com/support/kb/doc/?id=7016336" source="SUSE-SU"/>
		<reference ref_id="TID7021977" ref_url="https://www.suse.com/support/kb/doc/?id=7021977" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0554-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0288/">CVE-2015-0288</cve>
	<bugzilla href="https://bugzilla.suse.com/919648">SUSE bug 919648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920236">SUSE bug 920236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0289</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0289" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0289" ref_url="https://www.suse.com/security/cve/CVE-2015-0289" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0543-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001302.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0578-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016336" ref_url="https://www.suse.com/support/kb/doc/?id=7016336" source="SUSE-SU"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021714" ref_url="https://www.suse.com/support/kb/doc/?id=7021714" source="SUSE-SU"/>
		<reference ref_id="TID7021743" ref_url="https://www.suse.com/support/kb/doc/?id=7021743" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
		<reference ref_id="TID7021863" ref_url="https://www.suse.com/support/kb/doc/?id=7021863" source="SUSE-SU"/>
		<reference ref_id="TID7021977" ref_url="https://www.suse.com/support/kb/doc/?id=7021977" source="SUSE-SU"/>
		<reference ref_id="TID7021993" ref_url="https://www.suse.com/support/kb/doc/?id=7021993" source="SUSE-SU"/>
		<reference ref_id="TID7021994" ref_url="https://www.suse.com/support/kb/doc/?id=7021994" source="SUSE-SU"/>
		<reference ref_id="TID7021995" ref_url="https://www.suse.com/support/kb/doc/?id=7021995" source="SUSE-SU"/>
		<reference ref_id="TID7022095" ref_url="https://www.suse.com/support/kb/doc/?id=7022095" source="SUSE-SU"/>
		<reference ref_id="TID7022096" ref_url="https://www.suse.com/support/kb/doc/?id=7022096" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0554-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0289/">CVE-2015-0289</cve>
	<bugzilla href="https://bugzilla.suse.com/919648">SUSE bug 919648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922500">SUSE bug 922500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150293" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0293</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0293" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0293" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0293" ref_url="https://www.suse.com/security/cve/CVE-2015-0293" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0543-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001302.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0578-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016336" ref_url="https://www.suse.com/support/kb/doc/?id=7016336" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0554-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0720-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0293/">CVE-2015-0293</cve>
	<bugzilla href="https://bugzilla.suse.com/919648">SUSE bug 919648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922488">SUSE bug 922488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968044">SUSE bug 968044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968051">SUSE bug 968051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968053">SUSE bug 968053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986238">SUSE bug 986238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0295</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0295" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0295" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0295" ref_url="https://www.suse.com/security/cve/CVE-2015-0295" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001528.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001540.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0573-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html" source="SUSE-SU"/>
    <description>
    The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0295/">CVE-2015-0295</cve>
	<bugzilla href="https://bugzilla.suse.com/921999">SUSE bug 921999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927806">SUSE bug 927806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927807">SUSE bug 927807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927808">SUSE bug 927808</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936523">SUSE bug 936523</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628554" comment="libQt5Concurrent5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152276" comment="libQt5Concurrent5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628557" comment="libQt5Core5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152281" comment="libQt5Core5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628560" comment="libQt5DBus5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152286" comment="libQt5DBus5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628563" comment="libQt5Gui5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152297" comment="libQt5Gui5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628568" comment="libQt5Network5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152308" comment="libQt5Network5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628571" comment="libQt5OpenGL5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152316" comment="libQt5OpenGL5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628577" comment="libQt5PrintSupport5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152329" comment="libQt5PrintSupport5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628580" comment="libQt5Sql5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152341" comment="libQt5Sql5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629186" comment="libQt5Sql5-mysql-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152343" comment="libQt5Sql5-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628581" comment="libQt5Sql5-sqlite-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152347" comment="libQt5Sql5-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628584" comment="libQt5Test5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152356" comment="libQt5Test5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628587" comment="libQt5Widgets5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152380" comment="libQt5Widgets5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628589" comment="libQt5Xml5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152386" comment="libQt5Xml5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629189" comment="libqt5-qtbase-platformtheme-gtk3-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177209" comment="libqt5-qtbase-platformtheme-gtk3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0377</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0377" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0377" ref_url="https://www.suse.com/security/cve/CVE-2015-0377" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0418.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0377/">CVE-2015-0377</cve>
	<bugzilla href="https://bugzilla.suse.com/914447">SUSE bug 914447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0418</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0418" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0418" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0418" ref_url="https://www.suse.com/security/cve/CVE-2015-0418" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0377.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0418/">CVE-2015-0418</cve>
	<bugzilla href="https://bugzilla.suse.com/914447">SUSE bug 914447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0427</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0427" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0427" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0427" ref_url="https://www.suse.com/security/cve/CVE-2015-0427" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2014-6595.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0427/">CVE-2015-0427</cve>
	<bugzilla href="https://bugzilla.suse.com/914447">SUSE bug 914447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0552</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0552" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0552" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0552" ref_url="https://www.suse.com/security/cve/CVE-2015-0552" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0043-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00018.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0552/">CVE-2015-0552</cve>
	<bugzilla href="https://bugzilla.suse.com/911814">SUSE bug 911814</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482681" comment="gcab-1.1-1.15 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152619" comment="gcab is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482683" comment="gcab-lang-1.1-1.15 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152620" comment="gcab-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482684" comment="libgcab-1_0-0-1.1-1.15 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152621" comment="libgcab-1_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0798</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0798" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0798" ref_url="https://www.suse.com/security/cve/CVE-2015-0798" source="SUSE CVE"/>
    <description>
    The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly handle privileged URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0798/">CVE-2015-0798</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0799</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0799" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0799" ref_url="https://www.suse.com/security/cve/CVE-2015-0799" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0799/">CVE-2015-0799</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/926166">SUSE bug 926166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0800</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0800" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0800" ref_url="https://www.suse.com/security/cve/CVE-2015-0800" source="SUSE CVE"/>
    <description>
    The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on Android does not properly generate random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2012-2808.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0800/">CVE-2015-0800</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0801</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0801" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0801" ref_url="https://www.suse.com/security/cve/CVE-2015-0801" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0704-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001346.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving anchor navigation, a similar issue to CVE-2015-0818.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0801/">CVE-2015-0801</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925401">SUSE bug 925401</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0802</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0802" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0802" ref_url="https://www.suse.com/security/cve/CVE-2015-0802" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via certain content navigation that leverages the reachability of a privileged window with an unintended persistence of access to restricted internal methods.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0802/">CVE-2015-0802</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925402">SUSE bug 925402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0803</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0803" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0803" ref_url="https://www.suse.com/security/cve/CVE-2015-0803" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    The HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly constrain the original data type of a casted value during the setting of a SOURCE element's attributes, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0803/">CVE-2015-0803</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925400">SUSE bug 925400</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0804</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0804" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0804" ref_url="https://www.suse.com/security/cve/CVE-2015-0804" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    The HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly constrain a data type after omitting namespace validation during certain tree-binding operations, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document containing a SOURCE element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0804/">CVE-2015-0804</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925400">SUSE bug 925400</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0805</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0805" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0805" ref_url="https://www.suse.com/security/cve/CVE-2015-0805" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an incorrect memset call during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors that trigger rendering of 2D graphics content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0805/">CVE-2015-0805</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925399">SUSE bug 925399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0806</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0806" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0806" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0806" ref_url="https://www.suse.com/security/cve/CVE-2015-0806" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to use memset for a memory region of negative length during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors that trigger rendering of 2D graphics content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0806/">CVE-2015-0806</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925399">SUSE bug 925399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0807</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0807" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0807" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0807" ref_url="https://www.suse.com/security/cve/CVE-2015-0807" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0704-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001346.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site, a similar issue to CVE-2014-8638.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0807/">CVE-2015-0807</cve>
	<bugzilla href="https://bugzilla.suse.com/913068">SUSE bug 913068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925398">SUSE bug 925398</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0808</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0808" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0808" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0808" ref_url="https://www.suse.com/security/cve/CVE-2015-0808" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    The webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox before 37.0 uses incompatible approaches to the deallocation of memory for simple-type arrays, which might allow remote attackers to cause a denial of service (memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0808/">CVE-2015-0808</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925397">SUSE bug 925397</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0810</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0810" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0810" ref_url="https://www.suse.com/security/cve/CVE-2015-0810" source="SUSE CVE"/>
    <description>
    Mozilla Firefox before 37.0 on OS X does not ensure that the cursor is visible, which allows remote attackers to conduct clickjacking attacks via a Flash object in conjunction with DIV elements associated with layered presentation, and crafted JavaScript code that interacts with an IMG element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0810/">CVE-2015-0810</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0811</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0811" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0811" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0811" ref_url="https://www.suse.com/security/cve/CVE-2015-0811" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    The QCMS implementation in Mozilla Firefox before 37.0 allows remote attackers to obtain sensitive information from process heap memory or cause a denial of service (out-of-bounds read) via an image that is improperly handled during transformation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0811/">CVE-2015-0811</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925396">SUSE bug 925396</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0812</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0812" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0812" ref_url="https://www.suse.com/security/cve/CVE-2015-0812" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdomain.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0812/">CVE-2015-0812</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925394">SUSE bug 925394</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0813</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0813" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0813" ref_url="https://www.suse.com/security/cve/CVE-2015-0813" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0704-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001346.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 on Linux, when the Fluendo MP3 plugin for GStreamer is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted MP3 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0813/">CVE-2015-0813</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925393">SUSE bug 925393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0814</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0814" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0814" ref_url="https://www.suse.com/security/cve/CVE-2015-0814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0704-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001346.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0814/">CVE-2015-0814</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925392">SUSE bug 925392</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0815</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0815" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0815" ref_url="https://www.suse.com/security/cve/CVE-2015-0815" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0704-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0815/">CVE-2015-0815</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925392">SUSE bug 925392</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0816</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0816" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0816" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0816" ref_url="https://www.suse.com/security/cve/CVE-2015-0816" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0704-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001346.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource: URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy, as demonstrated by the resource: URL associated with PDF.js.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0816/">CVE-2015-0816</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925395">SUSE bug 925395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0817</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0817" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0817" ref_url="https://www.suse.com/security/cve/CVE-2015-0817" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0593-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0593-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0607-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0636-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00096.html" source="SUSE-SU"/>
    <description>
    The asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and SeaMonkey before 2.33.1 does not properly determine the cases in which bounds checking may be safely skipped during JIT compilation and heap access, which allows remote attackers to read or write to unintended memory locations, and consequently execute arbitrary code, via crafted JavaScript.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0817/">CVE-2015-0817</cve>
	<bugzilla href="https://bugzilla.suse.com/923495">SUSE bug 923495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923534">SUSE bug 923534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0818</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0818" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0818" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0818" ref_url="https://www.suse.com/security/cve/CVE-2015-0818" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0593-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0593-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0607-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0636-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00096.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0818/">CVE-2015-0818</cve>
	<bugzilla href="https://bugzilla.suse.com/923495">SUSE bug 923495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923534">SUSE bug 923534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0819</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0819" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0819" ref_url="https://www.suse.com/security/cve/CVE-2015-0819" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a foreground tab, which allows remote attackers to conduct spoofing and clickjacking attacks by leveraging access to a UI Tour web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0819/">CVE-2015-0819</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0820</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0820" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0820" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0820" ref_url="https://www.suse.com/security/cve/CVE-2015-0820" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a non-extensible state to an extensible state, which allows remote attackers to bypass a Caja Compiler sandbox protection mechanism or a Secure EcmaScript sandbox protection mechanism via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0820/">CVE-2015-0820</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0821</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0821" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0821" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0821" ref_url="https://www.suse.com/security/cve/CVE-2015-0821" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 36.0 allows user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is accessed with unspecified mouse and keyboard actions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0821/">CVE-2015-0821</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0822</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0822" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0822" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0822" ref_url="https://www.suse.com/security/cve/CVE-2015-0822" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0822/">CVE-2015-0822</cve>
	<bugzilla href="https://bugzilla.suse.com/910669">SUSE bug 910669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923534">SUSE bug 923534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924515">SUSE bug 924515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0823</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0823" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0823" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0823" ref_url="https://www.suse.com/security/cve/CVE-2015-0823" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before 36.0, might allow remote attackers to trigger problematic Developer Console information or possibly have unspecified other impact by leveraging incorrect macro expansion, related to the ots::ots_gasp_parse function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0823/">CVE-2015-0823</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0824</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0824" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0824" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0824" ref_url="https://www.suse.com/security/cve/CVE-2015-0824" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of service (out-of-bounds write of zero values, and application crash) via vectors that trigger use of DrawTarget and the Cairo library for image drawing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0824/">CVE-2015-0824</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0825</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0825" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0825" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0825" ref_url="https://www.suse.com/security/cve/CVE-2015-0825" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla Firefox before 36.0 allows remote attackers to obtain sensitive information from process memory via a malformed MP3 file that improperly interacts with memory allocation during playback.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0825/">CVE-2015-0825</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0826</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0826" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0826" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0826" ref_url="https://www.suse.com/security/cve/CVE-2015-0826" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read of heap memory) via a crafted Cascading Style Sheets (CSS) token sequence that triggers a restyle or reflow operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0826/">CVE-2015-0826</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0827</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0827" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0827" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0827" ref_url="https://www.suse.com/security/cve/CVE-2015-0827" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0827/">CVE-2015-0827</cve>
	<bugzilla href="https://bugzilla.suse.com/910669">SUSE bug 910669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923534">SUSE bug 923534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924515">SUSE bug 924515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0828</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0828" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0828" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0828" ref_url="https://www.suse.com/security/cve/CVE-2015-0828" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstandard memory allocator is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted JavaScript code that makes an XMLHttpRequest call with zero bytes of data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0828/">CVE-2015-0828</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0829</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0829" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0829" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0829" ref_url="https://www.suse.com/security/cve/CVE-2015-0829" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code via a crafted MP4 video that is improperly handled during playback.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0829/">CVE-2015-0829</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0830</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0830" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0830" ref_url="https://www.suse.com/security/cve/CVE-2015-0830" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for copying an unspecified string to a shader's compilation log, which allows remote attackers to cause a denial of service (application crash) via crafted WebGL content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0830/">CVE-2015-0830</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0831</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0831" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0831" ref_url="https://www.suse.com/security/cve/CVE-2015-0831" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0831/">CVE-2015-0831</cve>
	<bugzilla href="https://bugzilla.suse.com/910669">SUSE bug 910669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923534">SUSE bug 923534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924515">SUSE bug 924515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150832" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0832</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0832" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0832" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0832" ref_url="https://www.suse.com/security/cve/CVE-2015-0832" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0832/">CVE-2015-0832</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0833</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0833" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0833" ref_url="https://www.suse.com/security/cve/CVE-2015-0833" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in (1) the current working directory or (2) a temporary directory, as demonstrated by bcrypt.dll.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0833/">CVE-2015-0833</cve>
	<bugzilla href="https://bugzilla.suse.com/923534">SUSE bug 923534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0834</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0834" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0834" ref_url="https://www.suse.com/security/cve/CVE-2015-0834" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS, which makes it easier for man-in-the-middle attackers to discover credentials by spoofing a server and completing a brute-force attack within a short time window.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0834/">CVE-2015-0834</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0835</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0835" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0835" ref_url="https://www.suse.com/security/cve/CVE-2015-0835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0835/">CVE-2015-0835</cve>
	<bugzilla href="https://bugzilla.suse.com/910669">SUSE bug 910669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924515">SUSE bug 924515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0836</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0836" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0836" ref_url="https://www.suse.com/security/cve/CVE-2015-0836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0836/">CVE-2015-0836</cve>
	<bugzilla href="https://bugzilla.suse.com/910669">SUSE bug 910669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923534">SUSE bug 923534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924515">SUSE bug 924515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0837</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0837" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0837" ref_url="https://www.suse.com/security/cve/CVE-2015-0837" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001579.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1626-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001602.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1503-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00005.html" source="SUSE-SU"/>
    <description>
    The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-0837/">CVE-2015-0837</cve>
	<bugzilla href="https://bugzilla.suse.com/920057">SUSE bug 920057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482233" comment="libgcrypt20-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482234" comment="libgcrypt20-32bit-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0839</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0839" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0839" ref_url="https://www.suse.com/security/cve/CVE-2015-0839" source="SUSE CVE"/>
    <description>
    The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id from a keyserver to verify print plugin downloads.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0839/">CVE-2015-0839</cve>
	<bugzilla href="https://bugzilla.suse.com/933191">SUSE bug 933191</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628514" comment="hplip-hpijs-3.20.11-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151010" comment="hplip-hpijs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628515" comment="hplip-sane-3.20.11-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151011" comment="hplip-sane is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0840</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0840" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0840" ref_url="https://www.suse.com/security/cve/CVE-2015-0840" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1058-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00029.html" source="SUSE-SU"/>
    <description>
    The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0840/">CVE-2015-0840</cve>
	<bugzilla href="https://bugzilla.suse.com/926749">SUSE bug 926749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480953" comment="update-alternatives-1.19.0.4-2.48 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154128" comment="update-alternatives is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0848</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0848" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0848" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0848" ref_url="https://www.suse.com/security/cve/CVE-2015-0848" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1378-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001569.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1132-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1134-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0848/">CVE-2015-0848</cve>
	<bugzilla href="https://bugzilla.suse.com/933109">SUSE bug 933109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694893" comment="libwmf-0_2-7-0.2.8.4-bp153.1.32 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152632" comment="libwmf-0_2-7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150856" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0856</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0856" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0856" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0856" ref_url="https://www.suse.com/security/cve/CVE-2015-0856" source="SUSE CVE"/>
    <description>
    daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0856/">CVE-2015-0856</cve>
	<bugzilla href="https://bugzilla.suse.com/950491">SUSE bug 950491</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694917" comment="sddm-0.18.0-lp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152215" comment="sddm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694918" comment="sddm-branding-openSUSE-0.18.0-lp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152216" comment="sddm-branding-openSUSE is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1038</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1038" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1038" ref_url="https://www.suse.com/security/cve/CVE-2015-1038" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001551.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1162-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00000.html" source="SUSE-SU"/>
    <description>
    p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-1038/">CVE-2015-1038</cve>
	<bugzilla href="https://bugzilla.suse.com/912878">SUSE bug 912878</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694907" comment="p7zip-16.02-14.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152637" comment="p7zip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694908" comment="p7zip-full-16.02-14.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474268" comment="p7zip-full is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1158</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1158" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1158" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1158" ref_url="https://www.suse.com/security/cve/CVE-2015-1158" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1044-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html" source="SUSE-SU"/>
    <description>
    The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1158/">CVE-2015-1158</cve>
	<bugzilla href="https://bugzilla.suse.com/924208">SUSE bug 924208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976653">SUSE bug 976653</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151159" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1159</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1159" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1159" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1159" ref_url="https://www.suse.com/security/cve/CVE-2015-1159" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1044-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1159/">CVE-2015-1159</cve>
	<bugzilla href="https://bugzilla.suse.com/924208">SUSE bug 924208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976653">SUSE bug 976653</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1205</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1205" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1205" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1205" ref_url="https://www.suse.com/security/cve/CVE-2015-1205" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1205/">CVE-2015-1205</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915529">SUSE bug 915529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915530">SUSE bug 915530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915533">SUSE bug 915533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915534">SUSE bug 915534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915535">SUSE bug 915535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1209</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1209" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1209" ref_url="https://www.suse.com/security/cve/CVE-2015-1209" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in core/editing/VisibleSelection.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper handling of a shadow-root anchor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1209/">CVE-2015-1209</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916841">SUSE bug 916841</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1210</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1210" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1210" ref_url="https://www.suse.com/security/cve/CVE-2015-1210" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the V8 bindings in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, does not properly consider frame access restrictions during the throwing of an exception, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1210/">CVE-2015-1210</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916843">SUSE bug 916843</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1211</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1211" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1211" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1211" ref_url="https://www.suse.com/security/cve/CVE-2015-1211" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The OriginCanAccessServiceWorkers function in content/browser/service_worker/service_worker_dispatcher_host.cc in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android does not properly restrict the URI scheme during a ServiceWorker registration, which allows remote attackers to gain privileges via a filesystem: URI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1211/">CVE-2015-1211</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916838">SUSE bug 916838</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1212</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1212" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1212" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1212" ref_url="https://www.suse.com/security/cve/CVE-2015-1212" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1212/">CVE-2015-1212</cve>
	<bugzilla href="https://bugzilla.suse.com/914468">SUSE bug 914468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916840">SUSE bug 916840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1213</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1213" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1213" ref_url="https://www.suse.com/security/cve/CVE-2015-1213" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    The SkBitmap::ReadRawPixels function in core/SkBitmap.cpp in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1213/">CVE-2015-1213</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1214</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1214" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1214" ref_url="https://www.suse.com/security/cve/CVE-2015-1214" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a reset action with a large count value, leading to an out-of-bounds write operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1214/">CVE-2015-1214</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1215</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1215" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1215" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1215" ref_url="https://www.suse.com/security/cve/CVE-2015-1215" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    The filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1215/">CVE-2015-1215</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1216</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1216" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1216" ref_url="https://www.suse.com/security/cve/CVE-2015-1216" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core/v8/custom/V8WindowCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a frame detachment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1216/">CVE-2015-1216</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1217</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1217" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1217" ref_url="https://www.suse.com/security/cve/CVE-2015-1217" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, does not properly compile listeners, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1217/">CVE-2015-1217</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1218</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1218" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1218" ref_url="https://www.suse.com/security/cve/CVE-2015-1218" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger movement of a SCRIPT element to different documents, related to (1) the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp and (2) the SVGScriptElement::didMoveToNewDocument function in core/svg/SVGScriptElement.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1218/">CVE-2015-1218</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1219</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1219" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1219" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1219" ref_url="https://www.suse.com/security/cve/CVE-2015-1219" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted allocation of a large amount of memory during WebGL rendering.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1219/">CVE-2015-1219</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151220" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1220</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1220" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1220" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1220" ref_url="https://www.suse.com/security/cve/CVE-2015-1220" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cpp in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted frame size in a GIF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1220/">CVE-2015-1220</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1221</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1221" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1221" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1221" ref_url="https://www.suse.com/security/cve/CVE-2015-1221" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect ordering of operations in the Web SQL Database thread relative to Blink's main thread, related to the shutdown function in web/WebKit.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1221/">CVE-2015-1221</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1222</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1222" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1222" ref_url="https://www.suse.com/security/cve/CVE-2015-1222" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap implementation in content/browser/service_worker/service_worker_script_cache_map.cc in Google Chrome before 41.0.2272.76 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a ServiceWorkerContextWrapper::DeleteAndStartOver call, related to the NotifyStartedCaching and NotifyFinishedCaching functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1222/">CVE-2015-1222</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1223</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1223" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1223" ref_url="https://www.suse.com/security/cve/CVE-2015-1223" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger extraneous change events, as demonstrated by events for invalid input or input to read-only fields, related to the initializeTypeInParsing and updateType functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1223/">CVE-2015-1223</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151224" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1224</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1224" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1224" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1224" ref_url="https://www.suse.com/security/cve/CVE-2015-1224" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    The VpxVideoDecoder::VpxDecode function in media/filters/vpx_video_decoder.cc in the vpxdecoder implementation in Google Chrome before 41.0.2272.76 does not ensure that alpha-plane dimensions are identical to image dimensions, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted VPx video data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1224/">CVE-2015-1224</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1225</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1225" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1225" ref_url="https://www.suse.com/security/cve/CVE-2015-1225" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    PDFium, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1225/">CVE-2015-1225</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1226</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1226" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1226" ref_url="https://www.suse.com/security/cve/CVE-2015-1226" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    The DebuggerFunction::InitAgentHost function in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 41.0.2272.76 does not properly restrict what URLs are available as debugger targets, which allows remote attackers to bypass intended access restrictions via a crafted extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1226/">CVE-2015-1226</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151227" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1227</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1227" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1227" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1227" ref_url="https://www.suse.com/security/cve/CVE-2015-1227" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    The DragImage::create function in platform/DragImage.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not initialize memory for image drawing, which allows remote attackers to have an unspecified impact by triggering a failed image decoding, as demonstrated by an image for which the default orientation cannot be used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1227/">CVE-2015-1227</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1228</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1228" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1228" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1228" ref_url="https://www.suse.com/security/cve/CVE-2015-1228" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    The RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not force a relayout operation and consequently does not initialize memory for a data structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted Cascading Style Sheets (CSS) token sequence.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1228/">CVE-2015-1228</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151229" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1229</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1229" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1229" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1229" ref_url="https://www.suse.com/security/cve/CVE-2015-1229" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    net/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a 407 (aka Proxy Authentication Required) HTTP status code accompanied by a Set-Cookie header, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1229/">CVE-2015-1229</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151230" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1230</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1230" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1230" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1230" ref_url="https://www.suse.com/security/cve/CVE-2015-1230" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    The getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in Google Chrome before 41.0.2272.76, has a name conflict with the AudioContext class, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that adds an AudioContext event listener and triggers "type confusion."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1230/">CVE-2015-1230</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1231</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1231" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1231" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1231" ref_url="https://www.suse.com/security/cve/CVE-2015-1231" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00019.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1231/">CVE-2015-1231</cve>
	<bugzilla href="https://bugzilla.suse.com/920825">SUSE bug 920825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151233" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1233</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1233" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1233" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1233" ref_url="https://www.suse.com/security/cve/CVE-2015-1233" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0682-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1887-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1233/">CVE-2015-1233</cve>
	<bugzilla href="https://bugzilla.suse.com/925713">SUSE bug 925713</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151234" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1234</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1234" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1234" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1234" ref_url="https://www.suse.com/security/cve/CVE-2015-1234" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0682-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1887-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Race condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0.2272.118 allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact by manipulating OpenGL ES commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1234/">CVE-2015-1234</cve>
	<bugzilla href="https://bugzilla.suse.com/925714">SUSE bug 925714</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151235" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1235</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1235" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1235" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1235" ref_url="https://www.suse.com/security/cve/CVE-2015-1235" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0748-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1887-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html" source="SUSE-SU"/>
    <description>
    The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy via a crafted HTML document with an IFRAME element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1235/">CVE-2015-1235</cve>
	<bugzilla href="https://bugzilla.suse.com/927302">SUSE bug 927302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1236</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1236" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1236" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1236" ref_url="https://www.suse.com/security/cve/CVE-2015-1236" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0748-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1887-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html" source="SUSE-SU"/>
    <description>
    The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a crafted web site containing a media element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1236/">CVE-2015-1236</cve>
	<bugzilla href="https://bugzilla.suse.com/927302">SUSE bug 927302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151237" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1237</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1237" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1237" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1237" ref_url="https://www.suse.com/security/cve/CVE-2015-1237" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0748-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1887-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages during a detach operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1237/">CVE-2015-1237</cve>
	<bugzilla href="https://bugzilla.suse.com/927302">SUSE bug 927302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1238</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1238" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1238" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1238" ref_url="https://www.suse.com/security/cve/CVE-2015-1238" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0748-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1887-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Skia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1238/">CVE-2015-1238</cve>
	<bugzilla href="https://bugzilla.suse.com/927302">SUSE bug 927302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1240</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1240" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1240" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1240" ref_url="https://www.suse.com/security/cve/CVE-2015-1240" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0748-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1887-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html" source="SUSE-SU"/>
    <description>
    gpu/blink/webgraphicscontext3d_impl.cc in the WebGL implementation in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WebGL program that triggers a state inconsistency.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1240/">CVE-2015-1240</cve>
	<bugzilla href="https://bugzilla.suse.com/927302">SUSE bug 927302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1241</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1241" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1241" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1241" ref_url="https://www.suse.com/security/cve/CVE-2015-1241" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0748-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1887-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1241/">CVE-2015-1241</cve>
	<bugzilla href="https://bugzilla.suse.com/927302">SUSE bug 927302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1242</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1242" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1242" ref_url="https://www.suse.com/security/cve/CVE-2015-1242" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0748-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1887-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html" source="SUSE-SU"/>
    <description>
    The ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4.2.77.8, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that leverages "type confusion" in the check-elimination optimization.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1242/">CVE-2015-1242</cve>
	<bugzilla href="https://bugzilla.suse.com/927302">SUSE bug 927302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1243</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1243" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1243" ref_url="https://www.suse.com/security/cve/CVE-2015-1243" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0853-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00009.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an attempt to unregister a MutationObserver object that is not currently registered.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1243/">CVE-2015-1243</cve>
	<bugzilla href="https://bugzilla.suse.com/929075">SUSE bug 929075</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1244</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1244" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1244" ref_url="https://www.suse.com/security/cve/CVE-2015-1244" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0748-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1887-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html" source="SUSE-SU"/>
    <description>
    The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1244/">CVE-2015-1244</cve>
	<bugzilla href="https://bugzilla.suse.com/927302">SUSE bug 927302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151245" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1245</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1245" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1245" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1245" ref_url="https://www.suse.com/security/cve/CVE-2015-1245" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0748-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1887-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/location_bar/open_pdf_in_reader_view.cc in Google Chrome before 41.0.2272.76 might allow user-assisted remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering interaction with a PDFium "Open PDF in Reader" button that has an invalid tab association.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1245/">CVE-2015-1245</cve>
	<bugzilla href="https://bugzilla.suse.com/927302">SUSE bug 927302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151246" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1246</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1246" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1246" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1246" ref_url="https://www.suse.com/security/cve/CVE-2015-1246" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0748-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1887-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1246/">CVE-2015-1246</cve>
	<bugzilla href="https://bugzilla.suse.com/927302">SUSE bug 927302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1247</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1247" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1247" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1247" ref_url="https://www.suse.com/security/cve/CVE-2015-1247" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0748-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1887-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html" source="SUSE-SU"/>
    <description>
    The SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/search_engines/search_engine_tab_helper.cc in Google Chrome before 42.0.2311.90 does not prevent use of a file: URL for an OpenSearch descriptor XML document, which might allow remote attackers to obtain sensitive information from local files via a crafted (1) http or (2) https web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1247/">CVE-2015-1247</cve>
	<bugzilla href="https://bugzilla.suse.com/927302">SUSE bug 927302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1248</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1248" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1248" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1248" ref_url="https://www.suse.com/security/cve/CVE-2015-1248" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0748-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1887-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html" source="SUSE-SU"/>
    <description>
    The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file in a temporary filesystem and then referencing this file with a filesystem:http: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1248/">CVE-2015-1248</cve>
	<bugzilla href="https://bugzilla.suse.com/927302">SUSE bug 927302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1249</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1249" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1249" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1249" ref_url="https://www.suse.com/security/cve/CVE-2015-1249" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0748-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1887-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1249/">CVE-2015-1249</cve>
	<bugzilla href="https://bugzilla.suse.com/927302">SUSE bug 927302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1250</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1250" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1250" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1250" ref_url="https://www.suse.com/security/cve/CVE-2015-1250" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0853-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00009.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1250/">CVE-2015-1250</cve>
	<bugzilla href="https://bugzilla.suse.com/929075">SUSE bug 929075</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1251</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1251" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1251" ref_url="https://www.suse.com/security/cve/CVE-2015-1251" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1877-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the SpeechRecognitionClient implementation in the Speech subsystem in Google Chrome before 43.0.2357.65 allows remote attackers to execute arbitrary code via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1251/">CVE-2015-1251</cve>
	<bugzilla href="https://bugzilla.suse.com/931659">SUSE bug 931659</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1252</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1252" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1252" ref_url="https://www.suse.com/security/cve/CVE-2015-1252" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1877-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    common/partial_circular_buffer.cc in Google Chrome before 43.0.2357.65 does not properly handle wraps, which allows remote attackers to bypass a sandbox protection mechanism or cause a denial of service (out-of-bounds write) via vectors that trigger a write operation with a large amount of data, related to the PartialCircularBuffer::Write and PartialCircularBuffer::DoWrite functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1252/">CVE-2015-1252</cve>
	<bugzilla href="https://bugzilla.suse.com/931671">SUSE bug 931671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151253" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1253</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1253" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1253" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1253" ref_url="https://www.suse.com/security/cve/CVE-2015-1253" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1877-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    core/html/parser/HTMLConstructionSite.cpp in the DOM implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that appends a child to a SCRIPT element, related to the insert and executeReparentTask functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1253/">CVE-2015-1253</cve>
	<bugzilla href="https://bugzilla.suse.com/931670">SUSE bug 931670</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1254</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1254" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1254" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1254" ref_url="https://www.suse.com/security/cve/CVE-2015-1254" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1877-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1254/">CVE-2015-1254</cve>
	<bugzilla href="https://bugzilla.suse.com/931669">SUSE bug 931669</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1255</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1255" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1255" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1255" ref_url="https://www.suse.com/security/cve/CVE-2015-1255" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1877-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in content/renderer/media/webaudio_capturer_source.cc in the WebAudio implementation in Google Chrome before 43.0.2357.65 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by leveraging improper handling of a stop action for an audio track.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1255/">CVE-2015-1255</cve>
	<bugzilla href="https://bugzilla.suse.com/931674">SUSE bug 931674</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151256" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1256</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1256" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1256" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1256" ref_url="https://www.suse.com/security/cve/CVE-2015-1256" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1877-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that leverages improper handling of a shadow tree for a use element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1256/">CVE-2015-1256</cve>
	<bugzilla href="https://bugzilla.suse.com/931664">SUSE bug 931664</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151257" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1257</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1257" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1257" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1257" ref_url="https://www.suse.com/security/cve/CVE-2015-1257" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1877-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    platform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, does not properly handle an insufficient number of values in an feColorMatrix filter, which allows remote attackers to cause a denial of service (container overflow) or possibly have unspecified other impact via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1257/">CVE-2015-1257</cve>
	<bugzilla href="https://bugzilla.suse.com/931665">SUSE bug 931665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1258</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1258" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1258" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1258" ref_url="https://www.suse.com/security/cve/CVE-2015-1258" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1877-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Google Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate --size-limit value, which allows remote attackers to trigger a negative value for a size field, and consequently cause a denial of service or possibly have unspecified other impact, via a crafted frame size in VP9 video data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1258/">CVE-2015-1258</cve>
	<bugzilla href="https://bugzilla.suse.com/931666">SUSE bug 931666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151259" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1259</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1259" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1259" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1259" ref_url="https://www.suse.com/security/cve/CVE-2015-1259" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1877-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1259/">CVE-2015-1259</cve>
	<bugzilla href="https://bugzilla.suse.com/931667">SUSE bug 931667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151260" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1260</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1260" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1260" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1260" ref_url="https://www.suse.com/security/cve/CVE-2015-1260" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1877-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in content/renderer/media/user_media_client_impl.cc in the WebRTC implementation in Google Chrome before 43.0.2357.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that executes upon completion of a getUserMedia request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1260/">CVE-2015-1260</cve>
	<bugzilla href="https://bugzilla.suse.com/931668">SUSE bug 931668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1261</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1261" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1261" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1261" ref_url="https://www.suse.com/security/cve/CVE-2015-1261" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1877-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    android/java/src/org/chromium/chrome/browser/WebsiteSettingsPopup.java in Google Chrome before 43.0.2357.65 on Android does not properly restrict use of a URL's fragment identifier during construction of a page-info popup, which allows remote attackers to spoof the URL bar or deliver misleading popup content via crafted text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1261/">CVE-2015-1261</cve>
	<bugzilla href="https://bugzilla.suse.com/931673">SUSE bug 931673</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1262</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1262" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1262" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1262" ref_url="https://www.suse.com/security/cve/CVE-2015-1262" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1877-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    platform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65, does not initialize a certain width field, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Unicode text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1262/">CVE-2015-1262</cve>
	<bugzilla href="https://bugzilla.suse.com/931672">SUSE bug 931672</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151263" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1263</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1263" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1263" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1263" ref_url="https://www.suse.com/security/cve/CVE-2015-1263" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1877-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    The Spellcheck API implementation in Google Chrome before 43.0.2357.65 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1263/">CVE-2015-1263</cve>
	<bugzilla href="https://bugzilla.suse.com/931663">SUSE bug 931663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151264" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1264</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1264" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1264" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1264" ref_url="https://www.suse.com/security/cve/CVE-2015-1264" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1877-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Google Chrome before 43.0.2357.65 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted data that is improperly handled by the Bookmarks feature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1264/">CVE-2015-1264</cve>
	<bugzilla href="https://bugzilla.suse.com/931661">SUSE bug 931661</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1265</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1265" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1265" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1265" ref_url="https://www.suse.com/security/cve/CVE-2015-1265" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1877-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1265/">CVE-2015-1265</cve>
	<bugzilla href="https://bugzilla.suse.com/931660">SUSE bug 931660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1266</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1266" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1266" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1266" ref_url="https://www.suse.com/security/cve/CVE-2015-1266" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1146-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1872-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html" source="SUSE-SU"/>
    <description>
    content/browser/webui/content_web_ui_controller_factory.cc in Google Chrome before 43.0.2357.130 does not properly consider the scheme in determining whether a URL is associated with a WebUI SiteInstance, which allows remote attackers to bypass intended access restrictions via a similar URL, as demonstrated by use of http://gpu when there is a WebUI class for handling chrome://gpu requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1266/">CVE-2015-1266</cve>
	<bugzilla href="https://bugzilla.suse.com/935723">SUSE bug 935723</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1267</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1267" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1267" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1267" ref_url="https://www.suse.com/security/cve/CVE-2015-1267" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1146-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1872-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html" source="SUSE-SU"/>
    <description>
    Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp, WebBlob.cpp, WebDOMError.cpp, and WebDOMFileSystem.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1267/">CVE-2015-1267</cve>
	<bugzilla href="https://bugzilla.suse.com/935723">SUSE bug 935723</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1268</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1268" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1268" ref_url="https://www.suse.com/security/cve/CVE-2015-1268" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1146-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1872-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html" source="SUSE-SU"/>
    <description>
    bindings/scripts/v8_types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a return value's DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code, as demonstrated by use of a data: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1268/">CVE-2015-1268</cve>
	<bugzilla href="https://bugzilla.suse.com/935723">SUSE bug 935723</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151269" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1269</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1269" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1269" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1269" ref_url="https://www.suse.com/security/cve/CVE-2015-1269" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1146-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1872-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html" source="SUSE-SU"/>
    <description>
    The DecodeHSTSPreloadRaw function in net/http/transport_security_state.cc in Google Chrome before 43.0.2357.130 does not properly canonicalize DNS hostnames before making comparisons to HSTS or HPKP preload entries, which allows remote attackers to bypass intended access restrictions via a string that (1) ends in a . (dot) character or (2) is not entirely lowercase.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1269/">CVE-2015-1269</cve>
	<bugzilla href="https://bugzilla.suse.com/935723">SUSE bug 935723</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1270</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1270" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1270" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1270" ref_url="https://www.suse.com/security/cve/CVE-2015-1270" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in Google Chrome before 44.0.2403.89, mishandles converter names with initial x- substrings, which allows remote attackers to cause a denial of service (read of uninitialized memory) or possibly have unspecified other impact via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1270/">CVE-2015-1270</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1271</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1271" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1271" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1271" ref_url="https://www.suse.com/security/cve/CVE-2015-1271" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted PDF document that triggers a large memory allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1271/">CVE-2015-1271</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1272</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1272" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1272" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1272" ref_url="https://www.suse.com/security/cve/CVE-2015-1272" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the continued availability of a GPUChannelHost data structure during Blink shutdown, related to content/browser/gpu/browser_gpu_channel_host_factory.cc and content/renderer/render_thread_impl.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1272/">CVE-2015-1272</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1273</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1273" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1273" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1273" ref_url="https://www.suse.com/security/cve/CVE-2015-1273" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1273/">CVE-2015-1273</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1274</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1274" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1274" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1274" ref_url="https://www.suse.com/security/cve/CVE-2015-1274" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote attackers to execute arbitrary code by providing a crafted file and leveraging a user's previous "Always open files of this type" choice, related to download_commands.cc and download_prefs.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1274/">CVE-2015-1274</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151275" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1275</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1275" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1275" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1275" ref_url="https://www.suse.com/security/cve/CVE-2015-1275" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in org/chromium/chrome/browser/UrlUtilities.java in Google Chrome before 44.0.2403.89 on Android allows remote attackers to inject arbitrary web script or HTML via a crafted intent: URL, as demonstrated by a trailing alert(document.cookie);// substring, aka "Universal XSS (UXSS)."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1275/">CVE-2015-1275</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151276" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1276</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1276" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1276" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1276" ref_url="https://www.suse.com/security/cve/CVE-2015-1276" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an abort action before a certain write operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1276/">CVE-2015-1276</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1277</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1277" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1277" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1277" ref_url="https://www.suse.com/security/cve/CVE-2015-1277" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging lack of certain validity checks for accessibility-tree data structures.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1277/">CVE-2015-1277</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151278" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1278</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1278" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1278" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1278" ref_url="https://www.suse.com/security/cve/CVE-2015-1278" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    content/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF document's modal dialog is closed upon navigation to an interstitial page, which allows remote attackers to spoof URLs via a crafted document, as demonstrated by the alert_dialog.pdf document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1278/">CVE-2015-1278</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151279" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1279</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1279" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1279" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1279" ref_url="https://www.suse.com/security/cve/CVE-2015-1279" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via large height and stride values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1279/">CVE-2015-1279</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151280" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1280</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1280" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1280" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1280" ref_url="https://www.suse.com/security/cve/CVE-2015-1280" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    SkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging access to a renderer process and providing crafted serialized data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1280/">CVE-2015-1280</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151281" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1281</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1281" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1281" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1281" ref_url="https://www.suse.com/security/cve/CVE-2015-1281" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly determine the V8 context of a microtask, which allows remote attackers to bypass Content Security Policy (CSP) restrictions by providing an image from an unintended source.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1281/">CVE-2015-1281</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151282" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1282</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1282" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1282" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1282" ref_url="https://www.suse.com/security/cve/CVE-2015-1282" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to the (1) Document::delay and (2) Document::DoFieldDelay functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1282/">CVE-2015-1282</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1283</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1283" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1283" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1283" ref_url="https://www.suse.com/security/cve/CVE-2015-1283" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1508-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1512-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1283/">CVE-2015-1283</cve>
	<bugzilla href="https://bugzilla.suse.com/1034050">SUSE bug 1034050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979441">SUSE bug 979441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980391">SUSE bug 980391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983985">SUSE bug 983985</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481942" comment="expat-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481944" comment="libexpat1-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481945" comment="libexpat1-32bit-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151284" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1284</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1284" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1284" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1284" ref_url="https://www.suse.com/security/cve/CVE-2015-1284" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html" source="SUSE-SU"/>
    <description>
    The LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly check for a page's maximum number of frames, which allows remote attackers to cause a denial of service (invalid count value and use-after-free) or possibly have unspecified other impact via crafted JavaScript code that makes many createElement calls for IFRAME elements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1284/">CVE-2015-1284</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959178">SUSE bug 959178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1285</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1285" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1285" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1285" ref_url="https://www.suse.com/security/cve/CVE-2015-1285" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    The XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 44.0.2403.89, does not properly choose a truncation point, which makes it easier for remote attackers to obtain sensitive information via an unspecified linear-time attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1285/">CVE-2015-1285</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1286</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1286" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1286" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1286" ref_url="https://www.suse.com/security/cve/CVE-2015-1286" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function in extensions/renderer/v8_context_native_handler.cc in Google Chrome before 44.0.2403.89 allows remote attackers to inject arbitrary web script or HTML by leveraging the lack of a certain V8 context restriction, aka a Blink "Universal XSS (UXSS)."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1286/">CVE-2015-1286</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151287" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1287</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1287" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1287" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1287" ref_url="https://www.suse.com/security/cve/CVE-2015-1287" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    Blink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits the cases in which a Cascading Style Sheets (CSS) document is required to have the text/css content type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to core/fetch/CSSStyleSheetResource.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1287/">CVE-2015-1287</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1288</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1288" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1288" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1288" ref_url="https://www.suse.com/security/cve/CVE-2015-1288" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    The Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file, a related issue to CVE-2015-1263.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1288/">CVE-2015-1288</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1289</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1289" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1289" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1289" ref_url="https://www.suse.com/security/cve/CVE-2015-1289" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1289/">CVE-2015-1289</cve>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1291</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1291" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1291" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1291" ref_url="https://www.suse.com/security/cve/CVE-2015-1291" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1873-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html" source="SUSE-SU"/>
    <description>
    The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not check whether a node is expected, which allows remote attackers to bypass the Same Origin Policy or cause a denial of service (DOM tree corruption) via a web site with crafted JavaScript code and IFRAME elements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1291/">CVE-2015-1291</cve>
	<bugzilla href="https://bugzilla.suse.com/944144">SUSE bug 944144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959178">SUSE bug 959178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151292" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1292</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1292" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1292" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1292" ref_url="https://www.suse.com/security/cve/CVE-2015-1292" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1873-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html" source="SUSE-SU"/>
    <description>
    The NavigatorServiceWorker::serviceWorker function in modules/serviceworkers/NavigatorServiceWorker.cpp in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy by accessing a Service Worker.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1292/">CVE-2015-1292</cve>
	<bugzilla href="https://bugzilla.suse.com/944144">SUSE bug 944144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959178">SUSE bug 959178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151293" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1293</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1293" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1293" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1293" ref_url="https://www.suse.com/security/cve/CVE-2015-1293" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1873-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html" source="SUSE-SU"/>
    <description>
    The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1293/">CVE-2015-1293</cve>
	<bugzilla href="https://bugzilla.suse.com/944144">SUSE bug 944144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1294</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1294" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1294" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1294" ref_url="https://www.suse.com/security/cve/CVE-2015-1294" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1873-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the SkMatrix::invertNonIdentity function in core/SkMatrix.cpp in Skia, as used in Google Chrome before 45.0.2454.85, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering the use of matrix elements that lead to an infinite result during an inversion calculation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1294/">CVE-2015-1294</cve>
	<bugzilla href="https://bugzilla.suse.com/944144">SUSE bug 944144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959178">SUSE bug 959178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1295</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1295" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1295" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1295" ref_url="https://www.suse.com/security/cve/CVE-2015-1295" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1873-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in the PrintWebViewHelper class in components/printing/renderer/print_web_view_helper.cc in Google Chrome before 45.0.2454.85 allow user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact by triggering nested IPC messages during preparation for printing, as demonstrated by messages associated with PDF documents in conjunction with messages about printer capabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1295/">CVE-2015-1295</cve>
	<bugzilla href="https://bugzilla.suse.com/944144">SUSE bug 944144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1296</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1296" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1296" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1296" ref_url="https://www.suse.com/security/cve/CVE-2015-1296" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1873-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html" source="SUSE-SU"/>
    <description>
    The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a URL, as demonstrated by the omnibox in localizations for right-to-left languages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1296/">CVE-2015-1296</cve>
	<bugzilla href="https://bugzilla.suse.com/944144">SUSE bug 944144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1297</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1297" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1297" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1297" ref_url="https://www.suse.com/security/cve/CVE-2015-1297" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1873-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html" source="SUSE-SU"/>
    <description>
    The WebRequest API implementation in extensions/browser/api/web_request/web_request_api.cc in Google Chrome before 45.0.2454.85 does not properly consider a request's source before accepting the request, which allows remote attackers to bypass intended access restrictions via a crafted (1) app or (2) extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1297/">CVE-2015-1297</cve>
	<bugzilla href="https://bugzilla.suse.com/944144">SUSE bug 944144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1298</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1298" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1298" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1298" ref_url="https://www.suse.com/security/cve/CVE-2015-1298" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1873-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html" source="SUSE-SU"/>
    <description>
    The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtime_api.cc in Google Chrome before 45.0.2454.85 does not ensure that the setUninstallURL preference corresponds to the URL of a web site, which allows user-assisted remote attackers to trigger access to an arbitrary URL via a crafted extension that is uninstalled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1298/">CVE-2015-1298</cve>
	<bugzilla href="https://bugzilla.suse.com/944144">SUSE bug 944144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151299" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1299</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1299" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1299" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1299" ref_url="https://www.suse.com/security/cve/CVE-2015-1299" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1873-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the shared-timer implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging erroneous timer firing, related to ThreadTimers.cpp and Timer.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1299/">CVE-2015-1299</cve>
	<bugzilla href="https://bugzilla.suse.com/944144">SUSE bug 944144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1300</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1300" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1300" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1300" ref_url="https://www.suse.com/security/cve/CVE-2015-1300" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1873-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html" source="SUSE-SU"/>
    <description>
    The FrameFetchContext::updateTimingInfoForIFrameNavigation function in core/loader/FrameFetchContext.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to obtain sensitive information via crafted JavaScript code that leverages a history.back call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1300/">CVE-2015-1300</cve>
	<bugzilla href="https://bugzilla.suse.com/944144">SUSE bug 944144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1301</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1301" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1301" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1301" ref_url="https://www.suse.com/security/cve/CVE-2015-1301" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1873-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 45.0.2454.85 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1301/">CVE-2015-1301</cve>
	<bugzilla href="https://bugzilla.suse.com/944144">SUSE bug 944144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1302</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1302" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1302" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1302" ref_url="https://www.suse.com/security/cve/CVE-2015-1302" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2068-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2069-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00121.html" source="SUSE-SU"/>
    <description>
    The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and out_of_process_instance.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1302/">CVE-2015-1302</cve>
	<bugzilla href="https://bugzilla.suse.com/954579">SUSE bug 954579</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151303" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1303</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1303" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1303" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1303" ref_url="https://www.suse.com/security/cve/CVE-2015-1303" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1719-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00002.html" source="SUSE-SU"/>
    <description>
    bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not perform a rethrow action to propagate information about a cross-context exception, which allows remote attackers to bypass the Same Origin Policy via a crafted HTML document containing an IFRAME element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1303/">CVE-2015-1303</cve>
	<bugzilla href="https://bugzilla.suse.com/947504">SUSE bug 947504</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1304</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1304" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1304" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1304" ref_url="https://www.suse.com/security/cve/CVE-2015-1304" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1719-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00002.html" source="SUSE-SU"/>
    <description>
    object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a (1) observe or (2) getNotifier call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1304/">CVE-2015-1304</cve>
	<bugzilla href="https://bugzilla.suse.com/947507">SUSE bug 947507</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1345</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1345" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1345" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1345" ref_url="https://www.suse.com/security/cve/CVE-2015-1345" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0243-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1345/">CVE-2015-1345</cve>
	<bugzilla href="https://bugzilla.suse.com/914695">SUSE bug 914695</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482006" comment="grep-3.1-4.3.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177210" comment="grep is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482007" comment="grep-lang-3.1-4.3.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177211" comment="grep-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1349</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1349" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1349" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1349" ref_url="https://www.suse.com/security/cve/CVE-2015-1349" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1250-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-1349/">CVE-2015-1349</cve>
	<bugzilla href="https://bugzilla.suse.com/918330">SUSE bug 918330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1351</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1351" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1351" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1351" ref_url="https://www.suse.com/security/cve/CVE-2015-1351" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005657.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1351/">CVE-2015-1351</cve>
	<bugzilla href="https://bugzilla.suse.com/1137633">SUSE bug 1137633</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1352</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1352" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1352" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1352" ref_url="https://www.suse.com/security/cve/CVE-2015-1352" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00041.html" source="SUSE-SU"/>
    <description>
    The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate token extraction for table names, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-1352/">CVE-2015-1352</cve>
	<bugzilla href="https://bugzilla.suse.com/935274">SUSE bug 935274</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1419</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1419" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1419" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1419" ref_url="https://www.suse.com/security/cve/CVE-2015-1419" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0417-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001265.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0516-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0428-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00012.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1419/">CVE-2015-1419</cve>
	<bugzilla href="https://bugzilla.suse.com/900326">SUSE bug 900326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915522">SUSE bug 915522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922024">SUSE bug 922024</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629998" comment="vsftpd-3.0.3-7.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152656" comment="vsftpd is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1472</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1472" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1472" ref_url="https://www.suse.com/security/cve/CVE-2015-1472" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001305.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0351-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html" source="SUSE-SU"/>
    <description>
    The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during memory allocation, which allows context-dependent attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long line containing wide characters that are improperly handled in a wscanf call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1472/">CVE-2015-1472</cve>
	<bugzilla href="https://bugzilla.suse.com/916222">SUSE bug 916222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920341">SUSE bug 920341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922243">SUSE bug 922243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1473</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1473" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1473" ref_url="https://www.suse.com/security/cve/CVE-2015-1473" source="SUSE CVE"/>
    <description>
    The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during a risk-management decision for use of the alloca function, which might allow context-dependent attackers to cause a denial of service (segmentation violation) or overwrite memory locations beyond the stack boundary via a long line containing wide characters that are improperly handled in a wscanf call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1473/">CVE-2015-1473</cve>
	<bugzilla href="https://bugzilla.suse.com/916222">SUSE bug 916222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920341">SUSE bug 920341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922243">SUSE bug 922243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1545</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1545" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1545" ref_url="https://www.suse.com/security/cve/CVE-2015-1545" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001389.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1325-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00069.html" source="SUSE-SU"/>
    <description>
    The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1545/">CVE-2015-1545</cve>
	<bugzilla href="https://bugzilla.suse.com/846389">SUSE bug 846389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916897">SUSE bug 916897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916914">SUSE bug 916914</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1546</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1546" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1546" ref_url="https://www.suse.com/security/cve/CVE-2015-1546" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001389.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1325-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00069.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service (crash) via a crafted search query with a matched values control.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1546/">CVE-2015-1546</cve>
	<bugzilla href="https://bugzilla.suse.com/916914">SUSE bug 916914</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1547</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1547" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1547" ref_url="https://www.suse.com/security/cve/CVE-2015-1547" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0450-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1213-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00019.html" source="SUSE-SU"/>
    <description>
    The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff5.tif.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1547/">CVE-2015-1547</cve>
	<bugzilla href="https://bugzilla.suse.com/1206220">SUSE bug 1206220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914890">SUSE bug 914890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916925">SUSE bug 916925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151572" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1572</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1572" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1572" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1572" ref_url="https://www.suse.com/security/cve/CVE-2015-1572" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1341-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1364-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001530.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1987-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004281.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1006-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2133-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00050.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-1572/">CVE-2015-1572</cve>
	<bugzilla href="https://bugzilla.suse.com/1123790">SUSE bug 1123790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915402">SUSE bug 915402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/918346">SUSE bug 918346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628421" comment="e2fsprogs-1.43.8-4.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152602" comment="e2fsprogs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628425" comment="libcom_err2-1.43.8-4.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152605" comment="libcom_err2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628426" comment="libcom_err2-32bit-1.43.8-4.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152606" comment="libcom_err2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628429" comment="libext2fs2-1.43.8-4.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152608" comment="libext2fs2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1779</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1779" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1779" ref_url="https://www.suse.com/security/cve/CVE-2015-1779" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0870-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008673.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    It was found that the QEMU's websocket frame decoder processed incoming frames without limiting resources used to process the header and the payload. An attacker able to access a guest's VNC console could use this flaw to trigger a denial of service on the host by exhausting all available memory and CPU.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-1779/">CVE-2015-1779</cve>
	<bugzilla href="https://bugzilla.suse.com/924018">SUSE bug 924018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962632">SUSE bug 962632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1781</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1781" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1781" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1781" ref_url="https://www.suse.com/security/cve/CVE-2015-1781" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001651.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0955-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00084.html" source="SUSE-SU"/>
    <description>
    A buffer overflow flaw was found in the way glibc's gethostbyname_r() and other related functions computed the size of a buffer when passed a misaligned buffer as input. An attacker able to make an application call any of these functions with a misaligned buffer could use this flaw to crash the application or, potentially, execute arbitrary code with the permissions of the user running the application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1781/">CVE-2015-1781</cve>
	<bugzilla href="https://bugzilla.suse.com/927080">SUSE bug 927080</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1782</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1782" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1782" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1782" ref_url="https://www.suse.com/security/cve/CVE-2015-1782" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001330.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001334.html" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0534-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00057.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way the kex_agree_methods() function of libssh2 performed a key exchange when negotiating a new SSH session. A man-in-the-middle attacker could use a crafted SSH_MSG_KEXINIT packet to crash a connecting libssh2 client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1782/">CVE-2015-1782</cve>
	<bugzilla href="https://bugzilla.suse.com/921070">SUSE bug 921070</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628874" comment="libssh2-1-1.9.0-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152658" comment="libssh2-1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1788</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1788" ref_url="https://www.suse.com/security/cve/CVE-2015-1788" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1150-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1181-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="TID7016539" ref_url="https://www.suse.com/support/kb/doc/?id=7016539" source="SUSE-SU"/>
		<reference ref_id="TID7016602" ref_url="https://www.suse.com/support/kb/doc/?id=7016602" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1788/">CVE-2015-1788</cve>
	<bugzilla href="https://bugzilla.suse.com/934487">SUSE bug 934487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938432">SUSE bug 938432</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1789</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1789" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1789" ref_url="https://www.suse.com/security/cve/CVE-2015-1789" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1150-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1181-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1183-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016539" ref_url="https://www.suse.com/support/kb/doc/?id=7016539" source="SUSE-SU"/>
		<reference ref_id="TID7016602" ref_url="https://www.suse.com/support/kb/doc/?id=7016602" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read flaw was found in the X509_cmp_time() function of OpenSSL, which is used to test the expiry dates of SSL/TLS certificates. An attacker could possibly use a specially crafted SSL/TLS certificate or CRL (Certificate Revocation List), which when parsed by an application would cause that application to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-1789/">CVE-2015-1789</cve>
	<bugzilla href="https://bugzilla.suse.com/934489">SUSE bug 934489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938432">SUSE bug 938432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1790</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1790" ref_url="https://www.suse.com/security/cve/CVE-2015-1790" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1150-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1181-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1183-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016539" ref_url="https://www.suse.com/support/kb/doc/?id=7016539" source="SUSE-SU"/>
		<reference ref_id="TID7016602" ref_url="https://www.suse.com/support/kb/doc/?id=7016602" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner EncryptedContent data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1790/">CVE-2015-1790</cve>
	<bugzilla href="https://bugzilla.suse.com/934491">SUSE bug 934491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938432">SUSE bug 938432</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1791</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1791" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1791" ref_url="https://www.suse.com/security/cve/CVE-2015-1791" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1150-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="TID7016539" ref_url="https://www.suse.com/support/kb/doc/?id=7016539" source="SUSE-SU"/>
		<reference ref_id="TID7016602" ref_url="https://www.suse.com/support/kb/doc/?id=7016602" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1791/">CVE-2015-1791</cve>
	<bugzilla href="https://bugzilla.suse.com/933911">SUSE bug 933911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986238">SUSE bug 986238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989464">SUSE bug 989464</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1792</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1792" ref_url="https://www.suse.com/security/cve/CVE-2015-1792" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1150-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="TID7016539" ref_url="https://www.suse.com/support/kb/doc/?id=7016539" source="SUSE-SU"/>
		<reference ref_id="TID7016602" ref_url="https://www.suse.com/support/kb/doc/?id=7016602" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    A denial of service flaw was found in the way OpenSSL verified certain signed messages using CMS (Cryptographic Message Syntax). A remote attacker could cause an application using OpenSSL to use excessive amounts of memory by sending a specially crafted message for verification.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1792/">CVE-2015-1792</cve>
	<bugzilla href="https://bugzilla.suse.com/934493">SUSE bug 934493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986238">SUSE bug 986238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1793</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1793" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1793" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1793" ref_url="https://www.suse.com/security/cve/CVE-2015-1793" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="TID7016662" ref_url="https://www.suse.com/support/kb/doc/?id=7016662" source="SUSE-SU"/>
		<reference ref_id="TID7016686" ref_url="https://www.suse.com/support/kb/doc/?id=7016686" source="SUSE-SU"/>
		<reference ref_id="TID7016693" ref_url="https://www.suse.com/support/kb/doc/?id=7016693" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
    <description>
    The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1793/">CVE-2015-1793</cve>
	<bugzilla href="https://bugzilla.suse.com/936746">SUSE bug 936746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937637">SUSE bug 937637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1794</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1794" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1794" ref_url="https://www.suse.com/security/cve/CVE-2015-1794" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
    <description>
    The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-14"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-1794/">CVE-2015-1794</cve>
	<bugzilla href="https://bugzilla.suse.com/957984">SUSE bug 957984</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1802</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1802" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1802" ref_url="https://www.suse.com/security/cve/CVE-2015-1802" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0702-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021743" ref_url="https://www.suse.com/support/kb/doc/?id=7021743" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="TID7021836" ref_url="https://www.suse.com/support/kb/doc/?id=7021836" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0614-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html" source="SUSE-SU"/>
    <description>
    The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a (1) negative or (2) large property count in a BDF font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1802/">CVE-2015-1802</cve>
	<bugzilla href="https://bugzilla.suse.com/921978">SUSE bug 921978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1803</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1803" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1803" ref_url="https://www.suse.com/security/cve/CVE-2015-1803" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0702-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021743" ref_url="https://www.suse.com/support/kb/doc/?id=7021743" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0614-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html" source="SUSE-SU"/>
    <description>
    The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a crafted BDF font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1803/">CVE-2015-1803</cve>
	<bugzilla href="https://bugzilla.suse.com/921978">SUSE bug 921978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1804</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1804" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1804" ref_url="https://www.suse.com/security/cve/CVE-2015-1804" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0702-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021743" ref_url="https://www.suse.com/support/kb/doc/?id=7021743" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="TID7021836" ref_url="https://www.suse.com/support/kb/doc/?id=7021836" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0614-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2300-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00074.html" source="SUSE-SU"/>
    <description>
    The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1804/">CVE-2015-1804</cve>
	<bugzilla href="https://bugzilla.suse.com/921978">SUSE bug 921978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1819</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1819" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1819" ref_url="https://www.suse.com/security/cve/CVE-2015-1819" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1819/">CVE-2015-1819</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928193">SUSE bug 928193</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1863</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1863" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1863" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1863" ref_url="https://www.suse.com/security/cve/CVE-2015-1863" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001423.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-28"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-1863/">CVE-2015-1863</cve>
	<bugzilla href="https://bugzilla.suse.com/915323">SUSE bug 915323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927558">SUSE bug 927558</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201520107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-20107</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-20107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-20107" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-20107" ref_url="https://www.suse.com/security/cve/CVE-2015-20107" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011506.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1477-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011624.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011814.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012187.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2126-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:894-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011618.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011619.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:955-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011620.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011348.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011485.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2357-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/26DEFHSQZHFG2QZLJD7AX3TDPAXVFWZR/" source="SUSE-SU"/>
    <description>
    In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7, 3.8, 3.9
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-25"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2015-20107/">CVE-2015-20107</cve>
	<bugzilla href="https://bugzilla.suse.com/1198511">SUSE bug 1198511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200507">SUSE bug 1200507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201777">SUSE bug 1201777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201791">SUSE bug 1201791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205068">SUSE bug 1205068</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684335" comment="libpython2_7-1_0-2.7.18-150000.41.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695448" comment="libpython2_7-1_0-32bit-2.7.18-150000.41.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151572" comment="libpython2_7-1_0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698470" comment="libpython3_6m1_0-3.6.15-150300.10.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699792" comment="libpython3_6m1_0-32bit-3.6.15-150300.10.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244052" comment="libpython3_6m1_0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684313" comment="libpython3_9-1_0-3.9.13-150300.4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662642" comment="libpython3_9-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695417" comment="libpython3_9-1_0-32bit-3.9.13-150300.4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662643" comment="libpython3_9-1_0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684336" comment="python-2.7.18-150000.41.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695449" comment="python-32bit-2.7.18-150000.41.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153290" comment="python-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684337" comment="python-base-2.7.18-150000.41.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695450" comment="python-base-32bit-2.7.18-150000.41.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153291" comment="python-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684728" comment="python-curses-2.7.18-150000.41.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151914" comment="python-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695451" comment="python-demo-2.7.18-150000.41.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153292" comment="python-demo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684729" comment="python-devel-2.7.18-150000.41.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151574" comment="python-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695452" comment="python-doc-2.7.18-150000.41.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153293" comment="python-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695453" comment="python-doc-pdf-2.7.18-150000.41.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153294" comment="python-doc-pdf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684730" comment="python-gdbm-2.7.18-150000.41.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151915" comment="python-gdbm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695454" comment="python-idle-2.7.18-150000.41.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153295" comment="python-idle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684394" comment="python-tk-2.7.18-150000.41.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153296" comment="python-tk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684731" comment="python-xml-2.7.18-150000.41.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151575" comment="python-xml is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698471" comment="python3-3.6.15-150300.10.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698472" comment="python3-base-3.6.15-150300.10.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698473" comment="python3-curses-3.6.15-150300.10.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698474" comment="python3-dbm-3.6.15-150300.10.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698475" comment="python3-devel-3.6.15-150300.10.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152173" comment="python3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699793" comment="python3-doc-3.6.15-150300.10.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152174" comment="python3-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699794" comment="python3-doc-devhelp-3.6.15-150300.10.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009340456" comment="python3-doc-devhelp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698476" comment="python3-idle-3.6.15-150300.10.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152176" comment="python3-idle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699795" comment="python3-testsuite-3.6.15-150300.10.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152177" comment="python3-testsuite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698477" comment="python3-tk-3.6.15-150300.10.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151919" comment="python3-tk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698566" comment="python3-tools-3.6.15-150300.10.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152178" comment="python3-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684314" comment="python39-3.9.13-150300.4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632499" comment="python39 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695418" comment="python39-32bit-3.9.13-150300.4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632500" comment="python39-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684315" comment="python39-base-3.9.13-150300.4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662644" comment="python39-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695419" comment="python39-base-32bit-3.9.13-150300.4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662645" comment="python39-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684316" comment="python39-curses-3.9.13-150300.4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632501" comment="python39-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684317" comment="python39-dbm-3.9.13-150300.4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632502" comment="python39-dbm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684318" comment="python39-devel-3.9.13-150300.4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662646" comment="python39-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695420" comment="python39-doc-3.9.13-150300.4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662647" comment="python39-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695421" comment="python39-doc-devhelp-3.9.13-150300.4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662648" comment="python39-doc-devhelp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684319" comment="python39-idle-3.9.13-150300.4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632503" comment="python39-idle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695422" comment="python39-testsuite-3.9.13-150300.4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662649" comment="python39-testsuite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684320" comment="python39-tk-3.9.13-150300.4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632504" comment="python39-tk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684438" comment="python39-tools-3.9.13-150300.4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662650" comment="python39-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152059" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2059</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2059" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2059" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2059" ref_url="https://www.suse.com/security/cve/CVE-2015-2059" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2226-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002269.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1261-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2277-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00041.html" source="SUSE-SU"/>
    <description>
    The stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-2059/">CVE-2015-2059</cve>
	<bugzilla href="https://bugzilla.suse.com/1173590">SUSE bug 1173590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/919214">SUSE bug 919214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923241">SUSE bug 923241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937096">SUSE bug 937096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937097">SUSE bug 937097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482248" comment="libidn11-1.34-3.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152668" comment="libidn11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628747" comment="libidn2-0-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177212" comment="libidn2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628748" comment="libidn2-0-32bit-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177213" comment="libidn2-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694851" comment="libidn2-lang-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009273026" comment="libidn2-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2265</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2265" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2265" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2265" ref_url="https://www.suse.com/security/cve/CVE-2015-2265" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001367.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1244-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00033.html" source="SUSE-SU"/>
    <description>
    The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the (1) model or (2) PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2265/">CVE-2015-2265</cve>
	<bugzilla href="https://bugzilla.suse.com/921753">SUSE bug 921753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937018">SUSE bug 937018</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009685444" comment="cups-filters-1.25.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2296</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2296" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2296" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2296" ref_url="https://www.suse.com/security/cve/CVE-2015-2296" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001801.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007049.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-06"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-2296/">CVE-2015-2296</cve>
	<bugzilla href="https://bugzilla.suse.com/922448">SUSE bug 922448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/926396">SUSE bug 926396</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628991" comment="python3-pip-20.0.2-6.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151932" comment="python3-pip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628993" comment="python3-requests-2.24.0-1.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152097" comment="python3-requests is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009511085" comment="python39-pip-20.2.4-7.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623213" comment="python39-pip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009511086" comment="python39-setuptools-44.1.1-7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623214" comment="python39-setuptools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2304</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2304" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2304" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2304" ref_url="https://www.suse.com/security/cve/CVE-2015-2304" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0667-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001328.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1939-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0568-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3005-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00030.html" source="SUSE-SU"/>
    <description>
    Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2304/">CVE-2015-2304</cve>
	<bugzilla href="https://bugzilla.suse.com/920870">SUSE bug 920870</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152305" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2305</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2305" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2305" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2305" ref_url="https://www.suse.com/security/cve/CVE-2015-2305" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001385.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001386.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001426.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2305/">CVE-2015-2305</cve>
	<bugzilla href="https://bugzilla.suse.com/1040662">SUSE bug 1040662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/921950">SUSE bug 921950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922022">SUSE bug 922022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922028">SUSE bug 922028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922030">SUSE bug 922030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922043">SUSE bug 922043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922560">SUSE bug 922560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922567">SUSE bug 922567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/929192">SUSE bug 929192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980366">SUSE bug 980366</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152325" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2325</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2325" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2325" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2325" ref_url="https://www.suse.com/security/cve/CVE-2015-2325" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0858-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00076.html" source="SUSE-SU"/>
    <description>
    The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large number of times within a repeated outer group that has a zero minimum quantifier.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-2325/">CVE-2015-2325</cve>
	<bugzilla href="https://bugzilla.suse.com/924960">SUSE bug 924960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933288">SUSE bug 933288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936408">SUSE bug 936408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958373">SUSE bug 958373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480665" comment="libpcre2-16-0-10.31-1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153649" comment="libpcre2-16-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480667" comment="libpcre2-8-0-10.31-1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153653" comment="libpcre2-8-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152326" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2326</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2326" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2326" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2326" ref_url="https://www.suse.com/security/cve/CVE-2015-2326" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0858-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00020.html" source="SUSE-SU"/>
    <description>
    The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular expression with a group containing both a forward referencing subroutine call and a recursive back reference, as demonstrated by "((?+1)(\1))/".
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-2326/">CVE-2015-2326</cve>
	<bugzilla href="https://bugzilla.suse.com/924960">SUSE bug 924960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924961">SUSE bug 924961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933288">SUSE bug 933288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936408">SUSE bug 936408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958373">SUSE bug 958373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480665" comment="libpcre2-16-0-10.31-1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153649" comment="libpcre2-16-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480667" comment="libpcre2-8-0-10.31-1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153653" comment="libpcre2-8-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152331" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2331</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2331" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2331" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2331" ref_url="https://www.suse.com/security/cve/CVE-2015-2331" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0668-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001329.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0615-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2331/">CVE-2015-2331</cve>
	<bugzilla href="https://bugzilla.suse.com/922894">SUSE bug 922894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923240">SUSE bug 923240</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480831" comment="libzip5-1.5.1-1.9 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177169" comment="libzip5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2694</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2694" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2694" ref_url="https://www.suse.com/security/cve/CVE-2015-2694" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001505.html" source="SUSE-SU"/>
    <description>
    The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2) an arbitrary realm name, related to plugins/preauth/otp/main.c and plugins/preauth/pkinit/pkinit_srv.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2694/">CVE-2015-2694</cve>
	<bugzilla href="https://bugzilla.suse.com/928978">SUSE bug 928978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2695</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2695" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2695" ref_url="https://www.suse.com/security/cve/CVE-2015-2695" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1898-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001737.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1928-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00022.html" source="SUSE-SU"/>
    <description>
    lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2695/">CVE-2015-2695</cve>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952188">SUSE bug 952188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969771">SUSE bug 969771</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2696</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2696" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2696" ref_url="https://www.suse.com/security/cve/CVE-2015-2696" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1928-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00022.html" source="SUSE-SU"/>
    <description>
    lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted IAKERB packet that is mishandled during a gss_inquire_context call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2696/">CVE-2015-2696</cve>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952189">SUSE bug 952189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954204">SUSE bug 954204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2697</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2697" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2697" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2697" ref_url="https://www.suse.com/security/cve/CVE-2015-2697" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1928-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00022.html" source="SUSE-SU"/>
    <description>
    The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\0' character in a long realm field within a TGS request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2697/">CVE-2015-2697</cve>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952190">SUSE bug 952190</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2698</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2698" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2698" ref_url="https://www.suse.com/security/cve/CVE-2015-2698" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2302-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001738.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2055-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2376-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00124.html" source="SUSE-SU"/>
    <description>
    The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2698/">CVE-2015-2698</cve>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954204">SUSE bug 954204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2706</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2706" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2706" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2706" ref_url="https://www.suse.com/security/cve/CVE-2015-2706" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0763-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00046.html" source="SUSE-SU"/>
    <description>
    Race condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before 37.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted plugin that does not properly complete initialization.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2706/">CVE-2015-2706</cve>
	<bugzilla href="https://bugzilla.suse.com/928116">SUSE bug 928116</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2708</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2708" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2708" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2708" ref_url="https://www.suse.com/security/cve/CVE-2015-2708" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0935-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2708/">CVE-2015-2708</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2709</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2709" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2709" ref_url="https://www.suse.com/security/cve/CVE-2015-2709" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2709/">CVE-2015-2709</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2710</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2710" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2710" ref_url="https://www.suse.com/security/cve/CVE-2015-2710" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0935-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code via crafted SVG graphics data in conjunction with a crafted Cascading Style Sheets (CSS) token sequence.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2710/">CVE-2015-2710</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2711</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2711" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2711" ref_url="https://www.suse.com/security/cve/CVE-2015-2711" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 38.0 does not recognize a referrer policy delivered by a referrer META element in cases of context-menu navigation and middle-click navigation, which allows remote attackers to obtain sensitive information by reading web-server Referer logs that contain private data in a URL, as demonstrated by a private path component.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2711/">CVE-2015-2711</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2712</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2712" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2712" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2712" ref_url="https://www.suse.com/security/cve/CVE-2015-2712" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
    <description>
    The asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths during identification of cases in which bounds checking may be safely skipped, which allows remote attackers to trigger out-of-bounds write operations and possibly execute arbitrary code, or trigger out-of-bounds read operations and possibly obtain sensitive information from process memory, via crafted JavaScript.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2712/">CVE-2015-2712</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2713</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2713" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2713" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2713" ref_url="https://www.suse.com/security/cve/CVE-2015-2713" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0935-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a document containing crafted text in conjunction with a Cascading Style Sheets (CSS) token sequence containing properties related to vertical text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2713/">CVE-2015-2713</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152715" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2715</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2715" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2715" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2715" ref_url="https://www.suse.com/security/cve/CVE-2015-2715" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
    <description>
    Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) by leveraging improper Media Decoder Thread creation at the time of a shutdown.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2715/">CVE-2015-2715</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152716" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2716</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2716" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2716" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2716" ref_url="https://www.suse.com/security/cve/CVE-2015-2716" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0935-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2716/">CVE-2015-2716</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980391">SUSE bug 980391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983985">SUSE bug 983985</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152717" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2717</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2717" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2717" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2717" ref_url="https://www.suse.com/security/cve/CVE-2015-2717" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and out-of-bounds read) via an MP4 video file containing invalid metadata.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2717/">CVE-2015-2717</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2718</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2718" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2718" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2718" ref_url="https://www.suse.com/security/cve/CVE-2015-2718" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
    <description>
    The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive webchannel-response data via a crafted web site containing an IFRAME element referencing a different web site that is intended to read this data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2718/">CVE-2015-2718</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2721</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2721" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2721" ref_url="https://www.suse.com/security/cve/CVE-2015-2721" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before 38.1, and other products, does not properly determine state transitions for the TLS state machine, which allows man-in-the-middle attackers to defeat cryptographic protection mechanisms by blocking messages, as demonstrated by removing a forward-secrecy property by blocking a ServerKeyExchange message, aka a "SMACK SKIP-TLS" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2721/">CVE-2015-2721</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2722</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2722" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2722" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2722" ref_url="https://www.suse.com/security/cve/CVE-2015-2722" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2722/">CVE-2015-2722</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152724" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2724</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2724" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2724" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2724" ref_url="https://www.suse.com/security/cve/CVE-2015-2724" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2724/">CVE-2015-2724</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152725" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2725</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2725" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2725" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2725" ref_url="https://www.suse.com/security/cve/CVE-2015-2725" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2725/">CVE-2015-2725</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152726" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2726</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2726" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2726" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2726" ref_url="https://www.suse.com/security/cve/CVE-2015-2726" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2726/">CVE-2015-2726</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152727" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2727</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2727" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2727" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2727" ref_url="https://www.suse.com/security/cve/CVE-2015-2727" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 38.0 and Firefox ESR 38.0 allow user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is accessed with unspecified mouse and keyboard actions.  NOTE: this vulnerability exists because of a CVE-2015-0821 regression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2727/">CVE-2015-2727</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2728</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2728" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2728" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2728" ref_url="https://www.suse.com/security/cve/CVE-2015-2728" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 misinterprets an unspecified IDBDatabase field as a pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors, related to a "type confusion" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2728/">CVE-2015-2728</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2729</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2729" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2729" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2729" ref_url="https://www.suse.com/security/cve/CVE-2015-2729" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
    <description>
    The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator rendering range, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2729/">CVE-2015-2729</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2730</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2730" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2730" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2730" ref_url="https://www.suse.com/security/cve/CVE-2015-2730" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography (ECC) multiplications, which makes it easier for remote attackers to spoof ECDSA signatures via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2730/">CVE-2015-2730</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2731</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2731" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2731" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2731" ref_url="https://www.suse.com/security/cve/CVE-2015-2731" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers removal of a DOM object on the basis of a Content Policy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2731/">CVE-2015-2731</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2733</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2733" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2733" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2733" ref_url="https://www.suse.com/security/cve/CVE-2015-2733" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a dedicated worker.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2733/">CVE-2015-2733</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152734" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2734</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2734" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2734" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2734" ref_url="https://www.suse.com/security/cve/CVE-2015-2734" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2734/">CVE-2015-2734</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2735</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2735" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2735" ref_url="https://www.suse.com/security/cve/CVE-2015-2735" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2735/">CVE-2015-2735</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2736</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2736" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2736" ref_url="https://www.suse.com/security/cve/CVE-2015-2736" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2736/">CVE-2015-2736</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2737</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2737" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2737" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2737" ref_url="https://www.suse.com/security/cve/CVE-2015-2737" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2737/">CVE-2015-2737</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2738</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2738" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2738" ref_url="https://www.suse.com/security/cve/CVE-2015-2738" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2738/">CVE-2015-2738</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2739</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2739" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2739" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2739" ref_url="https://www.suse.com/security/cve/CVE-2015-2739" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2739/">CVE-2015-2739</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2740</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2740" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2740" ref_url="https://www.suse.com/security/cve/CVE-2015-2740" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2740/">CVE-2015-2740</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2741</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2741" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2741" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2741" ref_url="https://www.suse.com/security/cve/CVE-2015-2741" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not enforce key pinning upon encountering an X.509 certificate problem that generates a user dialog, which allows user-assisted man-in-the-middle attackers to bypass intended access restrictions by triggering a (1) expired certificate or (2) mismatched hostname for a domain with pinning enabled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2741/">CVE-2015-2741</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2742</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2742" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2742" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2742" ref_url="https://www.suse.com/security/cve/CVE-2015-2742" source="SUSE CVE"/>
    <description>
    Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2742/">CVE-2015-2742</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2743</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2743" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2743" ref_url="https://www.suse.com/security/cve/CVE-2015-2743" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2743/">CVE-2015-2743</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2806</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2806" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2806" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2806" ref_url="https://www.suse.com/security/cve/CVE-2015-2806" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001393.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001394.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001791.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0854-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00010.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2806/">CVE-2015-2806</cve>
	<bugzilla href="https://bugzilla.suse.com/924828">SUSE bug 924828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/929414">SUSE bug 929414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961491">SUSE bug 961491</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482427" comment="libtasn1-4.13-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152119" comment="libtasn1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482428" comment="libtasn1-6-4.13-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152120" comment="libtasn1-6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482429" comment="libtasn1-6-32bit-4.13-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152121" comment="libtasn1-6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152924" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2924</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2924" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2924" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2924" ref_url="https://www.suse.com/security/cve/CVE-2015-2924" source="SUSE CVE"/>
    <description>
    The receive_ra function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in NetworkManager 1.x allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message, a similar issue to CVE-2015-2922.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2924/">CVE-2015-2924</cve>
	<bugzilla href="https://bugzilla.suse.com/926223">SUSE bug 926223</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629088" comment="NetworkManager-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152685" comment="NetworkManager is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684219" comment="NetworkManager-lang-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152687" comment="NetworkManager-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628810" comment="libnm0-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152691" comment="libnm0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628811" comment="typelib-1_0-NM-1_0-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152692" comment="typelib-1_0-NM-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3143</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3143" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3143" ref_url="https://www.suse.com/security/cve/CVE-2015-3143" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00057.html" source="SUSE-SU"/>
    <description>
    cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3143/">CVE-2015-3143</cve>
	<bugzilla href="https://bugzilla.suse.com/927556">SUSE bug 927556</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3144</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3144" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3144" ref_url="https://www.suse.com/security/cve/CVE-2015-3144" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00057.html" source="SUSE-SU"/>
    <description>
    The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) or possibly have other unspecified impact via a zero-length host name, as demonstrated by "http://:80" and ":80."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3144/">CVE-2015-3144</cve>
	<bugzilla href="https://bugzilla.suse.com/927608">SUSE bug 927608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3145</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3145" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3145" ref_url="https://www.suse.com/security/cve/CVE-2015-3145" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00057.html" source="SUSE-SU"/>
    <description>
    The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie path containing only a double-quote character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3145/">CVE-2015-3145</cve>
	<bugzilla href="https://bugzilla.suse.com/927607">SUSE bug 927607</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3146</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3146" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3146" ref_url="https://www.suse.com/security/cve/CVE-2015-3146" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1707-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1707-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001624.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00016.html" source="SUSE-SU"/>
    <description>
    The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted SSH packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3146/">CVE-2015-3146</cve>
	<bugzilla href="https://bugzilla.suse.com/928323">SUSE bug 928323</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482409" comment="libssh4-0.8.7-10.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151772" comment="libssh4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482410" comment="libssh4-32bit-0.8.7-10.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153278" comment="libssh4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3148</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3148" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3148" ref_url="https://www.suse.com/security/cve/CVE-2015-3148" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00057.html" source="SUSE-SU"/>
    <description>
    cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3148/">CVE-2015-3148</cve>
	<bugzilla href="https://bugzilla.suse.com/1092962">SUSE bug 1092962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927746">SUSE bug 927746</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153152" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3152</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3152" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3152" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3152" ref_url="https://www.suse.com/security/cve/CVE-2015-3152" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001639.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
    <description>
    Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-3152/">CVE-2015-3152</cve>
	<bugzilla href="https://bugzilla.suse.com/1037590">SUSE bug 1037590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047059">SUSE bug 1047059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088681">SUSE bug 1088681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924663">SUSE bug 924663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928962">SUSE bug 928962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936407">SUSE bug 936407</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3153</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3153" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3153" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3153" ref_url="https://www.suse.com/security/cve/CVE-2015-3153" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00017.html" source="SUSE-SU"/>
    <description>
    The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3153/">CVE-2015-3153</cve>
	<bugzilla href="https://bugzilla.suse.com/928533">SUSE bug 928533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3164</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3164" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3164" ref_url="https://www.suse.com/security/cve/CVE-2015-3164" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1095-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00044.html" source="SUSE-SU"/>
    <description>
    The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3164/">CVE-2015-3164</cve>
	<bugzilla href="https://bugzilla.suse.com/1177201">SUSE bug 1177201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934102">SUSE bug 934102</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629053" comment="xorg-x11-server-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629054" comment="xorg-x11-server-extra-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684245" comment="xorg-x11-server-wayland-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177168" comment="xorg-x11-server-wayland is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3193</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3193" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3193" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3193" ref_url="https://www.suse.com/security/cve/CVE-2015-3193" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
    <description>
    The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-3193/">CVE-2015-3193</cve>
	<bugzilla href="https://bugzilla.suse.com/1022086">SUSE bug 1022086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066242">SUSE bug 1066242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071906">SUSE bug 1071906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957814">SUSE bug 957814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960151">SUSE bug 960151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990370">SUSE bug 990370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3194</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3194" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3194" ref_url="https://www.suse.com/security/cve/CVE-2015-3194" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001728.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID7017046" ref_url="https://www.suse.com/support/kb/doc/?id=7017046" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2288-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2289-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2318-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1327-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
    <description>
    crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-3194/">CVE-2015-3194</cve>
	<bugzilla href="https://bugzilla.suse.com/957812">SUSE bug 957812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957815">SUSE bug 957815</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958768">SUSE bug 958768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990370">SUSE bug 990370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3195</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3195" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3195" ref_url="https://www.suse.com/security/cve/CVE-2015-3195" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001728.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2342-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001758.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7014420" ref_url="https://www.suse.com/support/kb/doc/?id=7014420" source="SUSE-SU"/>
		<reference ref_id="TID7016875" ref_url="https://www.suse.com/support/kb/doc/?id=7016875" source="SUSE-SU"/>
		<reference ref_id="TID7017047" ref_url="https://www.suse.com/support/kb/doc/?id=7017047" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2288-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2289-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2318-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2349-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00103.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1327-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00073.html" source="SUSE-SU"/>
    <description>
    The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-3195/">CVE-2015-3195</cve>
	<bugzilla href="https://bugzilla.suse.com/923755">SUSE bug 923755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957812">SUSE bug 957812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957815">SUSE bug 957815</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958768">SUSE bug 958768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963977">SUSE bug 963977</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986238">SUSE bug 986238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3196</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3196" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3196" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3196" ref_url="https://www.suse.com/security/cve/CVE-2015-3196" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001728.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2288-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2289-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html" source="SUSE-SU"/>
    <description>
    ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3196/">CVE-2015-3196</cve>
	<bugzilla href="https://bugzilla.suse.com/957813">SUSE bug 957813</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3197</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3197" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3197" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3197" ref_url="https://www.suse.com/security/cve/CVE-2015-3197" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7017297" ref_url="https://www.suse.com/support/kb/doc?id=7017297" source="SUSE-SU"/>
		<reference ref_id="TID7017315" ref_url="https://www.suse.com/support/kb/doc/?id=7017315" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0362-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0442-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0720-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html" source="SUSE-SU"/>
    <description>
    ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-3197/">CVE-2015-3197</cve>
	<bugzilla href="https://bugzilla.suse.com/963410">SUSE bug 963410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963415">SUSE bug 963415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968044">SUSE bug 968044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968046">SUSE bug 968046</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3202</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3202" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3202" ref_url="https://www.suse.com/security/cve/CVE-2015-3202" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001438.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0997-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1003-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00007.html" source="SUSE-SU"/>
    <description>
    fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3202/">CVE-2015-3202</cve>
	<bugzilla href="https://bugzilla.suse.com/931452">SUSE bug 931452</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481128" comment="fuse-2.9.7-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151346" comment="fuse is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481131" comment="libfuse2-2.9.7-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151347" comment="libfuse2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3209</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3209" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3209" ref_url="https://www.suse.com/security/cve/CVE-2015-3209" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1643-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="TID7016590" ref_url="https://www.suse.com/support/kb/doc?id=7016590" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1092-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00017.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way QEMU's AMD PCnet Ethernet emulation handled multi-TMD packets with a length above 4096 bytes. A privileged guest user in a guest with an AMD PCNet ethernet card enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the hosting QEMU process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3209/">CVE-2015-3209</cve>
	<bugzilla href="https://bugzilla.suse.com/932267">SUSE bug 932267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/932770">SUSE bug 932770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/932823">SUSE bug 932823</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3217</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3217" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3217" ref_url="https://www.suse.com/security/cve/CVE-2015-3217" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2805-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00076.html" source="SUSE-SU"/>
    <description>
    PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\.|([^\\\\W_])?)+)+$/.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3217/">CVE-2015-3217</cve>
	<bugzilla href="https://bugzilla.suse.com/933878">SUSE bug 933878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958373">SUSE bug 958373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3218</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3218" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3218" ref_url="https://www.suse.com/security/cve/CVE-2015-3218" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001649.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1734-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html" source="SUSE-SU"/>
    <description>
    The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3218/">CVE-2015-3218</cve>
	<bugzilla href="https://bugzilla.suse.com/933922">SUSE bug 933922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943816">SUSE bug 943816</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482356" comment="libpolkit0-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151393" comment="libpolkit0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482357" comment="polkit-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151394" comment="polkit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482359" comment="typelib-1_0-Polkit-1_0-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151396" comment="typelib-1_0-Polkit-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3223</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3223" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3223" ref_url="https://www.suse.com/security/cve/CVE-2015-3223" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
    <description>
    The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a denial of service (infinite loop) via crafted packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3223/">CVE-2015-3223</cve>
	<bugzilla href="https://bugzilla.suse.com/958581">SUSE bug 958581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628548" comment="libldb2-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291435" comment="libldb2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628549" comment="libldb2-32bit-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291436" comment="libldb2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628550" comment="python3-ldb-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247520" comment="python3-ldb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3228</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3228" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3228" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3228" ref_url="https://www.suse.com/security/cve/CVE-2015-3228" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0884-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2493-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1352-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0951-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00010.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3228/">CVE-2015-3228</cve>
	<bugzilla href="https://bugzilla.suse.com/939342">SUSE bug 939342</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3236</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3236" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3236" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3236" ref_url="https://www.suse.com/security/cve/CVE-2015-3236" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00054.html" source="SUSE-SU"/>
    <description>
    cURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_easy_reset) connection handle to send a request to the same host name, which allows remote attackers to obtain sensitive information via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3236/">CVE-2015-3236</cve>
	<bugzilla href="https://bugzilla.suse.com/934501">SUSE bug 934501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153237" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3237</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3237" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3237" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3237" ref_url="https://www.suse.com/security/cve/CVE-2015-3237" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00054.html" source="SUSE-SU"/>
    <description>
    The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3237/">CVE-2015-3237</cve>
	<bugzilla href="https://bugzilla.suse.com/934502">SUSE bug 934502</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3238</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3238" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3238" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3238" ref_url="https://www.suse.com/security/cve/CVE-2015-3238" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1645-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002134.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
    <description>
    It was discovered that the _unix_run_helper_binary() function of PAM's unix_pam module could write to a blocking pipe, possibly causing the function to become unresponsive. An attacker able to supply large passwords to the unix_pam module could use this flaw to enumerate valid user accounts, or cause a denial of service on the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-3238/">CVE-2015-3238</cve>
	<bugzilla href="https://bugzilla.suse.com/1123794">SUSE bug 1123794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934920">SUSE bug 934920</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628960" comment="pam-1.3.0-6.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151504" comment="pam is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628961" comment="pam-32bit-1.3.0-6.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151505" comment="pam-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628963" comment="pam-doc-1.3.0-6.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009241456" comment="pam-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153239" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3239</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3239" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3239" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3239" ref_url="https://www.suse.com/security/cve/CVE-2015-3239" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1245-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00022.html" source="SUSE-SU"/>
    <description>
    An off-by-one array indexing error was found in the libunwind API, which could cause an error when reading untrusted binaries or dwarf debug info data. Red Hat products do not call the API in this way; and it is unlikely that any exploitable attack vector exists in current builds or supported usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-3239/">CVE-2015-3239</cve>
	<bugzilla href="https://bugzilla.suse.com/1122012">SUSE bug 1122012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936786">SUSE bug 936786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628911" comment="libunwind-1.5.0-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177215" comment="libunwind is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3243</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3243" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3243" ref_url="https://www.suse.com/security/cve/CVE-2015-3243" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1937-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1937-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004262.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2038-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004480.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00001.html" source="SUSE-SU"/>
    <description>
    rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-3243/">CVE-2015-3243</cve>
	<bugzilla href="https://bugzilla.suse.com/1098851">SUSE bug 1098851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126233">SUSE bug 1126233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/935393">SUSE bug 935393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629011" comment="rsyslog-8.39.0-4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151645" comment="rsyslog is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3247</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3247" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3247" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3247" ref_url="https://www.suse.com/security/cve/CVE-2015-3247" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1566-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1750-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00032.html" source="SUSE-SU"/>
    <description>
    A race condition flaw, leading to a heap-based memory corruption, was found in spice's worker_update_monitors_config() function, which runs under the QEMU-KVM context on the host. A user in a guest could leverage this flaw to crash the host QEMU-KVM process or, possibly, execute arbitrary code with the privileges of the host QEMU-KVM process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-3247/">CVE-2015-3247</cve>
	<bugzilla href="https://bugzilla.suse.com/944460">SUSE bug 944460</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629866" comment="libspice-server1-0.14.3-1.48 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3255</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3255" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3255" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3255" ref_url="https://www.suse.com/security/cve/CVE-2015-3255" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001649.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1734-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html" source="SUSE-SU"/>
    <description>
    The polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in PolicyKit (aka polkit) before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3255/">CVE-2015-3255</cve>
	<bugzilla href="https://bugzilla.suse.com/939246">SUSE bug 939246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943816">SUSE bug 943816</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482356" comment="libpolkit0-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151393" comment="libpolkit0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482357" comment="polkit-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151394" comment="polkit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482359" comment="typelib-1_0-Polkit-1_0-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151396" comment="typelib-1_0-Polkit-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153256" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3256</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3256" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3256" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3256" ref_url="https://www.suse.com/security/cve/CVE-2015-3256" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001649.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1734-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html" source="SUSE-SU"/>
    <description>
    PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (memory corruption and polkitd daemon crash) and possibly gain privileges via unspecified vectors, related to "javascript rule evaluation."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3256/">CVE-2015-3256</cve>
	<bugzilla href="https://bugzilla.suse.com/943816">SUSE bug 943816</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482356" comment="libpolkit0-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151393" comment="libpolkit0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482357" comment="polkit-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151394" comment="polkit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482359" comment="typelib-1_0-Polkit-1_0-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151396" comment="typelib-1_0-Polkit-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3258</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3258" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3258" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3258" ref_url="https://www.suse.com/security/cve/CVE-2015-3258" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1377-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1244-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00033.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filter processed print jobs with a specially crafted line size. An attacker able to submit print jobs could use this flaw to crash texttopdf or, possibly, execute arbitrary code with the privileges of the "lp" user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-3258/">CVE-2015-3258</cve>
	<bugzilla href="https://bugzilla.suse.com/921753">SUSE bug 921753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936281">SUSE bug 936281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937018">SUSE bug 937018</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009685444" comment="cups-filters-1.25.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153259" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3259</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3259" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3259" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3259" ref_url="https://www.suse.com/security/cve/CVE-2015-3259" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1479-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows local guest administrators to gain privileges via a long configuration argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3259/">CVE-2015-3259</cve>
	<bugzilla href="https://bugzilla.suse.com/935634">SUSE bug 935634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936281">SUSE bug 936281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937018">SUSE bug 937018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153279" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3279</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3279" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3279" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3279" ref_url="https://www.suse.com/security/cve/CVE-2015-3279" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1377-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1244-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00033.html" source="SUSE-SU"/>
    <description>
    Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3279/">CVE-2015-3279</cve>
	<bugzilla href="https://bugzilla.suse.com/921753">SUSE bug 921753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936281">SUSE bug 936281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937018">SUSE bug 937018</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009685444" comment="cups-filters-1.25.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3294</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3294" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3294" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3294" ref_url="https://www.suse.com/security/cve/CVE-2015-3294" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0979-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0979-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001455.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0857-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00013.html" source="SUSE-SU"/>
    <description>
    The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3294/">CVE-2015-3294</cve>
	<bugzilla href="https://bugzilla.suse.com/923144">SUSE bug 923144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928867">SUSE bug 928867</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3310</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3310" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3310" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3310" ref_url="https://www.suse.com/security/cve/CVE-2015-3310" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0474-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002649.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00147.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service (crash) via a start accounting message to the RADIUS server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3310/">CVE-2015-3310</cve>
	<bugzilla href="https://bugzilla.suse.com/927841">SUSE bug 927841</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487583" comment="ppp-2.4.7-5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152115" comment="ppp is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153340" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3340</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3340" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3340" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3340" ref_url="https://www.suse.com/security/cve/CVE-2015-3340" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0923-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0940-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0944-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1092-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-3340/">CVE-2015-3340</cve>
	<bugzilla href="https://bugzilla.suse.com/927967">SUSE bug 927967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/929339">SUSE bug 929339</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153414" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3414</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3414" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3414" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3414" ref_url="https://www.suse.com/security/cve/CVE-2015-3414" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-3414/">CVE-2015-3414</cve>
	<bugzilla href="https://bugzilla.suse.com/1085790">SUSE bug 1085790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190372">SUSE bug 1190372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193078">SUSE bug 1193078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928700">SUSE bug 928700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928701">SUSE bug 928701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928702">SUSE bug 928702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3415</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3415" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3415" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3415" ref_url="https://www.suse.com/security/cve/CVE-2015-3415" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&amp;O&gt;O) in a CREATE TABLE statement.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-3415/">CVE-2015-3415</cve>
	<bugzilla href="https://bugzilla.suse.com/1190372">SUSE bug 1190372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928700">SUSE bug 928700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928701">SUSE bug 928701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928702">SUSE bug 928702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3416</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3416" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3416" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3416" ref_url="https://www.suse.com/security/cve/CVE-2015-3416" source="SUSE CVE"/>
    <description>
    The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-3416/">CVE-2015-3416</cve>
	<bugzilla href="https://bugzilla.suse.com/1190372">SUSE bug 1190372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928700">SUSE bug 928700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928701">SUSE bug 928701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928702">SUSE bug 928702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3451</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3451" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3451" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3451" ref_url="https://www.suse.com/security/cve/CVE-2015-3451" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001553.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1506-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00006.html" source="SUSE-SU"/>
    <description>
    The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-3451/">CVE-2015-3451</cve>
	<bugzilla href="https://bugzilla.suse.com/929237">SUSE bug 929237</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480875" comment="perl-XML-LibXML-2.0132-1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152786" comment="perl-XML-LibXML is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3456</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3456" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3456" ref_url="https://www.suse.com/security/cve/CVE-2015-3456" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0889-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0889-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0923-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0927-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0940-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0943-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0944-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="TID7016497" ref_url="https://www.suse.com/support/kb/doc?id=7016497" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1092-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1400-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00021.html" source="SUSE-SU"/>
    <description>
    The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3456/">CVE-2015-3456</cve>
	<bugzilla href="https://bugzilla.suse.com/929339">SUSE bug 929339</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/932770">SUSE bug 932770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/935900">SUSE bug 935900</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3622</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3622" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3622" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3622" ref_url="https://www.suse.com/security/cve/CVE-2015-3622" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1674-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00097.html" source="SUSE-SU"/>
    <description>
    The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-3622/">CVE-2015-3622</cve>
	<bugzilla href="https://bugzilla.suse.com/929414">SUSE bug 929414</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482427" comment="libtasn1-4.13-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152119" comment="libtasn1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482428" comment="libtasn1-6-4.13-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152120" comment="libtasn1-6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482429" comment="libtasn1-6-32bit-4.13-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152121" comment="libtasn1-6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4000</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4000" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4000" ref_url="https://www.suse.com/security/cve/CVE-2015-4000" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1150-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1177-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1181-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1183-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001587.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1547-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1663-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001616.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0224-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0262-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1618-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004209.html" source="SUSE-SU"/>
		<reference ref_id="TID7010166" ref_url="https://www.suse.com/support/kb/doc/?id=7010166" source="SUSE-SU"/>
		<reference ref_id="TID7016528" ref_url="https://www.suse.com/support/kb/doc/?id=7016528" source="SUSE-SU"/>
		<reference ref_id="TID7016529" ref_url="https://www.suse.com/support/kb/doc?id=7016529" source="SUSE-SU"/>
		<reference ref_id="TID7016539" ref_url="https://www.suse.com/support/kb/doc/?id=7016539" source="SUSE-SU"/>
		<reference ref_id="TID7016657" ref_url="https://www.suse.com/support/kb/doc/?id=7016657" source="SUSE-SU"/>
		<reference ref_id="TID7016694" ref_url="https://www.suse.com/support/kb/doc/?id=7016694" source="SUSE-SU"/>
		<reference ref_id="TID7016726" ref_url="https://www.suse.com/support/kb/doc/?id=7016726" source="SUSE-SU"/>
		<reference ref_id="TID7016795" ref_url="https://www.suse.com/support/kb/doc/?id=7016795" source="SUSE-SU"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7021433" ref_url="https://www.suse.com/support/kb/doc/?id=7021433" source="SUSE-SU"/>
		<reference ref_id="TID7021435" ref_url="https://www.suse.com/support/kb/doc/?id=7021435" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021743" ref_url="https://www.suse.com/support/kb/doc/?id=7021743" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="TID7021836" ref_url="https://www.suse.com/support/kb/doc/?id=7021836" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
		<reference ref_id="TID7021978" ref_url="https://www.suse.com/support/kb/doc/?id=7021978" source="SUSE-SU"/>
		<reference ref_id="TID7021993" ref_url="https://www.suse.com/support/kb/doc/?id=7021993" source="SUSE-SU"/>
		<reference ref_id="TID7021994" ref_url="https://www.suse.com/support/kb/doc/?id=7021994" source="SUSE-SU"/>
		<reference ref_id="TID7021995" ref_url="https://www.suse.com/support/kb/doc/?id=7021995" source="SUSE-SU"/>
		<reference ref_id="TID7022026" ref_url="https://www.suse.com/support/kb/doc/?id=7022026" source="SUSE-SU"/>
		<reference ref_id="TID7022077" ref_url="https://www.suse.com/support/kb/doc/?id=7022077" source="SUSE-SU"/>
		<reference ref_id="TID7022095" ref_url="https://www.suse.com/support/kb/doc/?id=7022095" source="SUSE-SU"/>
		<reference ref_id="TID7022096" ref_url="https://www.suse.com/support/kb/doc/?id=7022096" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1209-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1684-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0478-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0483-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2267-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00034.html" source="SUSE-SU"/>
    <description>
    The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-4000/">CVE-2015-4000</cve>
	<bugzilla href="https://bugzilla.suse.com/1074631">SUSE bug 1074631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/931600">SUSE bug 931600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/931698">SUSE bug 931698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/931723">SUSE bug 931723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/931845">SUSE bug 931845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/932026">SUSE bug 932026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/932483">SUSE bug 932483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934789">SUSE bug 934789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/935033">SUSE bug 935033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/935540">SUSE bug 935540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937202">SUSE bug 937202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937766">SUSE bug 937766</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938432">SUSE bug 938432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938905">SUSE bug 938905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938906">SUSE bug 938906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938913">SUSE bug 938913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938945">SUSE bug 938945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943664">SUSE bug 943664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/944729">SUSE bug 944729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945582">SUSE bug 945582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955589">SUSE bug 955589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980406">SUSE bug 980406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990592">SUSE bug 990592</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4037</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4037" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4037" ref_url="https://www.suse.com/security/cve/CVE-2015-4037" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1952-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="TID7016590" ref_url="https://www.suse.com/support/kb/doc?id=7016590" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1965-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
    <description>
    The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which allows local users to cause a denial of service (instantiation failure) by creating /tmp/qemu-smb.*-* files before the program.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4037/">CVE-2015-4037</cve>
	<bugzilla href="https://bugzilla.suse.com/932267">SUSE bug 932267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4041</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4041" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4041" ref_url="https://www.suse.com/security/cve/CVE-2015-4041" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001604.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1059-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00030.html" source="SUSE-SU"/>
    <description>
    The keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a size calculation without considering the number of bytes occupied by multibyte characters, which allows attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via long UTF-8 strings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-20"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-4041/">CVE-2015-4041</cve>
	<bugzilla href="https://bugzilla.suse.com/928749">SUSE bug 928749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628358" comment="coreutils-8.32-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151803" comment="coreutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694732" comment="coreutils-doc-8.32-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695525" comment="coreutils-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628359" comment="coreutils-lang-8.32-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151804" comment="coreutils-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4042</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4042" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4042" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4042" ref_url="https://www.suse.com/security/cve/CVE-2015-4042" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001604.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1059-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 might allow attackers to cause a denial of service (application crash) or possibly have unspecified other impact via long strings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-20"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-4042/">CVE-2015-4042</cve>
	<bugzilla href="https://bugzilla.suse.com/1167100">SUSE bug 1167100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928749">SUSE bug 928749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628358" comment="coreutils-8.32-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151803" comment="coreutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694732" comment="coreutils-doc-8.32-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695525" comment="coreutils-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628359" comment="coreutils-lang-8.32-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151804" comment="coreutils-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4103</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4103" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4103" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4103" ref_url="https://www.suse.com/security/cve/CVE-2015-4103" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="TID7016590" ref_url="https://www.suse.com/support/kb/doc?id=7016590" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1092-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest administrators to cause a denial of service (host interrupt handling confusion) via vectors related to qemu and accessing spanning multiple fields.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4103/">CVE-2015-4103</cve>
	<bugzilla href="https://bugzilla.suse.com/931625">SUSE bug 931625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4104</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4104" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4104" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4104" ref_url="https://www.suse.com/security/cve/CVE-2015-4104" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="TID7016590" ref_url="https://www.suse.com/support/kb/doc?id=7016590" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1092-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users to cause a denial of service (unexpected interrupt and host crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4104/">CVE-2015-4104</cve>
	<bugzilla href="https://bugzilla.suse.com/931626">SUSE bug 931626</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4105</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4105" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4105" ref_url="https://www.suse.com/security/cve/CVE-2015-4105" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="TID7016590" ref_url="https://www.suse.com/support/kb/doc?id=7016590" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1092-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to cause a denial of service (host disk consumption) via certain invalid operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4105/">CVE-2015-4105</cve>
	<bugzilla href="https://bugzilla.suse.com/931627">SUSE bug 931627</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4106</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4106" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4106" ref_url="https://www.suse.com/security/cve/CVE-2015-4106" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="TID7016590" ref_url="https://www.suse.com/support/kb/doc?id=7016590" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1092-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
    <description>
    QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4106/">CVE-2015-4106</cve>
	<bugzilla href="https://bugzilla.suse.com/931628">SUSE bug 931628</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4141</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4141" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4141" ref_url="https://www.suse.com/security/cve/CVE-2015-4141" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1030-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4141/">CVE-2015-4141</cve>
	<bugzilla href="https://bugzilla.suse.com/915323">SUSE bug 915323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930077">SUSE bug 930077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4142</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4142" ref_url="https://www.suse.com/security/cve/CVE-2015-4142" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1030-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-28"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-4142/">CVE-2015-4142</cve>
	<bugzilla href="https://bugzilla.suse.com/915323">SUSE bug 915323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930078">SUSE bug 930078</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4143</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4143" ref_url="https://www.suse.com/security/cve/CVE-2015-4143" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1030-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) Commit or (2) Confirm message payload.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4143/">CVE-2015-4143</cve>
	<bugzilla href="https://bugzilla.suse.com/930079">SUSE bug 930079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4144</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4144" ref_url="https://www.suse.com/security/cve/CVE-2015-4144" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
    <description>
    The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote attackers to cause a denial of service (crash) via a crafted message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4144/">CVE-2015-4144</cve>
	<bugzilla href="https://bugzilla.suse.com/930079">SUSE bug 930079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4145</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4145" ref_url="https://www.suse.com/security/cve/CVE-2015-4145" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
    <description>
    The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate a fragment is already being processed, which allows remote attackers to cause a denial of service (memory leak) via a crafted message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4145/">CVE-2015-4145</cve>
	<bugzilla href="https://bugzilla.suse.com/930079">SUSE bug 930079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4146</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4146" ref_url="https://www.suse.com/security/cve/CVE-2015-4146" source="SUSE CVE"/>
    <description>
    The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the L (Length) and M (More) flags before determining if a response should be fragmented, which allows remote attackers to cause a denial of service (crash) via a crafted message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4146/">CVE-2015-4146</cve>
	<bugzilla href="https://bugzilla.suse.com/930079">SUSE bug 930079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4473</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4473" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4473" ref_url="https://www.suse.com/security/cve/CVE-2015-4473" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4473/">CVE-2015-4473</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4474</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4474" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4474" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4474" ref_url="https://www.suse.com/security/cve/CVE-2015-4474" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4474/">CVE-2015-4474</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4475</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4475" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4475" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4475" ref_url="https://www.suse.com/security/cve/CVE-2015-4475" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a malformed file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4475/">CVE-2015-4475</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4476</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4476" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4476" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4476" ref_url="https://www.suse.com/security/cve/CVE-2015-4476" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 41.0 on Android allows user-assisted remote attackers to spoof address-bar attributes by leveraging lack of navigation after a paste of a URL with a nonstandard scheme, as demonstrated by spoofing an SSL attribute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4476/">CVE-2015-4476</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4477</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4477" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4477" ref_url="https://www.suse.com/security/cve/CVE-2015-4477" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4477/">CVE-2015-4477</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4478</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4478" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4478" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4478" ref_url="https://www.suse.com/security/cve/CVE-2015-4478" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties, which allows remote attackers to bypass the Same Origin Policy via the reviver parameter to the JSON.parse method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4478/">CVE-2015-4478</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4479</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4479" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4479" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4479" ref_url="https://www.suse.com/security/cve/CVE-2015-4479" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4479/">CVE-2015-4479</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154480" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4480</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4480" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4480" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4480" ref_url="https://www.suse.com/security/cve/CVE-2015-4480" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 video data with H.264 encoding.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4480/">CVE-2015-4480</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154481" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4481</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4481" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4481" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4481" ref_url="https://www.suse.com/security/cve/CVE-2015-4481" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Race condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involving a hard link to a log file during an update.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-4481/">CVE-2015-4481</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4482</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4482" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4482" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4482" ref_url="https://www.suse.com/security/cve/CVE-2015-4482" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    mar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows local users to gain privileges or cause a denial of service (out-of-bounds write) via a crafted name of a Mozilla Archive (aka MAR) file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4482/">CVE-2015-4482</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4483</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4483" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4483" ref_url="https://www.suse.com/security/cve/CVE-2015-4483" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4483/">CVE-2015-4483</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4484</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4484" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4484" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4484" ref_url="https://www.suse.com/security/cve/CVE-2015-4484" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to cause a denial of service (application crash) by leveraging the use of shared memory and accessing (1) an Atomics object or (2) a SharedArrayBuffer object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4484/">CVE-2015-4484</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4485</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4485" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4485" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4485" ref_url="https://www.suse.com/security/cve/CVE-2015-4485" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4485/">CVE-2015-4485</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4486</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4486" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4486" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4486" ref_url="https://www.suse.com/security/cve/CVE-2015-4486" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed WebM video data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4486/">CVE-2015-4486</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154487" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4487</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4487" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4487" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4487" ref_url="https://www.suse.com/security/cve/CVE-2015-4487" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4487/">CVE-2015-4487</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4488</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4488" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4488" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4488" ref_url="https://www.suse.com/security/cve/CVE-2015-4488" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4488/">CVE-2015-4488</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4489</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4489" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4489" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4489" ref_url="https://www.suse.com/security/cve/CVE-2015-4489" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging a self assignment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4489/">CVE-2015-4489</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4490</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4490" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4490" ref_url="https://www.suse.com/security/cve/CVE-2015-4490" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
    <description>
    The nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0 does not implement the Content Security Policy Level 2 exceptions for the blob, data, and filesystem URL schemes during wildcard source-expression matching, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging unexpected policy-enforcement behavior.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4490/">CVE-2015-4490</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4491</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4491" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4491" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4491" ref_url="https://www.suse.com/security/cve/CVE-2015-4491" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001719.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2195-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001761.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2145-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004361.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1500-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00033.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that are mishandled during scaling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4491/">CVE-2015-4491</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942801">SUSE bug 942801</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/948790">SUSE bug 948790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628451" comment="gdk-pixbuf-lang-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628452" comment="gdk-pixbuf-query-loaders-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628453" comment="gdk-pixbuf-thumbnailer-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177170" comment="gdk-pixbuf-thumbnailer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628454" comment="libgdk_pixbuf-2_0-0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628455" comment="typelib-1_0-GdkPixbuf-2_0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4492</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4492" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4492" ref_url="https://www.suse.com/security/cve/CVE-2015-4492" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object that makes recursive calls to the open method of an XMLHttpRequest object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4492/">CVE-2015-4492</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4493</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4493" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4493" ref_url="https://www.suse.com/security/cve/CVE-2015-4493" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via an invalid size field in an esds chunk in MPEG-4 video data, a related issue to CVE-2015-1539.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4493/">CVE-2015-4493</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4495</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4495" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4495" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4495" ref_url="https://www.suse.com/security/cve/CVE-2015-4495" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
    <description>
    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4495/">CVE-2015-4495</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/940918">SUSE bug 940918</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4497</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4497" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4497" ref_url="https://www.suse.com/security/cve/CVE-2015-4497" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1504-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00000.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4497/">CVE-2015-4497</cve>
	<bugzilla href="https://bugzilla.suse.com/943550">SUSE bug 943550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943557">SUSE bug 943557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943608">SUSE bug 943608</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4498</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4498" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4498" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4498" ref_url="https://www.suse.com/security/cve/CVE-2015-4498" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1504-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00000.html" source="SUSE-SU"/>
    <description>
    The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early point in the installation process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4498/">CVE-2015-4498</cve>
	<bugzilla href="https://bugzilla.suse.com/943550">SUSE bug 943550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943558">SUSE bug 943558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943608">SUSE bug 943608</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4500</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4500" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4500" ref_url="https://www.suse.com/security/cve/CVE-2015-4500" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4500/">CVE-2015-4500</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4501</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4501" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4501" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4501" ref_url="https://www.suse.com/security/cve/CVE-2015-4501" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4501/">CVE-2015-4501</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4502</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4502" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4502" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4502" ref_url="https://www.suse.com/security/cve/CVE-2015-4502" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    js/src/proxy/Proxy.cpp in Mozilla Firefox before 41.0 mishandles certain receiver arguments, which allows remote attackers to bypass intended window access restrictions via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4502/">CVE-2015-4502</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4503</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4503" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4503" ref_url="https://www.suse.com/security/cve/CVE-2015-4503" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The TCP Socket API implementation in Mozilla Firefox before 41.0 mishandles array boundaries that were established with a navigator.mozTCPSocket.open method call and send method calls, which allows remote TCP servers to obtain sensitive information from process memory by reading packet data, as demonstrated by availability of this API in a Firefox OS application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4503/">CVE-2015-4503</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4504</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4504" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4504" ref_url="https://www.suse.com/security/cve/CVE-2015-4504" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The lut_inverse_interp16 function in the QCMS library in Mozilla Firefox before 41.0 allows remote attackers to obtain sensitive information or cause a denial of service (buffer over-read and application crash) via crafted attributes in the ICC 4 profile of an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4504/">CVE-2015-4504</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4505</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4505" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4505" ref_url="https://www.suse.com/security/cve/CVE-2015-4505" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows local users to write to arbitrary files by conducting a junction attack and waiting for an update operation by the Mozilla Maintenance Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4505/">CVE-2015-4505</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4506</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4506" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4506" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4506" ref_url="https://www.suse.com/security/cve/CVE-2015-4506" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3, allows remote attackers to execute arbitrary code via a crafted VP9 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4506/">CVE-2015-4506</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4507</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4507" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4507" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4507" ref_url="https://www.suse.com/security/cve/CVE-2015-4507" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The SavedStacks class in the JavaScript implementation in Mozilla Firefox before 41.0, when the Debugger API is enabled, allows remote attackers to cause a denial of service (getSlotRef assertion failure and application exit) or possibly execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4507/">CVE-2015-4507</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4508</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4508" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4508" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4508" ref_url="https://www.suse.com/security/cve/CVE-2015-4508" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the relationship between address-bar URLs and web content via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4508/">CVE-2015-4508</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4509</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4509" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4509" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4509" ref_url="https://www.suse.com/security/cve/CVE-2015-4509" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via crafted JavaScript code that modifies the URI table of a media element, aka ZDI-CAN-3176.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4509/">CVE-2015-4509</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4510</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4510" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4510" ref_url="https://www.suse.com/security/cve/CVE-2015-4510" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Race condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox before 41.0 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) by leveraging improper interaction between shared workers and the IndexedDB implementation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4510/">CVE-2015-4510</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4511</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4511" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4511" ref_url="https://www.suse.com/security/cve/CVE-2015-4511" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via a crafted header in a WebM video.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4511/">CVE-2015-4511</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4512</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4512" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4512" ref_url="https://www.suse.com/security/cve/CVE-2015-4512" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    gfx/2d/DataSurfaceHelpers.cpp in Mozilla Firefox before 41.0 on Linux improperly attempts to use the Cairo library with 32-bit color-depth surface creation followed by 16-bit color-depth surface display, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) by using a CANVAS element to trigger 2D rendering.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4512/">CVE-2015-4512</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4513</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4513" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4513" ref_url="https://www.suse.com/security/cve/CVE-2015-4513" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4513/">CVE-2015-4513</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154514" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4514</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4514" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4514" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4514" ref_url="https://www.suse.com/security/cve/CVE-2015-4514" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4514/">CVE-2015-4514</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4515</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4515" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4515" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4515" ref_url="https://www.suse.com/security/cve/CVE-2015-4515" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote attackers to obtain sensitive hostname information by constructing a crafted web site that sends an NTLM request and reads the Workstation field of an NTLM type 3 message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4515/">CVE-2015-4515</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154516" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4516</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4516" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4516" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4516" ref_url="https://www.suse.com/security/cve/CVE-2015-4516" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 41.0 allows remote attackers to bypass certain ECMAScript 5 (aka ES5) API protection mechanisms and modify immutable properties, and consequently execute arbitrary JavaScript code with chrome privileges, via a crafted web page that does not use ES5 APIs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4516/">CVE-2015-4516</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4517</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4517" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4517" ref_url="https://www.suse.com/security/cve/CVE-2015-4517" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    NetworkUtils.cpp in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4517/">CVE-2015-4517</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4518</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4518" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4518" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4518" ref_url="https://www.suse.com/security/cve/CVE-2015-4518" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    The Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which makes it easier for remote attackers to bypass the Content Security Policy (CSP) protection mechanism and conduct cross-site scripting (XSS) attacks via vectors involving SVG animations and the about:reader URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4518/">CVE-2015-4518</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4519</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4519" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4519" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4519" ref_url="https://www.suse.com/security/cve/CVE-2015-4519" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended access restrictions and discover a redirect's target URL via crafted JavaScript code that executes after a drag-and-drop action of an image into a TEXTBOX element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4519/">CVE-2015-4519</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154520" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4520</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4520" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4520" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4520" ref_url="https://www.suse.com/security/cve/CVE-2015-4520" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass CORS preflight protection mechanisms by leveraging (1) duplicate cache-key generation or (2) retrieval of a value from an incorrect HTTP Access-Control-* response header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4520/">CVE-2015-4520</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4521</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4521" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4521" ref_url="https://www.suse.com/security/cve/CVE-2015-4521" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4521/">CVE-2015-4521</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4522</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4522" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4522" ref_url="https://www.suse.com/security/cve/CVE-2015-4522" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4522/">CVE-2015-4522</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4551</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4551" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4551" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4551" ref_url="https://www.suse.com/security/cve/CVE-2015-4551" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001669.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00156.html" source="SUSE-SU"/>
    <description>
    LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from local files into (1) Calc or (2) Writer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4551/">CVE-2015-4551</cve>
	<bugzilla href="https://bugzilla.suse.com/893141">SUSE bug 893141</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934423">SUSE bug 934423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936188">SUSE bug 936188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936190">SUSE bug 936190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/940838">SUSE bug 940838</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154588" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4588</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4588" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4588" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4588" ref_url="https://www.suse.com/security/cve/CVE-2015-4588" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1378-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001569.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1132-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1134-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4588/">CVE-2015-4588</cve>
	<bugzilla href="https://bugzilla.suse.com/933109">SUSE bug 933109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694893" comment="libwmf-0_2-7-0.2.8.4-bp153.1.32 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152632" comment="libwmf-0_2-7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4620</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4620" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4620" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4620" ref_url="https://www.suse.com/security/cve/CVE-2015-4620" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1250-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html" source="SUSE-SU"/>
    <description>
    name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) by constructing crafted zone data and then making a query for a name in that zone.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4620/">CVE-2015-4620</cve>
	<bugzilla href="https://bugzilla.suse.com/936476">SUSE bug 936476</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4625</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4625" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4625" ref_url="https://www.suse.com/security/cve/CVE-2015-4625" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001649.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1734-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-4625/">CVE-2015-4625</cve>
	<bugzilla href="https://bugzilla.suse.com/935119">SUSE bug 935119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943816">SUSE bug 943816</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482356" comment="libpolkit0-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151393" comment="libpolkit0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482357" comment="polkit-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151394" comment="polkit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482359" comment="typelib-1_0-Polkit-1_0-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151396" comment="typelib-1_0-Polkit-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4645</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4645" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4645" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4645" ref_url="https://www.suse.com/security/cve/CVE-2015-4645" source="SUSE CVE"/>
    <description>
    Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial of service (application crash) via a crafted input, which triggers a stack-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-4645/">CVE-2015-4645</cve>
	<bugzilla href="https://bugzilla.suse.com/935380">SUSE bug 935380</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629017" comment="squashfs-4.4-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151752" comment="squashfs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4646</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4646" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4646" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4646" ref_url="https://www.suse.com/security/cve/CVE-2015-4646" source="SUSE CVE"/>
    <description>
    (1) unsquash-1.c, (2) unsquash-2.c, (3) unsquash-3.c, and (4) unsquash-4.c in Squashfs and sasquatch allow remote attackers to cause a denial of service (application crash) via a crafted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-4646/">CVE-2015-4646</cve>
	<bugzilla href="https://bugzilla.suse.com/935380">SUSE bug 935380</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629017" comment="squashfs-4.4-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151752" comment="squashfs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4695</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4695" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4695" ref_url="https://www.suse.com/security/cve/CVE-2015-4695" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1378-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001569.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00018.html" source="SUSE-SU"/>
    <description>
    meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4695/">CVE-2015-4695</cve>
	<bugzilla href="https://bugzilla.suse.com/936058">SUSE bug 936058</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694893" comment="libwmf-0_2-7-0.2.8.4-bp153.1.32 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152632" comment="libwmf-0_2-7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4696</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4696" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4696" ref_url="https://www.suse.com/security/cve/CVE-2015-4696" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1378-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001569.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00018.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4696/">CVE-2015-4696</cve>
	<bugzilla href="https://bugzilla.suse.com/936062">SUSE bug 936062</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694893" comment="libwmf-0_2-7-0.2.8.4-bp153.1.32 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152632" comment="libwmf-0_2-7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4792</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4792" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4792" ref_url="https://www.suse.com/security/cve/CVE-2015-4792" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4792/">CVE-2015-4792</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4802</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4802" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4802" ref_url="https://www.suse.com/security/cve/CVE-2015-4802" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4792.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4802/">CVE-2015-4802</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4807</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4807" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4807" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4807" ref_url="https://www.suse.com/security/cve/CVE-2015-4807" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier, when running on Windows, allows remote authenticated users to affect availability via unknown vectors related to Server : Query Cache.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4807/">CVE-2015-4807</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4813</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4813" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4813" ref_url="https://www.suse.com/security/cve/CVE-2015-4813" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2154-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00172.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when using a Windows guest, allows local users to affect availability via unknown vectors related to Core.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4813/">CVE-2015-4813</cve>
	<bugzilla href="https://bugzilla.suse.com/951432">SUSE bug 951432</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4815</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4815" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4815" ref_url="https://www.suse.com/security/cve/CVE-2015-4815" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4815/">CVE-2015-4815</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4816</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4816" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4816" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4816" ref_url="https://www.suse.com/security/cve/CVE-2015-4816" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4816/">CVE-2015-4816</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958790">SUSE bug 958790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4819</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4819" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4819" ref_url="https://www.suse.com/security/cve/CVE-2015-4819" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client programs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4819/">CVE-2015-4819</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958790">SUSE bug 958790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969667">SUSE bug 969667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4826</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4826" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4826" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4826" ref_url="https://www.suse.com/security/cve/CVE-2015-4826" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4826/">CVE-2015-4826</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4830</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4830" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4830" ref_url="https://www.suse.com/security/cve/CVE-2015-4830" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4830/">CVE-2015-4830</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4836</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4836" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4836" ref_url="https://www.suse.com/security/cve/CVE-2015-4836" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4836/">CVE-2015-4836</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4858</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4858" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4858" ref_url="https://www.suse.com/security/cve/CVE-2015-4858" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2015-4913.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4858/">CVE-2015-4858</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154861" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4861</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4861" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4861" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4861" ref_url="https://www.suse.com/security/cve/CVE-2015-4861" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4861/">CVE-2015-4861</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4864</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4864" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4864" ref_url="https://www.suse.com/security/cve/CVE-2015-4864" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4864/">CVE-2015-4864</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4866</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4866" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4866" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4866" ref_url="https://www.suse.com/security/cve/CVE-2015-4866" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4866/">CVE-2015-4866</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4870</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4870" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4870" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4870" ref_url="https://www.suse.com/security/cve/CVE-2015-4870" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4870/">CVE-2015-4870</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154879" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4879</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4879" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4879" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4879" ref_url="https://www.suse.com/security/cve/CVE-2015-4879" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4879/">CVE-2015-4879</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958790">SUSE bug 958790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4895</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4895" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4895" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4895" ref_url="https://www.suse.com/security/cve/CVE-2015-4895" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4895/">CVE-2015-4895</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958790">SUSE bug 958790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4896</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4896" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4896" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4896" ref_url="https://www.suse.com/security/cve/CVE-2015-4896" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2154-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00172.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when a VM has the Remote Display feature (RDP) enabled, allows remote attackers to affect availability via unknown vectors related to Core.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4896/">CVE-2015-4896</cve>
	<bugzilla href="https://bugzilla.suse.com/951432">SUSE bug 951432</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4913</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4913" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4913" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4913" ref_url="https://www.suse.com/security/cve/CVE-2015-4913" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-2015-4858.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4913/">CVE-2015-4913</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5154</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5154" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5154" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5154" ref_url="https://www.suse.com/security/cve/CVE-2015-5154" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001543.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1409-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1421-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1479-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1643-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1782-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
    <description>
    A heap buffer overflow flaw was found in the way QEMU's IDE subsystem handled I/O buffer access while processing certain ATAPI commands. A privileged guest user in a guest with the CDROM drive enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the host's QEMU process corresponding to the guest.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5154/">CVE-2015-5154</cve>
	<bugzilla href="https://bugzilla.suse.com/938344">SUSE bug 938344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5180</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5180" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5180" ref_url="https://www.suse.com/security/cve/CVE-2015-5180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005635.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011984.html" source="SUSE-SU"/>
    <description>
    CVE-2015-5180 glibc: DNS resolver NULL pointer dereference with crafted record type
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5180/">CVE-2015-5180</cve>
	<bugzilla href="https://bugzilla.suse.com/941234">SUSE bug 941234</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5186</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5186" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5186" ref_url="https://www.suse.com/security/cve/CVE-2015-5186" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0563-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190563-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005428.html" source="SUSE-SU"/>
    <description>
    Audit before 2.4.4 in Linux does not sanitize escape characters in filenames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5186/">CVE-2015-5186</cve>
	<bugzilla href="https://bugzilla.suse.com/941922">SUSE bug 941922</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628286" comment="libaudit1-2.8.5-3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177216" comment="libaudit1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628287" comment="libaudit1-32bit-2.8.5-3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177217" comment="libaudit1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628288" comment="libauparse0-2.8.5-3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177218" comment="libauparse0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5191</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5191" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5191" ref_url="https://www.suse.com/security/cve/CVE-2015-5191" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0701-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0705-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002699.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0509-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0827-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00092.html" source="SUSE-SU"/>
    <description>
    VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Successful exploitation of this issue may result in a local privilege escalation. CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5191/">CVE-2015-5191</cve>
	<bugzilla href="https://bugzilla.suse.com/1007600">SUSE bug 1007600</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628915" comment="libvmtools0-11.2.5-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152857" comment="libvmtools0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628916" comment="open-vm-tools-11.2.5-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152858" comment="open-vm-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629219" comment="open-vm-tools-desktop-11.2.5-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152859" comment="open-vm-tools-desktop is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5198</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5198" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5198" ref_url="https://www.suse.com/security/cve/CVE-2015-5198" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1892-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001664.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001670.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1537-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00012.html" source="SUSE-SU"/>
    <description>
    libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, related to the VDPAU_DRIVER_PATH environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5198/">CVE-2015-5198</cve>
	<bugzilla href="https://bugzilla.suse.com/943967">SUSE bug 943967</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486512" comment="libvdpau1-1.1.1-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152860" comment="libvdpau1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5199</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5199" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5199" ref_url="https://www.suse.com/security/cve/CVE-2015-5199" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1892-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001664.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001670.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1537-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00012.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5199/">CVE-2015-5199</cve>
	<bugzilla href="https://bugzilla.suse.com/943968">SUSE bug 943968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486512" comment="libvdpau1-1.1.1-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152860" comment="libvdpau1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5200</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5200" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5200" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5200" ref_url="https://www.suse.com/security/cve/CVE-2015-5200" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1892-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001664.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001670.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1537-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00012.html" source="SUSE-SU"/>
    <description>
    The trace functionality in libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to write to arbitrary files via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5200/">CVE-2015-5200</cve>
	<bugzilla href="https://bugzilla.suse.com/943969">SUSE bug 943969</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486512" comment="libvdpau1-1.1.1-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152860" comment="libvdpau1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5203</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5203" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5203" ref_url="https://www.suse.com/security/cve/CVE-2015-5203" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-5203/">CVE-2015-5203</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/941919">SUSE bug 941919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942553">SUSE bug 942553</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5212</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5212" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5212" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5212" ref_url="https://www.suse.com/security/cve/CVE-2015-5212" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001669.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00156.html" source="SUSE-SU"/>
    <description>
    Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5212/">CVE-2015-5212</cve>
	<bugzilla href="https://bugzilla.suse.com/934423">SUSE bug 934423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936188">SUSE bug 936188</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5213</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5213" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5213" ref_url="https://www.suse.com/security/cve/CVE-2015-5213" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001669.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00156.html" source="SUSE-SU"/>
    <description>
    Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a long DOC file, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5213/">CVE-2015-5213</cve>
	<bugzilla href="https://bugzilla.suse.com/934423">SUSE bug 934423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936190">SUSE bug 936190</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5214</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5214" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5214" ref_url="https://www.suse.com/security/cve/CVE-2015-5214" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001669.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00156.html" source="SUSE-SU"/>
    <description>
    LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via an index to a non-existent bookmark in a DOC file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5214/">CVE-2015-5214</cve>
	<bugzilla href="https://bugzilla.suse.com/934423">SUSE bug 934423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/940838">SUSE bug 940838</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5218</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5218" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5218" ref_url="https://www.suse.com/security/cve/CVE-2015-5218" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008640.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1910-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00035.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-5218/">CVE-2015-5218</cve>
	<bugzilla href="https://bugzilla.suse.com/949754">SUSE bug 949754</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628636" comment="libblkid1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151787" comment="libblkid1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628637" comment="libblkid1-32bit-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151788" comment="libblkid1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628639" comment="libfdisk1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154114" comment="libfdisk1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628641" comment="libmount1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151789" comment="libmount1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628642" comment="libmount1-32bit-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151790" comment="libmount1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628644" comment="libsmartcols1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151791" comment="libsmartcols1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628647" comment="libuuid1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151793" comment="libuuid1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628648" comment="libuuid1-32bit-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151794" comment="libuuid1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628649" comment="util-linux-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151795" comment="util-linux is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628650" comment="util-linux-lang-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151796" comment="util-linux-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628651" comment="util-linux-systemd-2.36.2-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151797" comment="util-linux-systemd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5221</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5221" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5221" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5221" ref_url="https://www.suse.com/security/cve/CVE-2015-5221" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-5221/">CVE-2015-5221</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942553">SUSE bug 942553</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5225</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5225" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5225" ref_url="https://www.suse.com/security/cve/CVE-2015-5225" source="SUSE CVE"/>
    <description>
    A heap-based buffer overflow issue was found in the QEMU emulator's VNC display driver. It could occur while refreshing the VNC server's display surface using the vnc_refresh_server_surface() routine. A privileged guest user could use this flaw to corrupt the heap memory and crash the QEMU process instance, or to potentially use it to execute arbitrary code on the host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5225/">CVE-2015-5225</cve>
	<bugzilla href="https://bugzilla.suse.com/942845">SUSE bug 942845</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155239" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5239</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5239" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5239" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5239" ref_url="https://www.suse.com/security/cve/CVE-2015-5239" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1952-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5239/">CVE-2015-5239</cve>
	<bugzilla href="https://bugzilla.suse.com/944463">SUSE bug 944463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5247</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5247" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5247" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5247" ref_url="https://www.suse.com/security/cve/CVE-2015-5247" source="SUSE CVE"/>
    <description>
    The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by triggering a failed unlink after creating a volume on a root_squash NFS pool.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5247/">CVE-2015-5247</cve>
	<bugzilla href="https://bugzilla.suse.com/945645">SUSE bug 945645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5252</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5252" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5252" ref_url="https://www.suse.com/security/cve/CVE-2015-5252" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0032-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0164-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers to bypass intended file-access restrictions via a symlink that points outside of a share.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-5252/">CVE-2015-5252</cve>
	<bugzilla href="https://bugzilla.suse.com/958582">SUSE bug 958582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155260" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5260</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5260" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5260" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5260" ref_url="https://www.suse.com/security/cve/CVE-2015-5260" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1750-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00032.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow flaw was found in the way spice handled certain QXL commands related to the "surface_id" parameter. A user in a guest could use this flaw to crash the host QEMU-KVM process or, possibly, execute arbitrary code with the privileges of the host QEMU-KVM process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-5260/">CVE-2015-5260</cve>
	<bugzilla href="https://bugzilla.suse.com/944787">SUSE bug 944787</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629866" comment="libspice-server1-0.14.3-1.48 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5261</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5261" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5261" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5261" ref_url="https://www.suse.com/security/cve/CVE-2015-5261" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1750-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00032.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-5261/">CVE-2015-5261</cve>
	<bugzilla href="https://bugzilla.suse.com/948976">SUSE bug 948976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982386">SUSE bug 982386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629866" comment="libspice-server1-0.14.3-1.48 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155278" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5278</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5278" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5278" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5278" ref_url="https://www.suse.com/security/cve/CVE-2015-5278" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1782-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5278/">CVE-2015-5278</cve>
	<bugzilla href="https://bugzilla.suse.com/945989">SUSE bug 945989</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155279" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5279</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5279" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5279" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5279" ref_url="https://www.suse.com/security/cve/CVE-2015-5279" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1782-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
    <description>
    A heap buffer overflow flaw was found in the way QEMU's NE2000 NIC emulation implementation handled certain packets received over the network. A privileged user inside a guest could use this flaw to crash the QEMU instance (denial of service) or potentially execute arbitrary code on the host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5279/">CVE-2015-5279</cve>
	<bugzilla href="https://bugzilla.suse.com/945987">SUSE bug 945987</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5296</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5296" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5296" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5296" ref_url="https://www.suse.com/security/cve/CVE-2015-5296" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0032-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0164-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections that are encrypted but unsigned, which allows man-in-the-middle attackers to conduct encrypted-to-unencrypted downgrade attacks by modifying the client-server data stream, related to clidfs.c, libsmb_server.c, and smbXcli_base.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-5296/">CVE-2015-5296</cve>
	<bugzilla href="https://bugzilla.suse.com/1058622">SUSE bug 1058622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958584">SUSE bug 958584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973031">SUSE bug 973031</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155299" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5299</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5299" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5299" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5299" ref_url="https://www.suse.com/security/cve/CVE-2015-5299" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0032-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0164-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    The shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not verify that the DIRECTORY_LIST access right has been granted, which allows remote attackers to access snapshots by visiting a shadow copy directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-5299/">CVE-2015-5299</cve>
	<bugzilla href="https://bugzilla.suse.com/958583">SUSE bug 958583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155307" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5307</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5307" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5307" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5307" ref_url="https://www.suse.com/security/cve/CVE-2015-5307" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2350-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    It was found that the x86 ISA (Instruction Set Architecture) is prone to a denial of service attack inside a virtualized environment in the form of an infinite loop in the microcode due to the way (sequential) delivering of benign exceptions such as #AC (alignment check exception) is handled. A privileged user inside a guest could use this flaw to create denial of service conditions on the host kernel.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5307/">CVE-2015-5307</cve>
	<bugzilla href="https://bugzilla.suse.com/953527">SUSE bug 953527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954018">SUSE bug 954018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954404">SUSE bug 954404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954405">SUSE bug 954405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962977">SUSE bug 962977</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5310</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5310" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5310" ref_url="https://www.suse.com/security/cve/CVE-2015-5310" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002272.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00075.html" source="SUSE-SU"/>
    <description>
    The WNM Sleep Mode code in wpa_supplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protection (MFP) was not negotiated, which allows remote attackers to inject arbitrary broadcast or multicast packets or cause a denial of service (ignored packets) via a WNM Sleep Mode response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5310/">CVE-2015-5310</cve>
	<bugzilla href="https://bugzilla.suse.com/952254">SUSE bug 952254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/953115">SUSE bug 953115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5312</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5312" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5312" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5312" ref_url="https://www.suse.com/security/cve/CVE-2015-5312" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5312/">CVE-2015-5312</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957105">SUSE bug 957105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959469">SUSE bug 959469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5313</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5313" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5313" ref_url="https://www.suse.com/security/cve/CVE-2015-5313" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0304-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001840.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0923-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001975.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/001977.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0209-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0216-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00082.html" source="SUSE-SU"/>
    <description>
    A path-traversal flaw was found in the way the libvirt daemon handled filesystem names for storage volumes. A libvirt user with privileges to create storage volumes and without privileges to create and modify domains could possibly use this flaw to escalate their privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-5313/">CVE-2015-5313</cve>
	<bugzilla href="https://bugzilla.suse.com/953110">SUSE bug 953110</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155315" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5315</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5315" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5315" ref_url="https://www.suse.com/security/cve/CVE-2015-5315" source="SUSE CVE"/>
    <description>
    The eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when EAP-pwd is enabled in a network configuration profile, which allows remote attackers to cause a denial of service (process termination) via a large final fragment in an EAP-pwd message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5315/">CVE-2015-5315</cve>
	<bugzilla href="https://bugzilla.suse.com/953115">SUSE bug 953115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5316</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5316" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5316" ref_url="https://www.suse.com/security/cve/CVE-2015-5316" source="SUSE CVE"/>
    <description>
    The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network configuration profile, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an EAP-pwd Confirm message followed by the Identity exchange.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5316/">CVE-2015-5316</cve>
	<bugzilla href="https://bugzilla.suse.com/953115">SUSE bug 953115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155330" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5330</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5330" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5330" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5330" ref_url="https://www.suse.com/security/cve/CVE-2015-5330" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0032-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0164-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading (1) an error message or (2) a database value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5330/">CVE-2015-5330</cve>
	<bugzilla href="https://bugzilla.suse.com/958581">SUSE bug 958581</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958586">SUSE bug 958586</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628548" comment="libldb2-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291435" comment="libldb2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628549" comment="libldb2-32bit-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291436" comment="libldb2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628550" comment="python3-ldb-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247520" comment="python3-ldb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5370</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5370" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5370" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5370" ref_url="https://www.suse.com/security/cve/CVE-2015-5370" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="TID7017473" ref_url="https://www.suse.com/support/kb/doc?id=7017473" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5370/">CVE-2015-5370</cve>
	<bugzilla href="https://bugzilla.suse.com/936862">SUSE bug 936862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975276">SUSE bug 975276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977416">SUSE bug 977416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5477</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5477" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5477" ref_url="https://www.suse.com/security/cve/CVE-2015-5477" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0227-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="TID7016709" ref_url="https://www.suse.com/support/kb/doc?id=7016709" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5477/">CVE-2015-5477</cve>
	<bugzilla href="https://bugzilla.suse.com/1000362">SUSE bug 1000362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939567">SUSE bug 939567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980168">SUSE bug 980168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5621</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5621" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5621" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5621" ref_url="https://www.suse.com/security/cve/CVE-2015-5621" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001593.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1502-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5621/">CVE-2015-5621</cve>
	<bugzilla href="https://bugzilla.suse.com/1111123">SUSE bug 1111123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/940188">SUSE bug 940188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969779">SUSE bug 969779</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481482" comment="libsnmp30-5.7.3-8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151706" comment="libsnmp30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481483" comment="net-snmp-5.7.3-8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151708" comment="net-snmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481485" comment="perl-SNMP-5.7.3-8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151710" comment="perl-SNMP is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481486" comment="snmp-mibs-5.7.3-8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151711" comment="snmp-mibs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5722</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5722" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5722" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5722" ref_url="https://www.suse.com/security/cve/CVE-2015-5722" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1480-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0227-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1667-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00002.html" source="SUSE-SU"/>
    <description>
    buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5722/">CVE-2015-5722</cve>
	<bugzilla href="https://bugzilla.suse.com/944066">SUSE bug 944066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/944107">SUSE bug 944107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954983">SUSE bug 954983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958861">SUSE bug 958861</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5738</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5738" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5738" ref_url="https://www.suse.com/security/cve/CVE-2015-5738" source="SUSE CVE"/>
    <description>
    The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-5738/">CVE-2015-5738</cve>
	<bugzilla href="https://bugzilla.suse.com/944456">SUSE bug 944456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/944835">SUSE bug 944835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/944836">SUSE bug 944836</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482233" comment="libgcrypt20-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482234" comment="libgcrypt20-32bit-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5745</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5745" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5745" ref_url="https://www.suse.com/security/cve/CVE-2015-5745" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5745/">CVE-2015-5745</cve>
	<bugzilla href="https://bugzilla.suse.com/940929">SUSE bug 940929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155949" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5949</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5949" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5949" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5949" ref_url="https://www.suse.com/security/cve/CVE-2015-5949" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00040.html" source="SUSE-SU"/>
    <description>
    VideoLAN VLC media player 2.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted 3GP file, which triggers the freeing of arbitrary pointers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5949/">CVE-2015-5949</cve>
	<bugzilla href="https://bugzilla.suse.com/965227">SUSE bug 965227</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5969</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5969" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5969" ref_url="https://www.suse.com/security/cve/CVE-2015-5969" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0379-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00050.html" source="SUSE-SU"/>
    <description>
    The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and the mariadb package before 10.0.22-2.21.2 in openSUSE 13.2 and before 10.0.22-3.1 in SUSE Linux Enterprise (SLE) 12.1 and openSUSE Leap 42.1 allows local users to discover database credentials by listing a process and its arguments.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5969/">CVE-2015-5969</cve>
	<bugzilla href="https://bugzilla.suse.com/957174">SUSE bug 957174</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5986</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5986" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5986" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5986" ref_url="https://www.suse.com/security/cve/CVE-2015-5986" source="SUSE CVE"/>
    <description>
    openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5986/">CVE-2015-5986</cve>
	<bugzilla href="https://bugzilla.suse.com/944066">SUSE bug 944066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/944107">SUSE bug 944107</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6251</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6251" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6251" ref_url="https://www.suse.com/security/cve/CVE-2015-6251" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001582.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00001.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6251/">CVE-2015-6251</cve>
	<bugzilla href="https://bugzilla.suse.com/941794">SUSE bug 941794</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628489" comment="gnutls-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628491" comment="libgnutls30-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177128" comment="libgnutls30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628492" comment="libgnutls30-32bit-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009235745" comment="libgnutls30-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156360" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6360</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6360" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6360" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6360" ref_url="https://www.suse.com/security/cve/CVE-2015-6360" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2266-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00033.html" source="SUSE-SU"/>
    <description>
    The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6360/">CVE-2015-6360</cve>
	<bugzilla href="https://bugzilla.suse.com/957376">SUSE bug 957376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487575" comment="libsrtp2-1-2.2.0-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695526" comment="libsrtp2-1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6749</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6749" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6749" ref_url="https://www.suse.com/security/cve/CVE-2015-6749" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001634.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1686-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00013.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted AIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6749/">CVE-2015-6749</cve>
	<bugzilla href="https://bugzilla.suse.com/943795">SUSE bug 943795</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486554" comment="vorbis-tools-1.4.0-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151128" comment="vorbis-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486555" comment="vorbis-tools-lang-1.4.0-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151129" comment="vorbis-tools-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6755</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6755" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6755" ref_url="https://www.suse.com/security/cve/CVE-2015-6755" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1816-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00007.html" source="SUSE-SU"/>
    <description>
    The ContainerNode::parserInsertBefore function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 46.0.2490.71, proceeds with a DOM tree insertion in certain cases where a parent node no longer contains a child node, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6755/">CVE-2015-6755</cve>
	<bugzilla href="https://bugzilla.suse.com/950290">SUSE bug 950290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6756</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6756" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6756" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6756" ref_url="https://www.suse.com/security/cve/CVE-2015-6756" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1816-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00007.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the CPDFSDK_PageView implementation in fpdfsdk/src/fsdk_mgr.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by leveraging mishandling of a focused annotation in a PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6756/">CVE-2015-6756</cve>
	<bugzilla href="https://bugzilla.suse.com/950290">SUSE bug 950290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156757" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6757</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6757" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6757" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6757" ref_url="https://www.suse.com/security/cve/CVE-2015-6757" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1816-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00007.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in content/browser/service_worker/embedded_worker_instance.cc in the ServiceWorker implementation in Google Chrome before 46.0.2490.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging object destruction in a callback.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6757/">CVE-2015-6757</cve>
	<bugzilla href="https://bugzilla.suse.com/950290">SUSE bug 950290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6758</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6758" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6758" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6758" ref_url="https://www.suse.com/security/cve/CVE-2015-6758" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1816-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00007.html" source="SUSE-SU"/>
    <description>
    The CPDF_Document::GetPage function in fpdfapi/fpdf_parser/fpdf_parser_document.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, does not properly perform a cast of a dictionary object, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6758/">CVE-2015-6758</cve>
	<bugzilla href="https://bugzilla.suse.com/950290">SUSE bug 950290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156759" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6759</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6759" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6759" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6759" ref_url="https://www.suse.com/security/cve/CVE-2015-6759" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1816-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00007.html" source="SUSE-SU"/>
    <description>
    The shouldTreatAsUniqueOrigin function in platform/weborigin/SecurityOrigin.cpp in Blink, as used in Google Chrome before 46.0.2490.71, does not ensure that the origin of a LocalStorage resource is considered unique, which allows remote attackers to obtain sensitive information via vectors involving a blob: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6759/">CVE-2015-6759</cve>
	<bugzilla href="https://bugzilla.suse.com/950290">SUSE bug 950290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6760</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6760" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6760" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6760" ref_url="https://www.suse.com/security/cve/CVE-2015-6760" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1816-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00007.html" source="SUSE-SU"/>
    <description>
    The Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome before 46.0.2490.71, mishandles mapping failures after device-lost events, which allows remote attackers to cause a denial of service (invalid read or write) or possibly have unspecified other impact via vectors involving a removed device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6760/">CVE-2015-6760</cve>
	<bugzilla href="https://bugzilla.suse.com/950290">SUSE bug 950290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6761</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6761" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6761" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6761" ref_url="https://www.suse.com/security/cve/CVE-2015-6761" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1816-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00007.html" source="SUSE-SU"/>
    <description>
    The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6761/">CVE-2015-6761</cve>
	<bugzilla href="https://bugzilla.suse.com/950290">SUSE bug 950290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6762</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6762" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6762" ref_url="https://www.suse.com/security/cve/CVE-2015-6762" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1816-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00007.html" source="SUSE-SU"/>
    <description>
    The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets (CSS) implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows remote web servers to bypass the Same Origin Policy via a redirect.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6762/">CVE-2015-6762</cve>
	<bugzilla href="https://bugzilla.suse.com/950290">SUSE bug 950290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6763</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6763" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6763" ref_url="https://www.suse.com/security/cve/CVE-2015-6763" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1816-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00007.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6763/">CVE-2015-6763</cve>
	<bugzilla href="https://bugzilla.suse.com/950290">SUSE bug 950290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6764</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6764" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6764" ref_url="https://www.suse.com/security/cve/CVE-2015-6764" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1816-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0138-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-6764/">CVE-2015-6764</cve>
	<bugzilla href="https://bugzilla.suse.com/956902">SUSE bug 956902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6765</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6765" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6765" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6765" ref_url="https://www.suse.com/security/cve/CVE-2015-6765" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in content/browser/appcache/appcache_update_job.cc in Google Chrome before 47.0.2526.73 allows remote attackers to execute arbitrary code or cause a denial of service by leveraging the mishandling of AppCache update jobs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-6765/">CVE-2015-6765</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6766</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6766" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6766" ref_url="https://www.suse.com/security/cve/CVE-2015-6766" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers with renderer access to cause a denial of service or possibly have unspecified other impact by leveraging incorrect AppCacheUpdateJob behavior associated with duplicate cache selection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6766/">CVE-2015-6766</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6767</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6767" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6767" ref_url="https://www.suse.com/security/cve/CVE-2015-6767" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in content/browser/appcache/appcache_dispatcher_host.cc in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect pointer maintenance associated with certain callbacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6767/">CVE-2015-6767</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6768</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6768" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6768" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6768" ref_url="https://www.suse.com/security/cve/CVE-2015-6768" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-6770.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6768/">CVE-2015-6768</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6769</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6769" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6769" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6769" ref_url="https://www.suse.com/security/cve/CVE-2015-6769" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    The provisional-load commit implementation in WebKit/Source/bindings/core/v8/WindowProxy.cpp in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy by leveraging a delay in window proxy clearing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6769/">CVE-2015-6769</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156770" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6770</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6770" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6770" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6770" ref_url="https://www.suse.com/security/cve/CVE-2015-6770" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-6768.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6770/">CVE-2015-6770</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6771</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6771" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6771" ref_url="https://www.suse.com/security/cve/CVE-2015-6771" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter operations for arrays, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6771/">CVE-2015-6771</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6772</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6772" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6772" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6772" ref_url="https://www.suse.com/security/cve/CVE-2015-6772" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigation while a document is being detached, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that improperly interacts with a plugin.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6772/">CVE-2015-6772</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6773</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6773" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6773" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6773" ref_url="https://www.suse.com/security/cve/CVE-2015-6773" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    The convolution implementation in Skia, as used in Google Chrome before 47.0.2526.73, does not properly constrain row lengths, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted graphics data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6773/">CVE-2015-6773</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6774</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6774" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6774" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6774" ref_url="https://www.suse.com/security/cve/CVE-2015-6774" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that modifies a pointer used for reporting loadTimes data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6774/">CVE-2015-6774</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6775</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6775" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6775" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6775" ref_url="https://www.suse.com/security/cve/CVE-2015-6775" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    fpdfsdk/src/jsapi/fxjs_v8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6775/">CVE-2015-6775</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6776</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6776" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6776" ref_url="https://www.suse.com/security/cve/CVE-2015-6776" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    The opj_dwt_decode_1* functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during a discrete wavelet transform.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6776/">CVE-2015-6776</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6777</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6777" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6777" ref_url="https://www.suse.com/security/cve/CVE-2015-6777" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit/Source/core/dom/ContainerNode.cpp in the DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOMCharacterDataModified events for certain detached-subtree insertions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6777/">CVE-2015-6777</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6778</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6778" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6778" ref_url="https://www.suse.com/security/cve/CVE-2015-6778" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    The CJBig2_SymbolDict class in fxcodec/jbig2/JBig2_SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via a PDF document containing crafted data with JBIG2 compression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6778/">CVE-2015-6778</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6779</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6779" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6779" ref_url="https://www.suse.com/security/cve/CVE-2015-6779" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a chrome://settings URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6779/">CVE-2015-6779</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156780" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6780</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6780" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6780" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6780" ref_url="https://www.suse.com/security/cve/CVE-2015-6780" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site, related to browser/ui/views/website_settings/website_settings_popup_view.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6780/">CVE-2015-6780</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6781</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6781" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6781" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6781" ref_url="https://www.suse.com/security/cve/CVE-2015-6781" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the FontData::Bound function in data/font_data.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT container.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6781/">CVE-2015-6781</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6782</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6782" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6782" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6782" ref_url="https://www.suse.com/security/cve/CVE-2015-6782" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    The Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0.2526.73 does not ensure that page-dismissal event handling is compatible with modal-dialog blocking, which makes it easier for remote attackers to spoof Omnibox content via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6782/">CVE-2015-6782</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6783</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6783" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6783" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6783" ref_url="https://www.suse.com/security/cve/CVE-2015-6783" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    The FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy Linker) in Android 5.x and 6.x, as used in Google Chrome before 47.0.2526.73, improperly searches for an EOCD record, which allows attackers to bypass a signature-validation requirement via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6783/">CVE-2015-6783</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156784" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6784</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6784" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6784" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6784" ref_url="https://www.suse.com/security/cve/CVE-2015-6784" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web (MOTW) comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6784/">CVE-2015-6784</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156785" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6785</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6785" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6785" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6785" ref_url="https://www.suse.com/security/cve/CVE-2015-6785" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts an x.y hostname as a match for a *.x.y pattern, which might allow remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a policy that was intended to be specific to subdomains.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6785/">CVE-2015-6785</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156786" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6786</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6786" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6786" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6786" ref_url="https://www.suse.com/security/cve/CVE-2015-6786" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts a blob:, data:, or filesystem: URL as a match for a * pattern, which allows remote attackers to bypass intended scheme restrictions in opportunistic circumstances by leveraging a policy that relies on this pattern.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6786/">CVE-2015-6786</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6787</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6787" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6787" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6787" ref_url="https://www.suse.com/security/cve/CVE-2015-6787" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6787/">CVE-2015-6787</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6788</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6788" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6788" ref_url="https://www.suse.com/security/cve/CVE-2015-6788" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    The ObjectBackedNativeHandler class in extensions/renderer/object_backed_native_handler.cc in the extensions subsystem in Google Chrome before 47.0.2526.80 improperly implements handler functions, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6788/">CVE-2015-6788</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958481">SUSE bug 958481</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6789</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6789" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6789" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6789" ref_url="https://www.suse.com/security/cve/CVE-2015-6789" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact by leveraging unanticipated object deletion.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6789/">CVE-2015-6789</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958481">SUSE bug 958481</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6790</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6790" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6790" ref_url="https://www.suse.com/security/cve/CVE-2015-6790" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6790/">CVE-2015-6790</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958481">SUSE bug 958481</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6791</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6791" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6791" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6791" ref_url="https://www.suse.com/security/cve/CVE-2015-6791" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.80 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6791/">CVE-2015-6791</cve>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958481">SUSE bug 958481</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6792</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6792" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6792" ref_url="https://www.suse.com/security/cve/CVE-2015-6792" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2347-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00030.html" source="SUSE-SU"/>
    <description>
    The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to midi_manager.cc, midi_manager_alsa.cc, and midi_manager_mac.cc, a different vulnerability than CVE-2015-8664.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6792/">CVE-2015-6792</cve>
	<bugzilla href="https://bugzilla.suse.com/959458">SUSE bug 959458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6815</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6815" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6815" ref_url="https://www.suse.com/security/cve/CVE-2015-6815" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1952-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of service (infinite loop and guest crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-6815/">CVE-2015-6815</cve>
	<bugzilla href="https://bugzilla.suse.com/944697">SUSE bug 944697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6855</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6855" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6855" ref_url="https://www.suse.com/security/cve/CVE-2015-6855" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1782-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-6855/">CVE-2015-6855</cve>
	<bugzilla href="https://bugzilla.suse.com/945404">SUSE bug 945404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/965156">SUSE bug 965156</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6908</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6908" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6908" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6908" ref_url="https://www.suse.com/security/cve/CVE-2015-6908" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0224-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0262-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html" source="SUSE-SU"/>
    <description>
    The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6908/">CVE-2015-6908</cve>
	<bugzilla href="https://bugzilla.suse.com/945582">SUSE bug 945582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7174</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7174" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7174" ref_url="https://www.suse.com/security/cve/CVE-2015-7174" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7174/">CVE-2015-7174</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7175</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7175" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7175" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7175" ref_url="https://www.suse.com/security/cve/CVE-2015-7175" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7175/">CVE-2015-7175</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7176</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7176" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7176" ref_url="https://www.suse.com/security/cve/CVE-2015-7176" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf function, which might allow remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7176/">CVE-2015-7176</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7177</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7177" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7177" ref_url="https://www.suse.com/security/cve/CVE-2015-7177" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7177/">CVE-2015-7177</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7178</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7178" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7178" ref_url="https://www.suse.com/security/cve/CVE-2015-7178" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted (1) OpenGL or (2) WebGL content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-7178/">CVE-2015-7178</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7179</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7179" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7179" ref_url="https://www.suse.com/security/cve/CVE-2015-7179" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, incorrectly allocates memory for shader attribute arrays, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted (1) OpenGL or (2) WebGL content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-7179/">CVE-2015-7179</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7180</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7180" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7180" ref_url="https://www.suse.com/security/cve/CVE-2015-7180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The ReadbackResultWriterD3D11::Run function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 misinterprets the return value of a function call, which might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7180/">CVE-2015-7180</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7181</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7181" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7181" ref_url="https://www.suse.com/security/cve/CVE-2015-7181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, improperly restricts access to an unspecified data structure, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data, related to a "use-after-poison" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7181/">CVE-2015-7181</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7182</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7182" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7182" ref_url="https://www.suse.com/security/cve/CVE-2015-7182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7182/">CVE-2015-7182</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7183</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7183" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7183" ref_url="https://www.suse.com/security/cve/CVE-2015-7183" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7183/">CVE-2015-7183</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962977">SUSE bug 962977</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628941" comment="mozilla-nspr-4.25.1-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152084" comment="mozilla-nspr is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7184</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7184" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7184" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7184" ref_url="https://www.suse.com/security/cve/CVE-2015-7184" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1817-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00021.html" source="SUSE-SU"/>
    <description>
    The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7184/">CVE-2015-7184</cve>
	<bugzilla href="https://bugzilla.suse.com/950686">SUSE bug 950686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7185</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7185" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7185" ref_url="https://www.suse.com/security/cve/CVE-2015-7185" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 42.0 on Android does not ensure that the address bar is restored upon fullscreen-mode exit, which allows remote attackers to spoof the address bar via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7185/">CVE-2015-7185</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7186</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7186" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7186" ref_url="https://www.suse.com/security/cve/CVE-2015-7186" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 42.0 on Android allows user-assisted remote attackers to bypass the Same Origin Policy and trigger (1) a download or (2) cached profile-data reading via a file: URL in a saved HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7186/">CVE-2015-7186</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7187</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7187" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7187" ref_url="https://www.suse.com/security/cve/CVE-2015-7187" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7187/">CVE-2015-7187</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7188</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7188" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7188" ref_url="https://www.suse.com/security/cve/CVE-2015-7188" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to bypass the Same Origin Policy for an IP address origin, and conduct cross-site scripting (XSS) attacks, by appending whitespace characters to an IP address string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7188/">CVE-2015-7188</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157189" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7189</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7189" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7189" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7189" ref_url="https://www.suse.com/security/cve/CVE-2015-7189" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via vectors involving a CANVAS element and crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7189/">CVE-2015-7189</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7190</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7190" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7190" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7190" ref_url="https://www.suse.com/security/cve/CVE-2015-7190" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    The Search feature in Mozilla Firefox before 42.0 on Android through 4.4 supports search-engine URL registration through an intent and can access this URL in a privileged context in conjunction with the crash reporter, which allows attackers to read log files and visit file: URLs of HTML documents via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7190/">CVE-2015-7190</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7191</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7191" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7191" ref_url="https://www.suse.com/security/cve/CVE-2015-7191" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 42.0 on Android improperly restricts URL strings in intents, which allows attackers to conduct cross-site scripting (XSS) attacks via vectors involving an intent: URL and fallback navigation, aka "Universal XSS (UXSS)."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7191/">CVE-2015-7191</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7192</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7192" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7192" ref_url="https://www.suse.com/security/cve/CVE-2015-7192" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with the implementation of the TABLE element, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using an NSAccessibilityIndexAttribute value to reference a row index.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7192/">CVE-2015-7192</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7193</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7193" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7193" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7193" ref_url="https://www.suse.com/security/cve/CVE-2015-7193" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross-origin request algorithm for the POST method in situations involving an unspecified Content-Type header manipulation, which allows remote attackers to bypass the Same Origin Policy by leveraging the lack of a preflight-request step.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7193/">CVE-2015-7193</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7194</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7194" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7194" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7194" ref_url="https://www.suse.com/security/cve/CVE-2015-7194" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Buffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7194/">CVE-2015-7194</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7195</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7195" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7195" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7195" ref_url="https://www.suse.com/security/cve/CVE-2015-7195" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    The URL parsing implementation in Mozilla Firefox before 42.0 improperly recognizes escaped characters in hostnames within Location headers, which allows remote attackers to obtain sensitive information via vectors involving a redirect.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7195/">CVE-2015-7195</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7196</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7196" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7196" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7196" ref_url="https://www.suse.com/security/cve/CVE-2015-7196" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of service (incorrect garbage collection and application crash) or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript wrapper.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7196/">CVE-2015-7196</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7197</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7197" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7197" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7197" ref_url="https://www.suse.com/security/cve/CVE-2015-7197" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote attackers to bypass intended mixed-content restrictions via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7197/">CVE-2015-7197</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7198</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7198" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7198" ref_url="https://www.suse.com/security/cve/CVE-2015-7198" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted texture data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7198/">CVE-2015-7198</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7199</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7199" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7199" ref_url="https://www.suse.com/security/cve/CVE-2015-7199" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lack status checking, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted SVG document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7199/">CVE-2015-7199</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7200</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7200" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7200" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7200" ref_url="https://www.suse.com/security/cve/CVE-2015-7200" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7200/">CVE-2015-7200</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7201</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7201" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7201" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7201" ref_url="https://www.suse.com/security/cve/CVE-2015-7201" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-7201/">CVE-2015-7201</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7202</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7202" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7202" ref_url="https://www.suse.com/security/cve/CVE-2015-7202" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-7202/">CVE-2015-7202</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7203</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7203" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7203" ref_url="https://www.suse.com/security/cve/CVE-2015-7203" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the DirectWriteFontInfo::LoadFontFamilyData function in gfx/thebes/gfxDWriteFontList.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted font-family name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7203/">CVE-2015-7203</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7204</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7204" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7204" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7204" ref_url="https://www.suse.com/security/cve/CVE-2015-7204" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 43.0 does not properly store the properties of unboxed objects, which allows remote attackers to execute arbitrary code via crafted JavaScript variable assignments.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7204/">CVE-2015-7204</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7205</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7205" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7205" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7205" ref_url="https://www.suse.com/security/cve/CVE-2015-7205" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 might allow remote attackers to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a crafted WebRTC RTP packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7205/">CVE-2015-7205</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7207</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7207" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7207" ref_url="https://www.suse.com/security/cve/CVE-2015-7207" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 43.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls, a related issue to CVE-2015-1300.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7207/">CVE-2015-7207</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7208</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7208" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7208" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7208" ref_url="https://www.suse.com/security/cve/CVE-2015-7208" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7208/">CVE-2015-7208</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963637">SUSE bug 963637</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7210</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7210" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7210" ref_url="https://www.suse.com/security/cve/CVE-2015-7210" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering attempted use of a data channel that has been closed by a WebRTC function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-7210/">CVE-2015-7210</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7211</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7211" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7211" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7211" ref_url="https://www.suse.com/security/cve/CVE-2015-7211" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows remote attackers to spoof web sites via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7211/">CVE-2015-7211</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7212</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7212" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7212" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7212" ref_url="https://www.suse.com/security/cve/CVE-2015-7212" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering a graphics operation that requires a large texture allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7212/">CVE-2015-7212</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7213</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7213" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7213" ref_url="https://www.suse.com/security/cve/CVE-2015-7213" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7213/">CVE-2015-7213</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7214</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7214" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7214" ref_url="https://www.suse.com/security/cve/CVE-2015-7214" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy via data: and view-source: URIs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7214/">CVE-2015-7214</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7215</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7215" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7215" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7215" ref_url="https://www.suse.com/security/cve/CVE-2015-7215" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    The importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0 allows remote attackers to bypass the Same Origin Policy by triggering use of the no-cors mode in the fetch API to attempt resource access that throws an exception, leading to information disclosure after a rethrow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7215/">CVE-2015-7215</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7216</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7216" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7216" ref_url="https://www.suse.com/security/cve/CVE-2015-7216" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the JasPer decoder, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG 2000 image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7216/">CVE-2015-7216</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7217</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7217" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7217" ref_url="https://www.suse.com/security/cve/CVE-2015-7217" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted Truevision TGA image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7217/">CVE-2015-7217</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7218</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7218" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7218" ref_url="https://www.suse.com/security/cve/CVE-2015-7218" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and application exit) via a single-byte header frame that triggers incorrect memory allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7218/">CVE-2015-7218</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7219</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7219" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7219" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7219" ref_url="https://www.suse.com/security/cve/CVE-2015-7219" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and application exit) via a malformed PushPromise frame that triggers decompressed-buffer length miscalculation and incorrect memory allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7219/">CVE-2015-7219</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157220" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7220</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7220" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7220" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7220" ref_url="https://www.suse.com/security/cve/CVE-2015-7220" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the XDRBuffer::grow function in js/src/vm/Xdr.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7220/">CVE-2015-7220</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7221</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7221" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7221" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7221" ref_url="https://www.suse.com/security/cve/CVE-2015-7221" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the nsDeque::GrowCapacity function in xpcom/glue/nsDeque.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a deque size change.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7221/">CVE-2015-7221</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7222</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7222" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7222" ref_url="https://www.suse.com/security/cve/CVE-2015-7222" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect memory allocation and application crash) via an MP4 video file with crafted covr metadata that triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7222/">CVE-2015-7222</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7223</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7223" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7223" ref_url="https://www.suse.com/security/cve/CVE-2015-7223" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    The WebExtension APIs in Mozilla Firefox before 43.0 allow remote attackers to gain privileges, and possibly obtain sensitive information or conduct cross-site scripting (XSS) attacks, via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7223/">CVE-2015-7223</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7236</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7236" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7236" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7236" ref_url="https://www.suse.com/security/cve/CVE-2015-7236" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1705-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001619.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1705-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001620.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1706-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001623.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via crafted packets, involving a PMAP_CALLIT code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7236/">CVE-2015-7236</cve>
	<bugzilla href="https://bugzilla.suse.com/940191">SUSE bug 940191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/946204">SUSE bug 946204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482535" comment="rpcbind-0.2.3-5.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153045" comment="rpcbind is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7295</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7295" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7295" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7295" ref_url="https://www.suse.com/security/cve/CVE-2015-7295" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
    <description>
    hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allows remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7295/">CVE-2015-7295</cve>
	<bugzilla href="https://bugzilla.suse.com/947159">SUSE bug 947159</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7311</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7311" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7311" ref_url="https://www.suse.com/security/cve/CVE-2015-7311" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    libxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using the qemu-xen device model, which allows local guest users to write to a read-only disk image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7311/">CVE-2015-7311</cve>
	<bugzilla href="https://bugzilla.suse.com/947165">SUSE bug 947165</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7496</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7496" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7496" ref_url="https://www.suse.com/security/cve/CVE-2015-7496" source="SUSE CVE"/>
    <description>
    GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7496/">CVE-2015-7496</cve>
	<bugzilla href="https://bugzilla.suse.com/955552">SUSE bug 955552</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694740" comment="gdm-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151581" comment="gdm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694741" comment="gdm-lang-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151582" comment="gdm-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694742" comment="gdmflexiserver-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151583" comment="gdmflexiserver is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694743" comment="libgdm1-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151584" comment="libgdm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694744" comment="typelib-1_0-Gdm-1_0-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151585" comment="typelib-1_0-Gdm-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7497</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7497" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7497" ref_url="https://www.suse.com/security/cve/CVE-2015-7497" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7497/">CVE-2015-7497</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957106">SUSE bug 957106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959469">SUSE bug 959469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7498</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7498" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7498" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7498" ref_url="https://www.suse.com/security/cve/CVE-2015-7498" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7498/">CVE-2015-7498</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957107">SUSE bug 957107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959469">SUSE bug 959469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157499" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7499</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7499" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7499" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7499" ref_url="https://www.suse.com/security/cve/CVE-2015-7499" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7499/">CVE-2015-7499</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957109">SUSE bug 957109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959469">SUSE bug 959469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7500</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7500" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7500" ref_url="https://www.suse.com/security/cve/CVE-2015-7500" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7500/">CVE-2015-7500</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957110">SUSE bug 957110</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959469">SUSE bug 959469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7504</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7504" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7504" ref_url="https://www.suse.com/security/cve/CVE-2015-7504" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow flaw was discovered in the way QEMU's AMD PC-Net II Ethernet Controller emulation received certain packets in loopback mode. A privileged user (with the CAP_SYS_RAWIO capability) inside a guest could use this flaw to crash the host QEMU process (resulting in denial of service) or, potentially, execute arbitrary code with privileges of the host QEMU process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7504/">CVE-2015-7504</cve>
	<bugzilla href="https://bugzilla.suse.com/956411">SUSE bug 956411</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7510</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7510" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7510" ref_url="https://www.suse.com/security/cve/CVE-2015-7510" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in the getpwnam and getgrnam functions of the NSS module nss-mymachines in systemd.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7510/">CVE-2015-7510</cve>
	<bugzilla href="https://bugzilla.suse.com/956712">SUSE bug 956712</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7511</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7511" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7511" ref_url="https://www.suse.com/security/cve/CVE-2015-7511" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/002017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0575-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00151.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1227-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00027.html" source="SUSE-SU"/>
    <description>
    Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7511/">CVE-2015-7511</cve>
	<bugzilla href="https://bugzilla.suse.com/965902">SUSE bug 965902</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482233" comment="libgcrypt20-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482234" comment="libgcrypt20-32bit-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7512</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7512" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7512" ref_url="https://www.suse.com/security/cve/CVE-2015-7512" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001778.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    A buffer overflow flaw was found in the way QEMU's AMD PC-Net II emulation validated certain received packets from a remote host in non-loopback mode. A remote, unprivileged attacker could potentially use this flaw to execute arbitrary code on the host with the privileges of the QEMU process. Note that to exploit this flaw, the guest network interface must have a large MTU limit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7512/">CVE-2015-7512</cve>
	<bugzilla href="https://bugzilla.suse.com/957162">SUSE bug 957162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962360">SUSE bug 962360</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7547</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7547" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7547" ref_url="https://www.suse.com/security/cve/CVE-2015-7547" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="TID7017265" ref_url="https://www.suse.com/support/kb/doc?id=7017265" source="SUSE-SU"/>
		<reference ref_id="TID7017273" ref_url="https://www.suse.com/support/kb/doc/?id=7017273" source="SUSE-SU"/>
		<reference ref_id="TID7017287" ref_url="https://www.suse.com/support/kb/doc?id=7017287" source="SUSE-SU"/>
		<reference ref_id="TID7017315" ref_url="https://www.suse.com/support/kb/doc/?id=7017315" source="SUSE-SU"/>
		<reference ref_id="TID7017329" ref_url="https://www.suse.com/support/kb/doc/?id=7017329" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="TID7022077" ref_url="https://www.suse.com/support/kb/doc/?id=7022077" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0512-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00044.html" source="SUSE-SU"/>
    <description>
    A stack-based buffer overflow was found in the way the libresolv library performed dual A/AAAA DNS queries. A remote attacker could create a specially crafted DNS response which could cause libresolv to crash or, potentially, execute code with the permissions of the user running the library. Note: this issue is only exposed when libresolv is called from the nss_dns NSS service module.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7547/">CVE-2015-7547</cve>
	<bugzilla href="https://bugzilla.suse.com/1077097">SUSE bug 1077097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/847227">SUSE bug 847227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961721">SUSE bug 961721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967023">SUSE bug 967023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967061">SUSE bug 967061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967072">SUSE bug 967072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967496">SUSE bug 967496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969216">SUSE bug 969216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969241">SUSE bug 969241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969591">SUSE bug 969591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986086">SUSE bug 986086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7549</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7549" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7549" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7549" ref_url="https://www.suse.com/security/cve/CVE-2015-7549" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging failure to define the .write method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7549/">CVE-2015-7549</cve>
	<bugzilla href="https://bugzilla.suse.com/958917">SUSE bug 958917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958918">SUSE bug 958918</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7552</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7552" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7552" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7552" ref_url="https://www.suse.com/security/cve/CVE-2015-7552" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0225-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001835.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0897-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00124.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1467-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00006.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the gdk_pixbuf_flip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7552/">CVE-2015-7552</cve>
	<bugzilla href="https://bugzilla.suse.com/958963">SUSE bug 958963</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628451" comment="gdk-pixbuf-lang-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628452" comment="gdk-pixbuf-query-loaders-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628453" comment="gdk-pixbuf-thumbnailer-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177170" comment="gdk-pixbuf-thumbnailer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628454" comment="libgdk_pixbuf-2_0-0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628455" comment="typelib-1_0-GdkPixbuf-2_0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7554</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7554" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7554" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7554" ref_url="https://www.suse.com/security/cve/CVE-2015-7554" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0160-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001808.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0073-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0215-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0252-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0097-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html" source="SUSE-SU"/>
    <description>
    The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7554/">CVE-2015-7554</cve>
	<bugzilla href="https://bugzilla.suse.com/1007276">SUSE bug 1007276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1017690">SUSE bug 1017690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1040322">SUSE bug 1040322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960341">SUSE bug 960341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/974621">SUSE bug 974621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983436">SUSE bug 983436</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7555</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7555" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7555" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7555" ref_url="https://www.suse.com/security/cve/CVE-2015-7555" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001821.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0201-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0289-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00117.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service (program crash) via crafted image and logical screen width fields in a GIF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7555/">CVE-2015-7555</cve>
	<bugzilla href="https://bugzilla.suse.com/960319">SUSE bug 960319</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628463" comment="libgif7-5.1.4-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177219" comment="libgif7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7560</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7560" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7560" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7560" ref_url="https://www.suse.com/security/cve/CVE-2015-7560" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0816-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0837-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0877-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-7560/">CVE-2015-7560</cve>
	<bugzilla href="https://bugzilla.suse.com/968222">SUSE bug 968222</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7575</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7575" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7575" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7575" ref_url="https://www.suse.com/security/cve/CVE-2015-7575" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001807.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001818.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0401-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00139.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0007-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0161-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0162-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0488-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00166.html" source="SUSE-SU"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7575/">CVE-2015-7575</cve>
	<bugzilla href="https://bugzilla.suse.com/959888">SUSE bug 959888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960402">SUSE bug 960402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960996">SUSE bug 960996</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961280">SUSE bug 961280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961281">SUSE bug 961281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961282">SUSE bug 961282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961283">SUSE bug 961283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961284">SUSE bug 961284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961290">SUSE bug 961290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961357">SUSE bug 961357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962743">SUSE bug 962743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963937">SUSE bug 963937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967521">SUSE bug 967521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981087">SUSE bug 981087</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7665</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7665" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7665" ref_url="https://www.suse.com/security/cve/CVE-2015-7665" source="SUSE CVE"/>
    <description>
    Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, which allows remote FTP servers to discover the Tor client IP address by reading a (1) PORT or (2) EPRT command.  NOTE: within wget itself, the automatic fallback is not considered a vulnerability by CVE.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7665/">CVE-2015-7665</cve>
	<bugzilla href="https://bugzilla.suse.com/944858">SUSE bug 944858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482565" comment="wget-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694929" comment="wget-lang-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695522" comment="wget-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7673</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7673" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7673" ref_url="https://www.suse.com/security/cve/CVE-2015-7673" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001719.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2195-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001761.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0897-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00124.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1467-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00006.html" source="SUSE-SU"/>
    <description>
    io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) and possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7673/">CVE-2015-7673</cve>
	<bugzilla href="https://bugzilla.suse.com/948790">SUSE bug 948790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628451" comment="gdk-pixbuf-lang-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628452" comment="gdk-pixbuf-query-loaders-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628453" comment="gdk-pixbuf-thumbnailer-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177170" comment="gdk-pixbuf-thumbnailer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628454" comment="libgdk_pixbuf-2_0-0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628455" comment="typelib-1_0-GdkPixbuf-2_0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7674</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7674" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7674" ref_url="https://www.suse.com/security/cve/CVE-2015-7674" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001719.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2195-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001761.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0897-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00124.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1467-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00006.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7674/">CVE-2015-7674</cve>
	<bugzilla href="https://bugzilla.suse.com/948791">SUSE bug 948791</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628451" comment="gdk-pixbuf-lang-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628452" comment="gdk-pixbuf-query-loaders-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628453" comment="gdk-pixbuf-thumbnailer-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177170" comment="gdk-pixbuf-thumbnailer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628454" comment="libgdk_pixbuf-2_0-0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628455" comment="typelib-1_0-GdkPixbuf-2_0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7696</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7696" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7696" ref_url="https://www.suse.com/security/cve/CVE-2015-7696" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2529-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00013.html" source="SUSE-SU"/>
    <description>
    Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7696/">CVE-2015-7696</cve>
	<bugzilla href="https://bugzilla.suse.com/1159417">SUSE bug 1159417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950110">SUSE bug 950110</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152223" comment="unzip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694925" comment="unzip-doc-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152224" comment="unzip-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7697</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7697" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7697" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7697" ref_url="https://www.suse.com/security/cve/CVE-2015-7697" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2529-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00013.html" source="SUSE-SU"/>
    <description>
    Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (infinite loop) via empty bzip2 data in a ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7697/">CVE-2015-7697</cve>
	<bugzilla href="https://bugzilla.suse.com/1159417">SUSE bug 1159417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950110">SUSE bug 950110</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950111">SUSE bug 950111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152223" comment="unzip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694925" comment="unzip-doc-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152224" comment="unzip-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7744</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7744" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7744" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7744" ref_url="https://www.suse.com/security/cve/CVE-2015-7744" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
    <description>
    wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-7744/">CVE-2015-7744</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7805</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7805" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7805" ref_url="https://www.suse.com/security/cve/CVE-2015-7805" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1979-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001676.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2000-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1995-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2119-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00145.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7805/">CVE-2015-7805</cve>
	<bugzilla href="https://bugzilla.suse.com/953516">SUSE bug 953516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/953519">SUSE bug 953519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7834</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7834" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7834" ref_url="https://www.suse.com/security/cve/CVE-2015-7834" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1816-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00007.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google V8 before 4.6.85.23, as used in Google Chrome before 46.0.2490.71, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7834/">CVE-2015-7834</cve>
	<bugzilla href="https://bugzilla.suse.com/950290">SUSE bug 950290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7835</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7835" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7835" ref_url="https://www.suse.com/security/cve/CVE-2015-7835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1952-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1965-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html" source="SUSE-SU"/>
    <description>
    The mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entries, which allows local PV guest administrators to gain privileges via a crafted superpage mapping.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7835/">CVE-2015-7835</cve>
	<bugzilla href="https://bugzilla.suse.com/940929">SUSE bug 940929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/947159">SUSE bug 947159</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157941" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7941</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7941" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7941" ref_url="https://www.suse.com/security/cve/CVE-2015-7941" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7941/">CVE-2015-7941</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951734">SUSE bug 951734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951735">SUSE bug 951735</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7942</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7942" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7942" ref_url="https://www.suse.com/security/cve/CVE-2015-7942" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7942/">CVE-2015-7942</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951735">SUSE bug 951735</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7969</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7969" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7969" ref_url="https://www.suse.com/security/cve/CVE-2015-7969" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1952-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1965-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
    <description>
    Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to cause a denial of service (memory consumption) via a large number of "teardowns" of domains with the vcpu pointer array allocated using the (1) XEN_DOMCTL_max_vcpus hypercall or the xenoprofile state vcpu pointer array allocated using the (2) XENOPROF_get_buffer or (3) XENOPROF_set_passive hypercall.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7969/">CVE-2015-7969</cve>
	<bugzilla href="https://bugzilla.suse.com/950703">SUSE bug 950703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950705">SUSE bug 950705</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7970</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7970" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7970" ref_url="https://www.suse.com/security/cve/CVE-2015-7970" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM guest administrators to cause a denial of service (CPU consumption and possibly reboot) via crafted memory contents that triggers a "time-consuming linear scan," related to Populate-on-Demand.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7970/">CVE-2015-7970</cve>
	<bugzilla href="https://bugzilla.suse.com/950704">SUSE bug 950704</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7971</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7971" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7971" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7971" ref_url="https://www.suse.com/security/cve/CVE-2015-7971" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1952-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1965-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
    <description>
    Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hypercalls, which allows local guests to cause a denial of service via a sequence of crafted (1) HYPERCALL_xenoprof_op hypercalls, which are not properly handled in the do_xenoprof_op function in common/xenoprof.c, or (2) HYPERVISOR_xenpmu_op hypercalls, which are not properly handled in the do_xenpmu_op function in arch/x86/cpu/vpmu.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7971/">CVE-2015-7971</cve>
	<bugzilla href="https://bugzilla.suse.com/950706">SUSE bug 950706</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7972</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7972" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7972" ref_url="https://www.suse.com/security/cve/CVE-2015-7972" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1965-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
    <description>
    The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post function in tools/libxl/libxl_dom.c in Xen 3.4.x through 4.6.x do not properly calculate the balloon size when using the populate-on-demand (PoD) system, which allows local HVM guest users to cause a denial of service (guest crash) via unspecified vectors related to "heavy memory pressure."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7972/">CVE-2015-7972</cve>
	<bugzilla href="https://bugzilla.suse.com/950704">SUSE bug 950704</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951845">SUSE bug 951845</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157981" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7981</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7981" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7981" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7981" ref_url="https://www.suse.com/security/cve/CVE-2015-7981" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2017-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0401-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2136-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00046.html" source="SUSE-SU"/>
    <description>
    The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7981/">CVE-2015-7981</cve>
	<bugzilla href="https://bugzilla.suse.com/952051">SUSE bug 952051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960402">SUSE bug 960402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963937">SUSE bug 963937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7995</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7995" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7995" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7995" ref_url="https://www.suse.com/security/cve/CVE-2015-7995" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00123.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1390-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00079.html" source="SUSE-SU"/>
    <description>
    The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7995/">CVE-2015-7995</cve>
	<bugzilla href="https://bugzilla.suse.com/1123130">SUSE bug 1123130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952474">SUSE bug 952474</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482466" comment="libxslt-tools-1.1.32-3.8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155747" comment="libxslt-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482467" comment="libxslt1-1.1.32-3.8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155748" comment="libxslt1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8000</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8000" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8000" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8000" ref_url="https://www.suse.com/security/cve/CVE-2015-8000" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2340-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2341-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0227-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2365-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00042.html" source="SUSE-SU"/>
    <description>
    db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8000/">CVE-2015-8000</cve>
	<bugzilla href="https://bugzilla.suse.com/944066">SUSE bug 944066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958861">SUSE bug 958861</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8025</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8025" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8025" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8025" ref_url="https://www.suse.com/security/cve/CVE-2015-8025" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2053-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2054-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001686.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2032-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00102.html" source="SUSE-SU"/>
    <description>
    driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8025/">CVE-2015-8025</cve>
	<bugzilla href="https://bugzilla.suse.com/952062">SUSE bug 952062</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629055" comment="xscreensaver-5.44-5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153124" comment="xscreensaver is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629056" comment="xscreensaver-data-5.44-5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153125" comment="xscreensaver-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629057" comment="xscreensaver-lang-5.44-5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177220" comment="xscreensaver-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8035</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8035" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8035" ref_url="https://www.suse.com/security/cve/CVE-2015-8035" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8035/">CVE-2015-8035</cve>
	<bugzilla href="https://bugzilla.suse.com/1088279">SUSE bug 1088279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105166">SUSE bug 1105166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954429">SUSE bug 954429</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8041</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8041" ref_url="https://www.suse.com/security/cve/CVE-2015-8041" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-28"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8041/">CVE-2015-8041</cve>
	<bugzilla href="https://bugzilla.suse.com/937419">SUSE bug 937419</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8075</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8075" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8075" ref_url="https://www.suse.com/security/cve/CVE-2015-8075" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2000-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1995-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2119-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00145.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8075/">CVE-2015-8075</cve>
	<bugzilla href="https://bugzilla.suse.com/953516">SUSE bug 953516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/953519">SUSE bug 953519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8104</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8104" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8104" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8104" ref_url="https://www.suse.com/security/cve/CVE-2015-8104" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2350-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8104/">CVE-2015-8104</cve>
	<bugzilla href="https://bugzilla.suse.com/953527">SUSE bug 953527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954018">SUSE bug 954018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954404">SUSE bug 954404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954405">SUSE bug 954405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962977">SUSE bug 962977</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8126" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8126" ref_url="https://www.suse.com/security/cve/CVE-2015-8126" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2017-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001779.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001789.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001790.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0401-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2136-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2262-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2263-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0103-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0104-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0105-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0684-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0729-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00046.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8126/">CVE-2015-8126</cve>
	<bugzilla href="https://bugzilla.suse.com/954980">SUSE bug 954980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958198">SUSE bug 958198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960402">SUSE bug 960402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962743">SUSE bug 962743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963937">SUSE bug 963937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969333">SUSE bug 969333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482352" comment="libpng16-16-1.6.34-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482353" comment="libpng16-16-32bit-1.6.34-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8216</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8216" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8216" ref_url="https://www.suse.com/security/cve/CVE-2015-8216" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00146.html" source="SUSE-SU"/>
    <description>
    The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain width and height checks, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted MJPEG data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8216/">CVE-2015-8216</cve>
	<bugzilla href="https://bugzilla.suse.com/955346">SUSE bug 955346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8217</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8217" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8217" ref_url="https://www.suse.com/security/cve/CVE-2015-8217" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00146.html" source="SUSE-SU"/>
    <description>
    The ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FFmpeg before 2.8.2 does not validate the Chroma Format Indicator, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted High Efficiency Video Coding (HEVC) data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8217/">CVE-2015-8217</cve>
	<bugzilla href="https://bugzilla.suse.com/955347">SUSE bug 955347</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8218</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8218" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8218" ref_url="https://www.suse.com/security/cve/CVE-2015-8218" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00146.html" source="SUSE-SU"/>
    <description>
    The decode_uncompressed function in libavcodec/faxcompr.c in FFmpeg before 2.8.2 does not validate uncompressed runs, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted CCITT FAX data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8218/">CVE-2015-8218</cve>
	<bugzilla href="https://bugzilla.suse.com/955348">SUSE bug 955348</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8219</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8219" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8219" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8219" ref_url="https://www.suse.com/security/cve/CVE-2015-8219" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00146.html" source="SUSE-SU"/>
    <description>
    The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8219/">CVE-2015-8219</cve>
	<bugzilla href="https://bugzilla.suse.com/955350">SUSE bug 955350</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8241</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8241" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8241" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8241" ref_url="https://www.suse.com/security/cve/CVE-2015-8241" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8241/">CVE-2015-8241</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/956018">SUSE bug 956018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959469">SUSE bug 959469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8242</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8242" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8242" ref_url="https://www.suse.com/security/cve/CVE-2015-8242" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8242/">CVE-2015-8242</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/956021">SUSE bug 956021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959469">SUSE bug 959469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8317</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8317" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8317" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8317" ref_url="https://www.suse.com/security/cve/CVE-2015-8317" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8317/">CVE-2015-8317</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/956260">SUSE bug 956260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959469">SUSE bug 959469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158325" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8325</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8325" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8325" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8325" ref_url="https://www.suse.com/security/cve/CVE-2015-8325" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002338.html" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1455-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00132.html" source="SUSE-SU"/>
    <description>
    The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8325/">CVE-2015-8325</cve>
	<bugzilla href="https://bugzilla.suse.com/1138392">SUSE bug 1138392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975865">SUSE bug 975865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/996040">SUSE bug 996040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628954" comment="openssh-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628955" comment="openssh-clients-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659235" comment="openssh-clients is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628956" comment="openssh-common-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659236" comment="openssh-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628958" comment="openssh-server-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659237" comment="openssh-server is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158327" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8327</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8327" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8327" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8327" ref_url="https://www.suse.com/security/cve/CVE-2015-8327" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001799.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2367-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00115.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0179-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00065.html" source="SUSE-SU"/>
    <description>
    Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8327/">CVE-2015-8327</cve>
	<bugzilla href="https://bugzilla.suse.com/1027197">SUSE bug 1027197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957531">SUSE bug 957531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009685444" comment="cups-filters-1.25.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158339" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8339</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8339" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8339" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8339" ref_url="https://www.suse.com/security/cve/CVE-2015-8339" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
    <description>
    The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand back pages to a domain, which might allow guest OS administrators to cause a denial of service (host crash) via unspecified vectors related to domain teardown.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8339/">CVE-2015-8339</cve>
	<bugzilla href="https://bugzilla.suse.com/956408">SUSE bug 956408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158340" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8340</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8340" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8340" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8340" ref_url="https://www.suse.com/security/cve/CVE-2015-8340" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
    <description>
    The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might allow guest OS administrators to cause a denial of service (deadlock or host crash) via unspecified vectors, related to XENMEM_exchange error handling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8340/">CVE-2015-8340</cve>
	<bugzilla href="https://bugzilla.suse.com/956408">SUSE bug 956408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158341" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8341</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8341" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8341" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8341" ref_url="https://www.suse.com/security/cve/CVE-2015-8341" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
    <description>
    The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service (memory and disk consumption) by starting domains.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8341/">CVE-2015-8341</cve>
	<bugzilla href="https://bugzilla.suse.com/956409">SUSE bug 956409</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8345</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8345" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8345" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8345" ref_url="https://www.suse.com/security/cve/CVE-2015-8345" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001778.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    The eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of service (application crash and infinite loop) via vectors involving the command block list.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8345/">CVE-2015-8345</cve>
	<bugzilla href="https://bugzilla.suse.com/956829">SUSE bug 956829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/956832">SUSE bug 956832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8363</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8363" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8363" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8363" ref_url="https://www.suse.com/security/cve/CVE-2015-8363" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2370-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00118.html" source="SUSE-SU"/>
    <description>
    The jpeg2000_read_main_headers function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not enforce uniqueness of the SIZ marker in a JPEG 2000 image, which allows remote attackers to cause a denial of service (out-of-bounds heap-memory access) or possibly have unspecified other impact via a crafted image with two or more of these markers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8363/">CVE-2015-8363</cve>
	<bugzilla href="https://bugzilla.suse.com/957114">SUSE bug 957114</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8364</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8364" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8364" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8364" ref_url="https://www.suse.com/security/cve/CVE-2015-8364" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2370-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00118.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ff_ivi_init_planes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a denial of service (out-of-bounds heap-memory access) or possibly have unspecified other impact via crafted image dimensions in Indeo Video Interactive data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8364/">CVE-2015-8364</cve>
	<bugzilla href="https://bugzilla.suse.com/957115">SUSE bug 957115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8365</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8365" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8365" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8365" ref_url="https://www.suse.com/security/cve/CVE-2015-8365" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2370-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00118.html" source="SUSE-SU"/>
    <description>
    The smka_decode_frame function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not verify that the data size is consistent with the number of channels, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Smacker data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8365/">CVE-2015-8365</cve>
	<bugzilla href="https://bugzilla.suse.com/957116">SUSE bug 957116</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158367" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8367</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8367" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8367" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8367" ref_url="https://www.suse.com/security/cve/CVE-2015-8367" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003170.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2256-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2729-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00011.html" source="SUSE-SU"/>
    <description>
    The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8367/">CVE-2015-8367</cve>
	<bugzilla href="https://bugzilla.suse.com/1006704">SUSE bug 1006704</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1006717">SUSE bug 1006717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957517">SUSE bug 957517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8370</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8370" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8370" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8370" ref_url="https://www.suse.com/security/cve/CVE-2015-8370" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2385-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c, which trigger an "Off-by-two" or "Out of bounds overwrite" memory error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8370/">CVE-2015-8370</cve>
	<bugzilla href="https://bugzilla.suse.com/956631">SUSE bug 956631</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628504" comment="grub2-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628505" comment="grub2-arm64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623763" comment="grub2-arm64-efi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628506" comment="grub2-i386-pc-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628507" comment="grub2-powerpc-ieee1275-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623765" comment="grub2-powerpc-ieee1275 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628509" comment="grub2-snapper-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628510" comment="grub2-systemd-sleep-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628511" comment="grub2-x86_64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8461</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8461" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8461" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8461" ref_url="https://www.suse.com/security/cve/CVE-2015-8461" source="SUSE CVE"/>
    <description>
    Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8461/">CVE-2015-8461</cve>
	<bugzilla href="https://bugzilla.suse.com/958861">SUSE bug 958861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958862">SUSE bug 958862</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8467</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8467" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8467" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8467" ref_url="https://www.suse.com/security/cve/CVE-2015-8467" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
    <description>
    The samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not properly check for administrative privileges during creation of machine accounts, which allows remote authenticated users to bypass intended access restrictions by leveraging the existence of a domain with both a Samba DC and a Windows DC, a similar issue to CVE-2015-2535.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8467/">CVE-2015-8467</cve>
	<bugzilla href="https://bugzilla.suse.com/958585">SUSE bug 958585</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8504</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8504" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8504" ref_url="https://www.suse.com/security/cve/CVE-2015-8504" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8504/">CVE-2015-8504</cve>
	<bugzilla href="https://bugzilla.suse.com/958491">SUSE bug 958491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958493">SUSE bug 958493</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8543</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8543" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8543" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8543" ref_url="https://www.suse.com/security/cve/CVE-2015-8543" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0585-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8543/">CVE-2015-8543</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052256">SUSE bug 1052256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923755">SUSE bug 923755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958886">SUSE bug 958886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963994">SUSE bug 963994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969522">SUSE bug 969522</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158550" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8550</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8550" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8550" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8550" ref_url="https://www.suse.com/security/cve/CVE-2015-8550" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0585-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00005.html" source="SUSE-SU"/>
    <description>
    Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8550/">CVE-2015-8550</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052256">SUSE bug 1052256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957988">SUSE bug 957988</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8554</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8554" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8554" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8554" ref_url="https://www.suse.com/security/cve/CVE-2015-8554" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries, related to a "write path."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8554/">CVE-2015-8554</cve>
	<bugzilla href="https://bugzilla.suse.com/958007">SUSE bug 958007</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8555</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8555" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8555" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8555" ref_url="https://www.suse.com/security/cve/CVE-2015-8555" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
    <description>
    Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8555/">CVE-2015-8555</cve>
	<bugzilla href="https://bugzilla.suse.com/958009">SUSE bug 958009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8558</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8558" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8558" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8558" ref_url="https://www.suse.com/security/cve/CVE-2015-8558" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8558/">CVE-2015-8558</cve>
	<bugzilla href="https://bugzilla.suse.com/959005">SUSE bug 959005</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959006">SUSE bug 959006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976109">SUSE bug 976109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976111">SUSE bug 976111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8560</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8560" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8560" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8560" ref_url="https://www.suse.com/security/cve/CVE-2015-8560" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001799.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2367-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00115.html" source="SUSE-SU"/>
    <description>
    Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8560/">CVE-2015-8560</cve>
	<bugzilla href="https://bugzilla.suse.com/1027197">SUSE bug 1027197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957531">SUSE bug 957531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009685444" comment="cups-filters-1.25.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8567</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8567" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8567" ref_url="https://www.suse.com/security/cve/CVE-2015-8567" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8567/">CVE-2015-8567</cve>
	<bugzilla href="https://bugzilla.suse.com/959386">SUSE bug 959386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959387">SUSE bug 959387</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8568</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8568" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8568" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8568" ref_url="https://www.suse.com/security/cve/CVE-2015-8568" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest users to cause a denial of service (host memory consumption) by trying to activate the vmxnet3 device repeatedly.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8568/">CVE-2015-8568</cve>
	<bugzilla href="https://bugzilla.suse.com/959386">SUSE bug 959386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959387">SUSE bug 959387</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158605" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8605</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8605" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8605" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8605" ref_url="https://www.suse.com/security/cve/CVE-2015-8605" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001889.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001890.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0601-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00162.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0610-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00168.html" source="SUSE-SU"/>
    <description>
    ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8605/">CVE-2015-8605</cve>
	<bugzilla href="https://bugzilla.suse.com/961305">SUSE bug 961305</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628411" comment="dhcp-4.3.5-6.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628412" comment="dhcp-client-4.3.5-6.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8613</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8613" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8613" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8613" ref_url="https://www.suse.com/security/cve/CVE-2015-8613" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8613/">CVE-2015-8613</cve>
	<bugzilla href="https://bugzilla.suse.com/961358">SUSE bug 961358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961556">SUSE bug 961556</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8615</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8615" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8615" ref_url="https://www.suse.com/security/cve/CVE-2015-8615" source="SUSE CVE"/>
    <description>
    The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local HVM guest OS users to cause a denial of service via a large number of changes to the callback method (HVM_PARAM_CALLBACK_IRQ).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8615/">CVE-2015-8615</cve>
	<bugzilla href="https://bugzilla.suse.com/960093">SUSE bug 960093</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8619</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8619" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8619" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8619" ref_url="https://www.suse.com/security/cve/CVE-2015-8619" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write and application crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8619/">CVE-2015-8619</cve>
	<bugzilla href="https://bugzilla.suse.com/960334">SUSE bug 960334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/965269">SUSE bug 965269</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8629</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8629" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8629" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8629" ref_url="https://www.suse.com/security/cve/CVE-2015-8629" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001871.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0406-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html" source="SUSE-SU"/>
    <description>
    The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters exist as expected, which allows remote authenticated users to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-8629/">CVE-2015-8629</cve>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963968">SUSE bug 963968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8630</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8630" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8630" ref_url="https://www.suse.com/security/cve/CVE-2015-8630" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001870.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0406-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html" source="SUSE-SU"/>
    <description>
    The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8630/">CVE-2015-8630</cve>
	<bugzilla href="https://bugzilla.suse.com/963964">SUSE bug 963964</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158631" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8631</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8631" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8631" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8631" ref_url="https://www.suse.com/security/cve/CVE-2015-8631" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001871.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0406-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html" source="SUSE-SU"/>
    <description>
    Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (memory consumption) via a request specifying a NULL principal name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8631/">CVE-2015-8631</cve>
	<bugzilla href="https://bugzilla.suse.com/963975">SUSE bug 963975</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158661" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8661</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8661" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8661" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8661" ref_url="https://www.suse.com/security/cve/CVE-2015-8661" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00004.html" source="SUSE-SU"/>
    <description>
    The h264_slice_header_init function in libavcodec/h264_slice.c in FFmpeg before 2.8.3 does not validate the relationship between the number of threads and the number of slices, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted H.264 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8661/">CVE-2015-8661</cve>
	<bugzilla href="https://bugzilla.suse.com/960385">SUSE bug 960385</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158662" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8662</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8662" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8662" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8662" ref_url="https://www.suse.com/security/cve/CVE-2015-8662" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00004.html" source="SUSE-SU"/>
    <description>
    The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8662/">CVE-2015-8662</cve>
	<bugzilla href="https://bugzilla.suse.com/960384">SUSE bug 960384</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8663</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8663" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8663" ref_url="https://www.suse.com/security/cve/CVE-2015-8663" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00004.html" source="SUSE-SU"/>
    <description>
    The ff_get_buffer function in libavcodec/utils.c in FFmpeg before 2.8.4 preserves width and height values after a failure, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted .mov file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8663/">CVE-2015-8663</cve>
	<bugzilla href="https://bugzilla.suse.com/960383">SUSE bug 960383</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8665</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8665" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8665" ref_url="https://www.suse.com/security/cve/CVE-2015-8665" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:14888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010250.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
    <description>
    tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-8665/">CVE-2015-8665</cve>
	<bugzilla href="https://bugzilla.suse.com/1156749">SUSE bug 1156749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156754">SUSE bug 1156754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200195">SUSE bug 1200195</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8683</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8683" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8683" ref_url="https://www.suse.com/security/cve/CVE-2015-8683" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:14888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010250.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
    <description>
    The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-8683/">CVE-2015-8683</cve>
	<bugzilla href="https://bugzilla.suse.com/1156749">SUSE bug 1156749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156754">SUSE bug 1156754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200195">SUSE bug 1200195</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8704</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8704" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8704" ref_url="https://www.suse.com/security/cve/CVE-2015-8704" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0227-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0197-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0199-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00025.html" source="SUSE-SU"/>
    <description>
    apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8704/">CVE-2015-8704</cve>
	<bugzilla href="https://bugzilla.suse.com/962189">SUSE bug 962189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962190">SUSE bug 962190</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8705</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8705" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8705" ref_url="https://www.suse.com/security/cve/CVE-2015-8705" source="SUSE CVE"/>
    <description>
    buffer.c in named in ISC BIND 9.10.x before 9.10.3-P3, when debug logging is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit, or daemon crash) or possibly have unspecified other impact via (1) OPT data or (2) an ECS option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8705/">CVE-2015-8705</cve>
	<bugzilla href="https://bugzilla.suse.com/962189">SUSE bug 962189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962190">SUSE bug 962190</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8743</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8743" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8743" ref_url="https://www.suse.com/security/cve/CVE-2015-8743" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged (CAP_SYS_RAWIO) user/process could use this flaw to leak or corrupt QEMU memory bytes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-8743/">CVE-2015-8743</cve>
	<bugzilla href="https://bugzilla.suse.com/960725">SUSE bug 960725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960726">SUSE bug 960726</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8744</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8744" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8744" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8744" ref_url="https://www.suse.com/security/cve/CVE-2015-8744" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8744/">CVE-2015-8744</cve>
	<bugzilla href="https://bugzilla.suse.com/960835">SUSE bug 960835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960836">SUSE bug 960836</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8745</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8745" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8745" ref_url="https://www.suse.com/security/cve/CVE-2015-8745" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It could occur while reading Interrupt Mask Registers (IMR). A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8745/">CVE-2015-8745</cve>
	<bugzilla href="https://bugzilla.suse.com/960707">SUSE bug 960707</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960708">SUSE bug 960708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8776</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8776" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8776" ref_url="https://www.suse.com/security/cve/CVE-2015-8776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="TID7017287" ref_url="https://www.suse.com/support/kb/doc?id=7017287" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html" source="SUSE-SU"/>
    <description>
    The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive information via an out-of-range time value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8776/">CVE-2015-8776</cve>
	<bugzilla href="https://bugzilla.suse.com/962736">SUSE bug 962736</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986086">SUSE bug 986086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8777</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8777" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8777" ref_url="https://www.suse.com/security/cve/CVE-2015-8777" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="TID7017287" ref_url="https://www.suse.com/support/kb/doc?id=7017287" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00041.html" source="SUSE-SU"/>
    <description>
    The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LD_POINTER_GUARD environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8777/">CVE-2015-8777</cve>
	<bugzilla href="https://bugzilla.suse.com/950944">SUSE bug 950944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962735">SUSE bug 962735</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8778</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8778" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8778" ref_url="https://www.suse.com/security/cve/CVE-2015-8778" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="TID7017287" ref_url="https://www.suse.com/support/kb/doc?id=7017287" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the size argument to the __hcreate_r function, which triggers out-of-bounds heap-memory access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8778/">CVE-2015-8778</cve>
	<bugzilla href="https://bugzilla.suse.com/962737">SUSE bug 962737</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986086">SUSE bug 986086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8779</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8779" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8779" ref_url="https://www.suse.com/security/cve/CVE-2015-8779" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="TID7017287" ref_url="https://www.suse.com/support/kb/doc?id=7017287" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8779/">CVE-2015-8779</cve>
	<bugzilla href="https://bugzilla.suse.com/962739">SUSE bug 962739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/965453">SUSE bug 965453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986086">SUSE bug 986086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8781</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8781" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8781" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8781" ref_url="https://www.suse.com/security/cve/CVE-2015-8781" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0414-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
    <description>
    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of samples per pixel in a LogL compressed TIFF image, a different vulnerability than CVE-2015-8782.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8781/">CVE-2015-8781</cve>
	<bugzilla href="https://bugzilla.suse.com/964213">SUSE bug 964213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964225">SUSE bug 964225</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8782</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8782" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8782" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8782" ref_url="https://www.suse.com/security/cve/CVE-2015-8782" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0414-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
    <description>
    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a different vulnerability than CVE-2015-8781.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8782/">CVE-2015-8782</cve>
	<bugzilla href="https://bugzilla.suse.com/964213">SUSE bug 964213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964225">SUSE bug 964225</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8783</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8783" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8783" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8783" ref_url="https://www.suse.com/security/cve/CVE-2015-8783" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0414-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
    <description>
    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8783/">CVE-2015-8783</cve>
	<bugzilla href="https://bugzilla.suse.com/964213">SUSE bug 964213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964225">SUSE bug 964225</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8803</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8803" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8803" ref_url="https://www.suse.com/security/cve/CVE-2015-8803" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001877.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0475-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0477-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0486-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00100.html" source="SUSE-SU"/>
    <description>
    The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8805.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8803/">CVE-2015-8803</cve>
	<bugzilla href="https://bugzilla.suse.com/964845">SUSE bug 964845</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628741" comment="libhogweed4-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177221" comment="libhogweed4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628742" comment="libhogweed4-32bit-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009242425" comment="libhogweed4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628744" comment="libnettle6-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177222" comment="libnettle6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628745" comment="libnettle6-32bit-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009242426" comment="libnettle6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8804</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8804" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8804" ref_url="https://www.suse.com/security/cve/CVE-2015-8804" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001877.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0475-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0477-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0486-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00100.html" source="SUSE-SU"/>
    <description>
    x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8804/">CVE-2015-8804</cve>
	<bugzilla href="https://bugzilla.suse.com/964847">SUSE bug 964847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628741" comment="libhogweed4-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177221" comment="libhogweed4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628742" comment="libhogweed4-32bit-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009242425" comment="libhogweed4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628744" comment="libnettle6-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177222" comment="libnettle6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628745" comment="libnettle6-32bit-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009242426" comment="libnettle6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8805</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8805" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8805" ref_url="https://www.suse.com/security/cve/CVE-2015-8805" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001877.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0475-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0477-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0486-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00100.html" source="SUSE-SU"/>
    <description>
    The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8803.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8805/">CVE-2015-8805</cve>
	<bugzilla href="https://bugzilla.suse.com/964849">SUSE bug 964849</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628741" comment="libhogweed4-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177221" comment="libhogweed4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628742" comment="libhogweed4-32bit-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009242425" comment="libhogweed4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628744" comment="libnettle6-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177222" comment="libnettle6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628745" comment="libnettle6-32bit-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009242426" comment="libnettle6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8863</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8863" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8863" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8863" ref_url="https://www.suse.com/security/cve/CVE-2015-8863" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1214-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00014.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial of service (crash) via a long JSON-encoded number, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8863/">CVE-2015-8863</cve>
	<bugzilla href="https://bugzilla.suse.com/1014176">SUSE bug 1014176</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976992">SUSE bug 976992</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482049" comment="jq-1.6-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153232" comment="jq is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482051" comment="libjq1-1.6-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153234" comment="libjq1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8899</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8899" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8899" ref_url="https://www.suse.com/security/cve/CVE-2015-8899" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3199-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0016-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00004.html" source="SUSE-SU"/>
    <description>
    Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8899/">CVE-2015-8899</cve>
	<bugzilla href="https://bugzilla.suse.com/983273">SUSE bug 983273</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158917" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8917</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8917" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8917" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8917" ref_url="https://www.suse.com/security/cve/CVE-2015-8917" source="SUSE CVE"/>
    <description>
    bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid character in the name of a cab file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8917/">CVE-2015-8917</cve>
	<bugzilla href="https://bugzilla.suse.com/985691">SUSE bug 985691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8928</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8928" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8928" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8928" ref_url="https://www.suse.com/security/cve/CVE-2015-8928" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8928/">CVE-2015-8928</cve>
	<bugzilla href="https://bugzilla.suse.com/985679">SUSE bug 985679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158933" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8933</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8933" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8933" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8933" ref_url="https://www.suse.com/security/cve/CVE-2015-8933" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8933/">CVE-2015-8933</cve>
	<bugzilla href="https://bugzilla.suse.com/985688">SUSE bug 985688</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158934" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8934</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8934" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8934" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8934" ref_url="https://www.suse.com/security/cve/CVE-2015-8934" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted rar file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8934/">CVE-2015-8934</cve>
	<bugzilla href="https://bugzilla.suse.com/985673">SUSE bug 985673</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158948" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8948</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8948" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8948" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8948" ref_url="https://www.suse.com/security/cve/CVE-2015-8948" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002269.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html" source="SUSE-SU"/>
    <description>
    idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-8948/">CVE-2015-8948</cve>
	<bugzilla href="https://bugzilla.suse.com/1014473">SUSE bug 1014473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173590">SUSE bug 1173590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190777">SUSE bug 1190777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990189">SUSE bug 990189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482248" comment="libidn11-1.34-3.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152668" comment="libidn11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628747" comment="libidn2-0-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177212" comment="libidn2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628748" comment="libidn2-0-32bit-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177213" comment="libidn2-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694851" comment="libidn2-lang-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009273026" comment="libidn2-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8972</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8972" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8972" ref_url="https://www.suse.com/security/cve/CVE-2015-8972" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2888-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00105.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8972/">CVE-2015-8972</cve>
	<bugzilla href="https://bugzilla.suse.com/1010143">SUSE bug 1010143</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694751" comment="gnuchess-6.2.6-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153265" comment="gnuchess is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9019</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-9019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9019" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-9019" ref_url="https://www.suse.com/security/cve/CVE-2015-9019" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1390-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00079.html" source="SUSE-SU"/>
    <description>
    In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-9019/">CVE-2015-9019</cve>
	<bugzilla href="https://bugzilla.suse.com/1123130">SUSE bug 1123130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934119">SUSE bug 934119</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482466" comment="libxslt-tools-1.1.32-3.8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155747" comment="libxslt-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482467" comment="libxslt1-1.1.32-3.8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155748" comment="libxslt1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9251</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-9251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9251" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-9251" ref_url="https://www.suse.com/security/cve/CVE-2015-9251" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006630.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html" source="SUSE-SU"/>
    <description>
    jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-9251/">CVE-2015-9251</cve>
	<bugzilla href="https://bugzilla.suse.com/1099458">SUSE bug 1099458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1100133">SUSE bug 1100133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111660">SUSE bug 1111660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9261</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-9261" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9261" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-9261" ref_url="https://www.suse.com/security/cve/CVE-2015-9261" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9261/">CVE-2015-9261</cve>
	<bugzilla href="https://bugzilla.suse.com/1102912">SUSE bug 1102912</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152555" comment="busybox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653584" comment="busybox-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9542</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-9542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9542" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-9542" ref_url="https://www.suse.com/security/cve/CVE-2015-9542" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008958.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0870-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3KXPRDBUQG5DRAA3TWBMKHHZP4CR2QEX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1896-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42BXAKC6WUYJZ65BBT2CMMJRVQFPVQI3/" source="SUSE-SU"/>
    <description>
    add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and crash it. Arbitrary code execution might be possible, depending on the application, C library, compiler, and other factors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9542/">CVE-2015-9542</cve>
	<bugzilla href="https://bugzilla.suse.com/1163933">SUSE bug 1163933</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009499918" comment="pam_radius-1.4.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009478582" comment="pam_radius is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620767" comment="pam_radius-32bit-1.4.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009478583" comment="pam_radius-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0505</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0505" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0505" ref_url="https://www.suse.com/security/cve/CVE-2016-0505" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Options.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0505/">CVE-2016-0505</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0546</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0546" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0546" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0546" ref_url="https://www.suse.com/security/cve/CVE-2016-0546" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that these are multiple buffer overflows in the mysqlshow tool that allow remote database servers to have unspecified impact via a long table or database name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-30"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2016-0546/">CVE-2016-0546</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0596</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0596" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0596" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0596" ref_url="https://www.suse.com/security/cve/CVE-2016-0596" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0596/">CVE-2016-0596</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0597</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0597" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0597" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0597" ref_url="https://www.suse.com/security/cve/CVE-2016-0597" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0597/">CVE-2016-0597</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0598</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0598" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0598" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0598" ref_url="https://www.suse.com/security/cve/CVE-2016-0598" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0598/">CVE-2016-0598</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0600</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0600" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0600" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0600" ref_url="https://www.suse.com/security/cve/CVE-2016-0600" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0600/">CVE-2016-0600</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160606" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0606</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0606" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0606" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0606" ref_url="https://www.suse.com/security/cve/CVE-2016-0606" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect integrity via unknown vectors related to encryption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0606/">CVE-2016-0606</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160608" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0608</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0608" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0608" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0608" ref_url="https://www.suse.com/security/cve/CVE-2016-0608" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to UDF.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0608/">CVE-2016-0608</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160609" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0609</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0609" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0609" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0609" ref_url="https://www.suse.com/security/cve/CVE-2016-0609" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0609/">CVE-2016-0609</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160610" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0610</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0610" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0610" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0610" ref_url="https://www.suse.com/security/cve/CVE-2016-0610" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1.x before 10.1.9 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0610/">CVE-2016-0610</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0616</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0616" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0616" ref_url="https://www.suse.com/security/cve/CVE-2016-0616" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0616/">CVE-2016-0616</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0640</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0640" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0640" ref_url="https://www.suse.com/security/cve/CVE-2016-0640" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-0640/">CVE-2016-0640</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0641</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0641" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0641" ref_url="https://www.suse.com/security/cve/CVE-2016-0641" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect confidentiality and availability via vectors related to MyISAM.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0641/">CVE-2016-0641</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0642</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0642" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0642" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0642" ref_url="https://www.suse.com/security/cve/CVE-2016-0642" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors related to Federated.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-0642/">CVE-2016-0642</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160644" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0644</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0644" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0644" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0644" ref_url="https://www.suse.com/security/cve/CVE-2016-0644" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DDL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0644/">CVE-2016-0644</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0646</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0646" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0646" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0646" ref_url="https://www.suse.com/security/cve/CVE-2016-0646" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0646/">CVE-2016-0646</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160649" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0649</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0649" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0649" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0649" ref_url="https://www.suse.com/security/cve/CVE-2016-0649" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to PS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0649/">CVE-2016-0649</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0650</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0650" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0650" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0650" ref_url="https://www.suse.com/security/cve/CVE-2016-0650" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to Replication.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0650/">CVE-2016-0650</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0651</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0651" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0651" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0651" ref_url="https://www.suse.com/security/cve/CVE-2016-0651" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0651/">CVE-2016-0651</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0668</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0668" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0668" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0668" ref_url="https://www.suse.com/security/cve/CVE-2016-0668" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to InnoDB.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0668/">CVE-2016-0668</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0678</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0678" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0678" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0678" ref_url="https://www.suse.com/security/cve/CVE-2016-0678" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1451-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1462-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.18 allows local users to affect confidentiality, integrity, and availability via vectors related to Core.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0678/">CVE-2016-0678</cve>
	<bugzilla href="https://bugzilla.suse.com/976636">SUSE bug 976636</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0701</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0701" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0701" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0701" ref_url="https://www.suse.com/security/cve/CVE-2016-0701" source="SUSE CVE"/>
		<reference ref_id="TID7022627" ref_url="https://www.suse.com/support/kb/doc/?id=7022627" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
    <description>
    The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0701/">CVE-2016-0701</cve>
	<bugzilla href="https://bugzilla.suse.com/1071906">SUSE bug 1071906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176331">SUSE bug 1176331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195379">SUSE bug 1195379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963410">SUSE bug 963410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963413">SUSE bug 963413</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0702</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0702" ref_url="https://www.suse.com/security/cve/CVE-2016-0702" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021994" ref_url="https://www.suse.com/support/kb/doc/?id=7021994" source="SUSE-SU"/>
		<reference ref_id="TID7021995" ref_url="https://www.suse.com/support/kb/doc/?id=7021995" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0720-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1211-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00027.html" source="SUSE-SU"/>
    <description>
    The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a "CacheBleed" attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0702/">CVE-2016-0702</cve>
	<bugzilla href="https://bugzilla.suse.com/1007806">SUSE bug 1007806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968044">SUSE bug 968044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968050">SUSE bug 968050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/971238">SUSE bug 971238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990370">SUSE bug 990370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0705</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0705" ref_url="https://www.suse.com/security/cve/CVE-2016-0705" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004658.html" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021994" ref_url="https://www.suse.com/support/kb/doc/?id=7021994" source="SUSE-SU"/>
		<reference ref_id="TID7021995" ref_url="https://www.suse.com/support/kb/doc/?id=7021995" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0705/">CVE-2016-0705</cve>
	<bugzilla href="https://bugzilla.suse.com/968044">SUSE bug 968044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968047">SUSE bug 968047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/971238">SUSE bug 971238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0718</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0718" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0718" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0718" ref_url="https://www.suse.com/security/cve/CVE-2016-0718" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1508-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1512-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read flaw was found in the way Expat processed certain input. A remote attacker could send specially crafted XML that, when parsed by an application using the Expat library, would cause that application to crash or, possibly, execute arbitrary code with the permission of the user running the application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0718/">CVE-2016-0718</cve>
	<bugzilla href="https://bugzilla.suse.com/979441">SUSE bug 979441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481942" comment="expat-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481944" comment="libexpat1-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481945" comment="libexpat1-32bit-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0729</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0729" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0729" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0729" ref_url="https://www.suse.com/security/cve/CVE-2016-0729" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1026-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/002000.html" source="SUSE-SU"/>
		<reference ref_id="TID7017306" ref_url="https://www.suse.com/support/kb/doc/?id=7017306" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0966-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1808-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00053.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0729/">CVE-2016-0729</cve>
	<bugzilla href="https://bugzilla.suse.com/966822">SUSE bug 966822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628923" comment="libxerces-c-3_2-3.2.3-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695536" comment="libxerces-c-3_2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0736</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0736" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0736" ref_url="https://www.suse.com/security/cve/CVE-2016-0736" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002741.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0897-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0903-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00120.html" source="SUSE-SU"/>
    <description>
    In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation (AES256-CBC by default), hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle attacks, particularly with CBC.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0736/">CVE-2016-0736</cve>
	<bugzilla href="https://bugzilla.suse.com/1016712">SUSE bug 1016712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033513">SUSE bug 1033513</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0749</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0749" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0749" ref_url="https://www.suse.com/security/cve/CVE-2016-0749" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002108.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1561-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1725-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1726-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html" source="SUSE-SU"/>
    <description>
    A memory allocation flaw, leading to a heap-based buffer overflow, was found in spice's smartcard interaction, which runs under the QEMU-KVM context on the host. A user connecting to a guest VM using spice could potentially use this flaw to crash the QEMU-KVM process or execute arbitrary code with the privileges of the host's QEMU-KVM process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0749/">CVE-2016-0749</cve>
	<bugzilla href="https://bugzilla.suse.com/982385">SUSE bug 982385</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982386">SUSE bug 982386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629866" comment="libspice-server1-0.14.3-1.48 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0755</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0755" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0755" ref_url="https://www.suse.com/security/cve/CVE-2016-0755" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001848.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0360-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0373-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0376-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00047.html" source="SUSE-SU"/>
    <description>
    The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-0755/">CVE-2016-0755</cve>
	<bugzilla href="https://bugzilla.suse.com/962983">SUSE bug 962983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0764</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0764" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0764" ref_url="https://www.suse.com/security/cve/CVE-2016-0764" source="SUSE CVE"/>
    <description>
    Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0764/">CVE-2016-0764</cve>
	<bugzilla href="https://bugzilla.suse.com/974072">SUSE bug 974072</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629088" comment="NetworkManager-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152685" comment="NetworkManager is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684219" comment="NetworkManager-lang-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152687" comment="NetworkManager-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628810" comment="libnm0-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152691" comment="libnm0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628811" comment="typelib-1_0-NM-1_0-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152692" comment="typelib-1_0-NM-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0771</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0771" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0771" ref_url="https://www.suse.com/security/cve/CVE-2016-0771" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00063.html" source="SUSE-SU"/>
    <description>
    The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0771/">CVE-2016-0771</cve>
	<bugzilla href="https://bugzilla.suse.com/968223">SUSE bug 968223</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0772</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0772" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0772" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0772" ref_url="https://www.suse.com/security/cve/CVE-2016-0772" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002263.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002407.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1885-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-0772/">CVE-2016-0772</cve>
	<bugzilla href="https://bugzilla.suse.com/984751">SUSE bug 984751</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0777</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0777" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0777" ref_url="https://www.suse.com/security/cve/CVE-2016-0777" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0117-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0118-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0120-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="TID7017154" ref_url="https://www.suse.com/support/kb/doc?id=7017154" source="SUSE-SU"/>
		<reference ref_id="TID7017155" ref_url="https://www.suse.com/support/kb/doc?id=7017155" source="SUSE-SU"/>
		<reference ref_id="TID7017180" ref_url="https://www.suse.com/support/kb/doc/?id=7017180" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0145-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00016.html" source="SUSE-SU"/>
    <description>
    The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0777/">CVE-2016-0777</cve>
	<bugzilla href="https://bugzilla.suse.com/961642">SUSE bug 961642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/996040">SUSE bug 996040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628954" comment="openssh-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628955" comment="openssh-clients-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659235" comment="openssh-clients is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628956" comment="openssh-common-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659236" comment="openssh-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628958" comment="openssh-server-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659237" comment="openssh-server is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0778</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0778" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0778" ref_url="https://www.suse.com/security/cve/CVE-2016-0778" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0117-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0118-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0120-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="TID7017154" ref_url="https://www.suse.com/support/kb/doc?id=7017154" source="SUSE-SU"/>
		<reference ref_id="TID7017155" ref_url="https://www.suse.com/support/kb/doc?id=7017155" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0145-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00016.html" source="SUSE-SU"/>
    <description>
    The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0778/">CVE-2016-0778</cve>
	<bugzilla href="https://bugzilla.suse.com/961645">SUSE bug 961645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/996040">SUSE bug 996040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628954" comment="openssh-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628955" comment="openssh-clients-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659235" comment="openssh-clients is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628956" comment="openssh-common-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659236" comment="openssh-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628958" comment="openssh-server-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659237" comment="openssh-server is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0787</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0787" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0787" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0787" ref_url="https://www.suse.com/security/cve/CVE-2016-0787" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001922.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0639-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00008.html" source="SUSE-SU"/>
    <description>
    The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0787/">CVE-2016-0787</cve>
	<bugzilla href="https://bugzilla.suse.com/1149968">SUSE bug 1149968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967026">SUSE bug 967026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968174">SUSE bug 968174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/974691">SUSE bug 974691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628874" comment="libssh2-1-1.9.0-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152658" comment="libssh2-1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0794</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0794" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0794" ref_url="https://www.suse.com/security/cve/CVE-2016-0794" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002146.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1415-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1805-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00050.html" source="SUSE-SU"/>
    <description>
    Multiple flaws were found in the Lotus Word Pro (LWP) document format parser in LibreOffice. By tricking a user into opening a specially crafted LWP document, an attacker could possibly use this flaw to execute arbitrary code with the privileges of the user opening the file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0794/">CVE-2016-0794</cve>
	<bugzilla href="https://bugzilla.suse.com/967014">SUSE bug 967014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967015">SUSE bug 967015</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160795" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0795</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0795" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0795" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0795" ref_url="https://www.suse.com/security/cve/CVE-2016-0795" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002146.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1415-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1805-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00050.html" source="SUSE-SU"/>
    <description>
    Multiple flaws were found in the Lotus Word Pro (LWP) document format parser in LibreOffice. By tricking a user into opening a specially crafted LWP document, an attacker could possibly use this flaw to execute arbitrary code with the privileges of the user opening the file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0795/">CVE-2016-0795</cve>
	<bugzilla href="https://bugzilla.suse.com/967014">SUSE bug 967014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967015">SUSE bug 967015</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0797</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0797" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0797" ref_url="https://www.suse.com/security/cve/CVE-2016-0797" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0720-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0797/">CVE-2016-0797</cve>
	<bugzilla href="https://bugzilla.suse.com/968044">SUSE bug 968044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968048">SUSE bug 968048</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990370">SUSE bug 990370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0798</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0798" ref_url="https://www.suse.com/security/cve/CVE-2016-0798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
    <description>
    Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-20"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0798/">CVE-2016-0798</cve>
	<bugzilla href="https://bugzilla.suse.com/968044">SUSE bug 968044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968265">SUSE bug 968265</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0800</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0800" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0800" ref_url="https://www.suse.com/security/cve/CVE-2016-0800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7017297" ref_url="https://www.suse.com/support/kb/doc?id=7017297" source="SUSE-SU"/>
		<reference ref_id="TID7017315" ref_url="https://www.suse.com/support/kb/doc/?id=7017315" source="SUSE-SU"/>
		<reference ref_id="TID7017316" ref_url="https://www.suse.com/support/kb/doc/?id=7017316" source="SUSE-SU"/>
		<reference ref_id="TID7017317" ref_url="https://www.suse.com/support/kb/doc/?id=7017317" source="SUSE-SU"/>
		<reference ref_id="TID7017338" ref_url="https://www.suse.com/support/kb/doc/?id=7017338" source="SUSE-SU"/>
		<reference ref_id="TID7017374" ref_url="https://www.suse.com/support/kb/doc/?id=7017374" source="SUSE-SU"/>
		<reference ref_id="TID7021979" ref_url="https://www.suse.com/support/kb/doc/?id=7021979" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0720-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html" source="SUSE-SU"/>
    <description>
    The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a "DROWN" attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0800/">CVE-2016-0800</cve>
	<bugzilla href="https://bugzilla.suse.com/1106871">SUSE bug 1106871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961377">SUSE bug 961377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968044">SUSE bug 968044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968046">SUSE bug 968046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968888">SUSE bug 968888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969591">SUSE bug 969591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979060">SUSE bug 979060</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161000110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1000110</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1000110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1000110" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1000110" ref_url="https://www.suse.com/security/cve/CVE-2016-1000110" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002263.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002407.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1000110/">CVE-2016-1000110</cve>
	<bugzilla href="https://bugzilla.suse.com/988484">SUSE bug 988484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989523">SUSE bug 989523</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10009</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10009" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10009" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10009" ref_url="https://www.suse.com/security/cve/CVE-2016-10009" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002677.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002972.html" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00178.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0674-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00032.html" source="SUSE-SU"/>
    <description>
    Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-10009/">CVE-2016-10009</cve>
	<bugzilla href="https://bugzilla.suse.com/1016336">SUSE bug 1016336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016366">SUSE bug 1016366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016370">SUSE bug 1016370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138392">SUSE bug 1138392</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628954" comment="openssh-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628955" comment="openssh-clients-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659235" comment="openssh-clients is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628956" comment="openssh-common-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659236" comment="openssh-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628958" comment="openssh-server-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659237" comment="openssh-server is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10010</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10010" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10010" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10010" ref_url="https://www.suse.com/security/cve/CVE-2016-10010" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002592.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00178.html" source="SUSE-SU"/>
    <description>
    sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10010/">CVE-2016-10010</cve>
	<bugzilla href="https://bugzilla.suse.com/1016336">SUSE bug 1016336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016368">SUSE bug 1016368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196721">SUSE bug 1196721</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628954" comment="openssh-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628955" comment="openssh-clients-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659235" comment="openssh-clients is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628956" comment="openssh-common-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659236" comment="openssh-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628958" comment="openssh-server-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659237" comment="openssh-server is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10011</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10011" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10011" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10011" ref_url="https://www.suse.com/security/cve/CVE-2016-10011" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002677.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002972.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00178.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0674-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00032.html" source="SUSE-SU"/>
    <description>
    authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-10011/">CVE-2016-10011</cve>
	<bugzilla href="https://bugzilla.suse.com/1016336">SUSE bug 1016336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016369">SUSE bug 1016369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016370">SUSE bug 1016370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628954" comment="openssh-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628955" comment="openssh-clients-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659235" comment="openssh-clients is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628956" comment="openssh-common-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659236" comment="openssh-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628958" comment="openssh-server-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659237" comment="openssh-server is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10012</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10012" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10012" ref_url="https://www.suse.com/security/cve/CVE-2016-10012" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004804.html" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00178.html" source="SUSE-SU"/>
    <description>
    The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10012/">CVE-2016-10012</cve>
	<bugzilla href="https://bugzilla.suse.com/1006166">SUSE bug 1006166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016336">SUSE bug 1016336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016369">SUSE bug 1016369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016370">SUSE bug 1016370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035742">SUSE bug 1035742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073044">SUSE bug 1073044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092582">SUSE bug 1092582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138392">SUSE bug 1138392</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628954" comment="openssh-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628955" comment="openssh-clients-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659235" comment="openssh-clients is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628956" comment="openssh-common-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659236" comment="openssh-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628958" comment="openssh-server-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659237" comment="openssh-server is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10013</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10013" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10013" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10013" ref_url="https://www.suse.com/security/cve/CVE-2016-10013" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3221-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during emulation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10013/">CVE-2016-10013</cve>
	<bugzilla href="https://bugzilla.suse.com/1016340">SUSE bug 1016340</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10024</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10024" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10024" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10024" ref_url="https://www.suse.com/security/cve/CVE-2016-10024" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3221-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while performing certain kernel operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10024/">CVE-2016-10024</cve>
	<bugzilla href="https://bugzilla.suse.com/1014298">SUSE bug 1014298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10025</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10025" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10025" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10025" ref_url="https://www.suse.com/security/cve/CVE-2016-10025" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00001.html" source="SUSE-SU"/>
    <description>
    VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor crash) by leveraging a missing NULL pointer check.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10025/">CVE-2016-10025</cve>
	<bugzilla href="https://bugzilla.suse.com/1014300">SUSE bug 1014300</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10028</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10028" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10028" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10028" ref_url="https://www.suse.com/security/cve/CVE-2016-10028" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a VIRTIO_GPU_CMD_GET_CAPSET command with a maximum capabilities size with a value of 0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-10028/">CVE-2016-10028</cve>
	<bugzilla href="https://bugzilla.suse.com/1017084">SUSE bug 1017084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1017085">SUSE bug 1017085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185981">SUSE bug 1185981</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10087</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10087" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10087" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10087" ref_url="https://www.suse.com/security/cve/CVE-2016-10087" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002778.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002787.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0937-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0942-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1037-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00063.html" source="SUSE-SU"/>
    <description>
    The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10087/">CVE-2016-10087</cve>
	<bugzilla href="https://bugzilla.suse.com/1017646">SUSE bug 1017646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149680">SUSE bug 1149680</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482352" comment="libpng16-16-1.6.34-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482353" comment="libpng16-16-32bit-1.6.34-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10092</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10092" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10092" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10092" ref_url="https://www.suse.com/security/cve/CVE-2016-10092" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00061.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6 allows remote attackers to have unspecified impact via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10092/">CVE-2016-10092</cve>
	<bugzilla href="https://bugzilla.suse.com/1017693">SUSE bug 1017693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122679">SUSE bug 1122679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10093</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10093" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10093" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10093" ref_url="https://www.suse.com/security/cve/CVE-2016-10093" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00061.html" source="SUSE-SU"/>
    <description>
    Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6 allows remote attackers to have unspecified impact via a crafted image, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10093/">CVE-2016-10093</cve>
	<bugzilla href="https://bugzilla.suse.com/1017693">SUSE bug 1017693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122679">SUSE bug 1122679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10094</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10094" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10094" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10094" ref_url="https://www.suse.com/security/cve/CVE-2016-10094" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00061.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10094/">CVE-2016-10094</cve>
	<bugzilla href="https://bugzilla.suse.com/1017693">SUSE bug 1017693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122679">SUSE bug 1122679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10095</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10095" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10095" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10095" ref_url="https://www.suse.com/security/cve/CVE-2016-10095" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0073-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0097-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10095/">CVE-2016-10095</cve>
	<bugzilla href="https://bugzilla.suse.com/1017690">SUSE bug 1017690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960341">SUSE bug 960341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983436">SUSE bug 983436</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10109</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10109" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10109" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10109" ref_url="https://www.suse.com/security/cve/CVE-2016-10109" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0286-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002597.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0178-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00099.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10109/">CVE-2016-10109</cve>
	<bugzilla href="https://bugzilla.suse.com/1017902">SUSE bug 1017902</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481464" comment="libpcsclite1-1.8.24-1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151385" comment="libpcsclite1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481466" comment="pcsc-lite-1.8.24-1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151386" comment="pcsc-lite is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10128</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10128" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10128" ref_url="https://www.suse.com/security/cve/CVE-2016-10128" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00072.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10128/">CVE-2016-10128</cve>
	<bugzilla href="https://bugzilla.suse.com/1019036">SUSE bug 1019036</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10129</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10129" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10129" ref_url="https://www.suse.com/security/cve/CVE-2016-10129" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00072.html" source="SUSE-SU"/>
    <description>
    The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via an empty packet line.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10129/">CVE-2016-10129</cve>
	<bugzilla href="https://bugzilla.suse.com/1019036">SUSE bug 1019036</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10130</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10130" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10130" ref_url="https://www.suse.com/security/cve/CVE-2016-10130" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00072.html" source="SUSE-SU"/>
    <description>
    The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-10130/">CVE-2016-10130</cve>
	<bugzilla href="https://bugzilla.suse.com/1019037">SUSE bug 1019037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10155</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10155" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10155" ref_url="https://www.suse.com/security/cve/CVE-2016-10155" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10155/">CVE-2016-10155</cve>
	<bugzilla href="https://bugzilla.suse.com/1021129">SUSE bug 1021129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024183">SUSE bug 1024183</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10156</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10156" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10156" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10156" ref_url="https://www.suse.com/security/cve/CVE-2016-10156" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00058.html" source="SUSE-SU"/>
    <description>
    A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10156/">CVE-2016-10156</cve>
	<bugzilla href="https://bugzilla.suse.com/1020601">SUSE bug 1020601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021969">SUSE bug 1021969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086936">SUSE bug 1086936</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10166</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10166" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10166" ref_url="https://www.suse.com/security/cve/CVE-2016-10166" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0556-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0548-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0588-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10166/">CVE-2016-10166</cve>
	<bugzilla href="https://bugzilla.suse.com/1022069">SUSE bug 1022069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1022263">SUSE bug 1022263</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10167</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10167" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10167" ref_url="https://www.suse.com/security/cve/CVE-2016-10167" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0459-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002640.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0556-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0548-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0588-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10167/">CVE-2016-10167</cve>
	<bugzilla href="https://bugzilla.suse.com/1022069">SUSE bug 1022069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1022264">SUSE bug 1022264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10168</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10168" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10168" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10168" ref_url="https://www.suse.com/security/cve/CVE-2016-10168" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0459-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002640.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0556-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003246.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0548-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0588-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10168/">CVE-2016-10168</cve>
	<bugzilla href="https://bugzilla.suse.com/1022069">SUSE bug 1022069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1022265">SUSE bug 1022265</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10190</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10190" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10190" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10190" ref_url="https://www.suse.com/security/cve/CVE-2016-10190" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0961-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1433-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbitrary code via a negative chunk size in an HTTP response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10190/">CVE-2016-10190</cve>
	<bugzilla href="https://bugzilla.suse.com/1022920">SUSE bug 1022920</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10191</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10191" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10191" ref_url="https://www.suse.com/security/cve/CVE-2016-10191" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1433-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1531-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1532-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10191/">CVE-2016-10191</cve>
	<bugzilla href="https://bugzilla.suse.com/1022921">SUSE bug 1022921</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10192</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10192" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10192" ref_url="https://www.suse.com/security/cve/CVE-2016-10192" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1433-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1531-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1532-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10192/">CVE-2016-10192</cve>
	<bugzilla href="https://bugzilla.suse.com/1022922">SUSE bug 1022922</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10198</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10198" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10198" ref_url="https://www.suse.com/security/cve/CVE-2016-10198" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1010-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002801.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1066-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1076-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00081.html" source="SUSE-SU"/>
    <description>
    The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10198/">CVE-2016-10198</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024014">SUSE bug 1024014</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482016" comment="gstreamer-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154019" comment="gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482017" comment="gstreamer-lang-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154023" comment="gstreamer-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487262" comment="gstreamer-utils-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154024" comment="gstreamer-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482018" comment="libgstreamer-1_0-0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154025" comment="libgstreamer-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482019" comment="typelib-1_0-Gst-1_0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154027" comment="typelib-1_0-Gst-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10199</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10199" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10199" ref_url="https://www.suse.com/security/cve/CVE-2016-10199" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1010-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002801.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1066-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1076-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00081.html" source="SUSE-SU"/>
    <description>
    The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted tag value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10199/">CVE-2016-10199</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024017">SUSE bug 1024017</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482016" comment="gstreamer-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154019" comment="gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482017" comment="gstreamer-lang-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154023" comment="gstreamer-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487262" comment="gstreamer-utils-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154024" comment="gstreamer-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482018" comment="libgstreamer-1_0-0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154025" comment="libgstreamer-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482019" comment="typelib-1_0-Gst-1_0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154027" comment="typelib-1_0-Gst-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10214</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10214" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10214" ref_url="https://www.suse.com/security/cve/CVE-2016-10214" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002738.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0902-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00119.html" source="SUSE-SU"/>
    <description>
    Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10214/">CVE-2016-10214</cve>
	<bugzilla href="https://bugzilla.suse.com/1024244">SUSE bug 1024244</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488549" comment="libvirglrenderer0-0.6.0-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10217</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10217" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10217" ref_url="https://www.suse.com/security/cve/CVE-2016-10217" source="SUSE CVE"/>
    <description>
    The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file that is mishandled in the color management module.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10217/">CVE-2016-10217</cve>
	<bugzilla href="https://bugzilla.suse.com/1032130">SUSE bug 1032130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10218</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10218" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10218" ref_url="https://www.suse.com/security/cve/CVE-2016-10218" source="SUSE CVE"/>
    <description>
    The pdf14_pop_transparency_group function in base/gdevp14.c in the PDF Transparency module in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10218/">CVE-2016-10218</cve>
	<bugzilla href="https://bugzilla.suse.com/1032135">SUSE bug 1032135</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10219</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10219" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10219" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10219" ref_url="https://www.suse.com/security/cve/CVE-2016-10219" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003973.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0421-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00039.html" source="SUSE-SU"/>
    <description>
    The intersect function in base/gxfill.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10219/">CVE-2016-10219</cve>
	<bugzilla href="https://bugzilla.suse.com/1032138">SUSE bug 1032138</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610220" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10220</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10220" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10220" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10220" ref_url="https://www.suse.com/security/cve/CVE-2016-10220" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00014.html" source="SUSE-SU"/>
    <description>
    The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file that is mishandled in the PDF Transparency module.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10220/">CVE-2016-10220</cve>
	<bugzilla href="https://bugzilla.suse.com/1032120">SUSE bug 1032120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036453">SUSE bug 1036453</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10228</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10228" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10228" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10228" ref_url="https://www.suse.com/security/cve/CVE-2016-10228" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:547-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/020935.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:314-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:52-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:55-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:56-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:80-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:83-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010107.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:28-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:29-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1560-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4LDTHO3OJZ2XD7I3ONIRIUSKEMP42OY2/" source="SUSE-SU"/>
    <description>
    The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-10228/">CVE-2016-10228</cve>
	<bugzilla href="https://bugzilla.suse.com/1027496">SUSE bug 1027496</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10243</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10243" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10243" ref_url="https://www.suse.com/security/cve/CVE-2016-10243" source="SUSE CVE"/>
    <description>
    TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10243/">CVE-2016-10243</cve>
	<bugzilla href="https://bugzilla.suse.com/1028271">SUSE bug 1028271</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486991" comment="texlive-lm-fonts-2017.137.2.004svn28119-7.6.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161291" comment="texlive-lm-fonts is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10251</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10251" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10251" ref_url="https://www.suse.com/security/cve/CVE-2016-10251" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002789.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1034-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00061.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10251/">CVE-2016-10251</cve>
	<bugzilla href="https://bugzilla.suse.com/1029497">SUSE bug 1029497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10266</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10266" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10266" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10266" ref_url="https://www.suse.com/security/cve/CVE-2016-10266" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00032.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10266/">CVE-2016-10266</cve>
	<bugzilla href="https://bugzilla.suse.com/1017694">SUSE bug 1017694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1031263">SUSE bug 1031263</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10267</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10267" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10267" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10267" ref_url="https://www.suse.com/security/cve/CVE-2016-10267" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00032.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10267/">CVE-2016-10267</cve>
	<bugzilla href="https://bugzilla.suse.com/1017694">SUSE bug 1017694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1031262">SUSE bug 1031262</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10268</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10268" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10268" ref_url="https://www.suse.com/security/cve/CVE-2016-10268" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00032.html" source="SUSE-SU"/>
    <description>
    tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 78490" and libtiff/tif_unix.c:115:23.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10268/">CVE-2016-10268</cve>
	<bugzilla href="https://bugzilla.suse.com/1017693">SUSE bug 1017693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1031255">SUSE bug 1031255</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610269" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10269</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10269" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10269" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10269" ref_url="https://www.suse.com/security/cve/CVE-2016-10269" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00032.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10269/">CVE-2016-10269</cve>
	<bugzilla href="https://bugzilla.suse.com/1017693">SUSE bug 1017693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1031254">SUSE bug 1031254</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10270</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10270" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10270" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10270" ref_url="https://www.suse.com/security/cve/CVE-2016-10270" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00032.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 8" and libtiff/tif_read.c:523:22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10270/">CVE-2016-10270</cve>
	<bugzilla href="https://bugzilla.suse.com/1031250">SUSE bug 1031250</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10271</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10271" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10271" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10271" ref_url="https://www.suse.com/security/cve/CVE-2016-10271" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00032.html" source="SUSE-SU"/>
    <description>
    tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 1" and libtiff/tif_fax3.c:413:13.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10271/">CVE-2016-10271</cve>
	<bugzilla href="https://bugzilla.suse.com/1031249">SUSE bug 1031249</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10272</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10272" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10272" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10272" ref_url="https://www.suse.com/security/cve/CVE-2016-10272" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00032.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "WRITE of size 2048" and libtiff/tif_next.c:64:9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10272/">CVE-2016-10272</cve>
	<bugzilla href="https://bugzilla.suse.com/1031247">SUSE bug 1031247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10317</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10317" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10317" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10317" ref_url="https://www.suse.com/security/cve/CVE-2016-10317" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003717.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0421-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00039.html" source="SUSE-SU"/>
    <description>
    The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-10317/">CVE-2016-10317</cve>
	<bugzilla href="https://bugzilla.suse.com/1032230">SUSE bug 1032230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610327" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10327</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10327" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10327" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10327" ref_url="https://www.suse.com/security/cve/CVE-2016-10327" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003174.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1851-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2488-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00065.html" source="SUSE-SU"/>
    <description>
    LibreOffice before 2016-12-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the EnhWMFReader::ReadEnhWMF function in vcl/source/filter/wmf/enhwmf.cxx.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10327/">CVE-2016-10327</cve>
	<bugzilla href="https://bugzilla.suse.com/1034192">SUSE bug 1034192</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10371</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10371" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10371" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10371" ref_url="https://www.suse.com/security/cve/CVE-2016-10371" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003259.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10371/">CVE-2016-10371</cve>
	<bugzilla href="https://bugzilla.suse.com/1038438">SUSE bug 1038438</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10504</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10504" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10504" ref_url="https://www.suse.com/security/cve/CVE-2016-10504" source="SUSE CVE"/>
    <description>
    Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (application crash) via a crafted bmp file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10504/">CVE-2016-10504</cve>
	<bugzilla href="https://bugzilla.suse.com/1056351">SUSE bug 1056351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179594">SUSE bug 1179594</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10505</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10505" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10505" ref_url="https://www.suse.com/security/cve/CVE-2016-10505" source="SUSE CVE"/>
    <description>
    NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function in color.c, color_esycc_to_rgb function in color.c, and sycc422_to_rgb function in color.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10505/">CVE-2016-10505</cve>
	<bugzilla href="https://bugzilla.suse.com/1056363">SUSE bug 1056363</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10506</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10506" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10506" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10506" ref_url="https://www.suse.com/security/cve/CVE-2016-10506" source="SUSE CVE"/>
    <description>
    Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10506/">CVE-2016-10506</cve>
	<bugzilla href="https://bugzilla.suse.com/1056396">SUSE bug 1056396</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10739</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10739" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10739" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10739" ref_url="https://www.suse.com/security/cve/CVE-2016-10739" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0903-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190903-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013417.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00082.html" source="SUSE-SU"/>
    <description>
    In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the possibility of embedded HTTP headers or other potentially dangerous substrings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-10739/">CVE-2016-10739</cve>
	<bugzilla href="https://bugzilla.suse.com/1122729">SUSE bug 1122729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155094">SUSE bug 1155094</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161234" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1234</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1234" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1234" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1234" ref_url="https://www.suse.com/security/cve/CVE-2016-1234" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002230.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1779-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service (crash) via a long name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1234/">CVE-2016-1234</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969727">SUSE bug 969727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988770">SUSE bug 988770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988782">SUSE bug 988782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989127">SUSE bug 989127</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1283</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1283" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1283" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1283" ref_url="https://www.suse.com/security/cve/CVE-2016-1283" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2805-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00076.html" source="SUSE-SU"/>
    <description>
    The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'&lt;((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1283/">CVE-2016-1283</cve>
	<bugzilla href="https://bugzilla.suse.com/960837">SUSE bug 960837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1285</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1285" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1285" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1285" ref_url="https://www.suse.com/security/cve/CVE-2016-1285" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0827-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0830-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0859-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00084.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1285/">CVE-2016-1285</cve>
	<bugzilla href="https://bugzilla.suse.com/970072">SUSE bug 970072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981200">SUSE bug 981200</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1286</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1286" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1286" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1286" ref_url="https://www.suse.com/security/cve/CVE-2016-1286" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0827-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0830-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0859-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00084.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1286/">CVE-2016-1286</cve>
	<bugzilla href="https://bugzilla.suse.com/970073">SUSE bug 970073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981200">SUSE bug 981200</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1521</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1521" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1521" ref_url="https://www.suse.com/security/cve/CVE-2016-1521" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0779-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0791-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00088.html" source="SUSE-SU"/>
    <description>
    The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1521/">CVE-2016-1521</cve>
	<bugzilla href="https://bugzilla.suse.com/965803">SUSE bug 965803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/965806">SUSE bug 965806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/965807">SUSE bug 965807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/965810">SUSE bug 965810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480302" comment="libgraphite2-3-1.3.11-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153578" comment="libgraphite2-3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1541</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1541" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1541" ref_url="https://www.suse.com/security/cve/CVE-2016-1541" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1588-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1463-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1663-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00090.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1541/">CVE-2016-1541</cve>
	<bugzilla href="https://bugzilla.suse.com/979005">SUSE bug 979005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1544</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1544" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1544" ref_url="https://www.suse.com/security/cve/CVE-2016-1544" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008541.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0675-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00029.html" source="SUSE-SU"/>
    <description>
    nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-1544/">CVE-2016-1544</cve>
	<bugzilla href="https://bugzilla.suse.com/966514">SUSE bug 966514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628805" comment="libnghttp2-14-1.40.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153583" comment="libnghttp2-14 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628806" comment="libnghttp2-14-32bit-1.40.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177223" comment="libnghttp2-14-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1567</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1567" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1567" ref_url="https://www.suse.com/security/cve/CVE-2016-1567" source="SUSE CVE"/>
    <description>
    chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1567/">CVE-2016-1567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694730" comment="chrony-3.2-9.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177182" comment="chrony is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694731" comment="chrony-pool-openSUSE-3.2-9.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673484" comment="chrony-pool-openSUSE is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1568</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1568" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1568" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1568" ref_url="https://www.suse.com/security/cve/CVE-2016-1568" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    A use-after-free flaw was found in the way QEMU's IDE AHCI emulator processed certain AHCI Native Command Queuing (NCQ) AIO commands. A privileged guest user could use this flaw to crash the QEMU process instance or, potentially, execute arbitrary code on the host with privileges of the QEMU process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1568/">CVE-2016-1568</cve>
	<bugzilla href="https://bugzilla.suse.com/961332">SUSE bug 961332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961333">SUSE bug 961333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1570</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1570" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1570" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1570" ref_url="https://www.suse.com/security/cve/CVE-2016-1570" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1570/">CVE-2016-1570</cve>
	<bugzilla href="https://bugzilla.suse.com/960861">SUSE bug 960861</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1571</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1571" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1571" ref_url="https://www.suse.com/security/cve/CVE-2016-1571" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1571/">CVE-2016-1571</cve>
	<bugzilla href="https://bugzilla.suse.com/960861">SUSE bug 960861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960862">SUSE bug 960862</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1577</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1577" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1577" ref_url="https://www.suse.com/security/cve/CVE-2016-1577" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1577/">CVE-2016-1577</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968373">SUSE bug 968373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1601</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1601" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1601" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1601" ref_url="https://www.suse.com/security/cve/CVE-2016-1601" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00007.html" source="SUSE-SU"/>
    <description>
    yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1601/">CVE-2016-1601</cve>
	<bugzilla href="https://bugzilla.suse.com/973639">SUSE bug 973639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/974220">SUSE bug 974220</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629061" comment="yast2-users-4.3.10-1.41 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153590" comment="yast2-users is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161612" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1612</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1612" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1612" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1612" ref_url="https://www.suse.com/security/cve/CVE-2016-1612" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0271-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html" source="SUSE-SU"/>
    <description>
    The LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0.2564.82, does not ensure receiver compatibility before performing a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-1612/">CVE-2016-1612</cve>
	<bugzilla href="https://bugzilla.suse.com/963184">SUSE bug 963184</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1613</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1613" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1613" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1613" ref_url="https://www.suse.com/security/cve/CVE-2016-1613" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0271-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in the formfiller implementation in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to improper tracking of the destruction of (1) IPWL_FocusHandler and (2) IPWL_Provider objects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-1613/">CVE-2016-1613</cve>
	<bugzilla href="https://bugzilla.suse.com/963185">SUSE bug 963185</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161614" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1614</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1614" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1614" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1614" ref_url="https://www.suse.com/security/cve/CVE-2016-1614" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0271-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html" source="SUSE-SU"/>
    <description>
    The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1614/">CVE-2016-1614</cve>
	<bugzilla href="https://bugzilla.suse.com/963186">SUSE bug 963186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1615</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1615" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1615" ref_url="https://www.suse.com/security/cve/CVE-2016-1615" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0271-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html" source="SUSE-SU"/>
    <description>
    The Omnibox implementation in Google Chrome before 48.0.2564.82 allows remote attackers to spoof a document's origin via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-1615/">CVE-2016-1615</cve>
	<bugzilla href="https://bugzilla.suse.com/963187">SUSE bug 963187</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1616</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1616" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1616" ref_url="https://www.suse.com/security/cve/CVE-2016-1616" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0271-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html" source="SUSE-SU"/>
    <description>
    The CustomButton::AcceleratorPressed function in ui/views/controls/button/custom_button.cc in Google Chrome before 48.0.2564.82 allows remote attackers to spoof URLs via vectors involving an unfocused custom button.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1616/">CVE-2016-1616</cve>
	<bugzilla href="https://bugzilla.suse.com/963188">SUSE bug 963188</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161617" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1617</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1617" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1617" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1617" ref_url="https://www.suse.com/security/cve/CVE-2016-1617" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0271-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html" source="SUSE-SU"/>
    <description>
    The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easier for remote attackers to determine whether a specific HSTS web site has been visited by reading a CSP report.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1617/">CVE-2016-1617</cve>
	<bugzilla href="https://bugzilla.suse.com/963189">SUSE bug 963189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1618</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1618" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1618" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1618" ref_url="https://www.suse.com/security/cve/CVE-2016-1618" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0271-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html" source="SUSE-SU"/>
    <description>
    Blink, as used in Google Chrome before 48.0.2564.82, does not ensure that a proper cryptographicallyRandomValues random number generator is used, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1618/">CVE-2016-1618</cve>
	<bugzilla href="https://bugzilla.suse.com/963190">SUSE bug 963190</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1619</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1619" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1619" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1619" ref_url="https://www.suse.com/security/cve/CVE-2016-1619" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0271-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the (1) sycc422_to_rgb and (2) sycc444_to_rgb functions in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-1619/">CVE-2016-1619</cve>
	<bugzilla href="https://bugzilla.suse.com/963191">SUSE bug 963191</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1620</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1620" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1620" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1620" ref_url="https://www.suse.com/security/cve/CVE-2016-1620" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0271-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 48.0.2564.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1620/">CVE-2016-1620</cve>
	<bugzilla href="https://bugzilla.suse.com/963192">SUSE bug 963192</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1621</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1621" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1621" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1621" ref_url="https://www.suse.com/security/cve/CVE-2016-1621" source="SUSE CVE"/>
    <description>
    libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to libwebm/mkvparser.cpp and other files, aka internal bug 23452792.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1621/">CVE-2016-1621</cve>
	<bugzilla href="https://bugzilla.suse.com/972021">SUSE bug 972021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482448" comment="libvpx4-1.6.1-6.6.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177224" comment="libvpx4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1622</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1622" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1622" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1622" ref_url="https://www.suse.com/security/cve/CVE-2016-1622" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0518-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html" source="SUSE-SU"/>
    <description>
    The Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object.defineProperty method to override intended extension behavior, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1622/">CVE-2016-1622</cve>
	<bugzilla href="https://bugzilla.suse.com/965999">SUSE bug 965999</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1623</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1623" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1623" ref_url="https://www.suse.com/security/cve/CVE-2016-1623" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0518-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html" source="SUSE-SU"/>
    <description>
    The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to FrameLoader.cpp, HTMLFrameOwnerElement.h, LocalFrame.cpp, and WebLocalFrameImpl.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1623/">CVE-2016-1623</cve>
	<bugzilla href="https://bugzilla.suse.com/965999">SUSE bug 965999</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1624</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1624" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1624" ref_url="https://www.suse.com/security/cve/CVE-2016-1624" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0518-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted data with brotli compression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1624/">CVE-2016-1624</cve>
	<bugzilla href="https://bugzilla.suse.com/965999">SUSE bug 965999</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1625</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1625" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1625" ref_url="https://www.suse.com/security/cve/CVE-2016-1625" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0518-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html" source="SUSE-SU"/>
    <description>
    The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instant_service.cc and search_tab_helper.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1625/">CVE-2016-1625</cve>
	<bugzilla href="https://bugzilla.suse.com/965999">SUSE bug 965999</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161626" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1626</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1626" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1626" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1626" ref_url="https://www.suse.com/security/cve/CVE-2016-1626" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0518-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html" source="SUSE-SU"/>
    <description>
    The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1626/">CVE-2016-1626</cve>
	<bugzilla href="https://bugzilla.suse.com/965999">SUSE bug 965999</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1627</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1627" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1627" ref_url="https://www.suse.com/security/cve/CVE-2016-1627" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0518-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html" source="SUSE-SU"/>
    <description>
    The Developer Tools (aka DevTools) subsystem in Google Chrome before 48.0.2564.109 does not validate URL schemes and ensure that the remoteBase parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL, related to browser/devtools/devtools_ui_bindings.cc and WebKit/Source/devtools/front_end/Runtime.js.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1627/">CVE-2016-1627</cve>
	<bugzilla href="https://bugzilla.suse.com/965999">SUSE bug 965999</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1629</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1629" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1629" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1629" ref_url="https://www.suse.com/security/cve/CVE-2016-1629" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0520-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1629/">CVE-2016-1629</cve>
	<bugzilla href="https://bugzilla.suse.com/967376">SUSE bug 967376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1630</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1630" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1630" ref_url="https://www.suse.com/security/cve/CVE-2016-1630" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0684-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0729-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html" source="SUSE-SU"/>
    <description>
    The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 49.0.2623.75, mishandles widget updates, which makes it easier for remote attackers to bypass the Same Origin Policy via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1630/">CVE-2016-1630</cve>
	<bugzilla href="https://bugzilla.suse.com/969333">SUSE bug 969333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161631" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1631</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1631" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1631" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1631" ref_url="https://www.suse.com/security/cve/CVE-2016-1631" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0684-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0729-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html" source="SUSE-SU"/>
    <description>
    The PPB_Flash_MessageLoop_Impl::InternalRun function in content/renderer/pepper/ppb_flash_message_loop_impl.cc in the Pepper plugin in Google Chrome before 49.0.2623.75 mishandles nested message loops, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1631/">CVE-2016-1631</cve>
	<bugzilla href="https://bugzilla.suse.com/969333">SUSE bug 969333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1632</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1632" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1632" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1632" ref_url="https://www.suse.com/security/cve/CVE-2016-1632" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0684-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0729-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html" source="SUSE-SU"/>
    <description>
    The Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own properties, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code that triggers an incorrect cast, related to extensions/renderer/v8_helpers.h and gin/converter.h.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1632/">CVE-2016-1632</cve>
	<bugzilla href="https://bugzilla.suse.com/969333">SUSE bug 969333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1633</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1633" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1633" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1633" ref_url="https://www.suse.com/security/cve/CVE-2016-1633" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0684-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0729-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1633/">CVE-2016-1633</cve>
	<bugzilla href="https://bugzilla.suse.com/969333">SUSE bug 969333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161634" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1634</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1634" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1634" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1634" ref_url="https://www.suse.com/security/cve/CVE-2016-1634" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0684-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0729-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source/core/css/resolver/StyleResolver.cpp in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site that triggers Cascading Style Sheets (CSS) style invalidation during a certain subtree-removal action.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1634/">CVE-2016-1634</cve>
	<bugzilla href="https://bugzilla.suse.com/969333">SUSE bug 969333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1635</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1635" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1635" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1635" ref_url="https://www.suse.com/security/cve/CVE-2016-1635" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0684-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0729-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html" source="SUSE-SU"/>
    <description>
    extensions/renderer/render_frame_observer_natives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re-entrancy issues during OnDocumentElementCreated handling, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1635/">CVE-2016-1635</cve>
	<bugzilla href="https://bugzilla.suse.com/969333">SUSE bug 969333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1636</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1636" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1636" ref_url="https://www.suse.com/security/cve/CVE-2016-1636" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0684-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0729-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html" source="SUSE-SU"/>
    <description>
    The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.2623.75 relies on memory-cache information about integrity-check occurrences instead of integrity-check successes, which allows remote attackers to bypass the Subresource Integrity (aka SRI) protection mechanism by triggering two loads of the same resource.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1636/">CVE-2016-1636</cve>
	<bugzilla href="https://bugzilla.suse.com/969333">SUSE bug 969333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1637</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1637" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1637" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1637" ref_url="https://www.suse.com/security/cve/CVE-2016-1637" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0684-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0729-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html" source="SUSE-SU"/>
    <description>
    The SkATan2_255 function in effects/gradients/SkSweepGradient.cpp in Skia, as used in Google Chrome before 49.0.2623.75, mishandles arctangent calculations, which allows remote attackers to obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1637/">CVE-2016-1637</cve>
	<bugzilla href="https://bugzilla.suse.com/969333">SUSE bug 969333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1638</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1638" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1638" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1638" ref_url="https://www.suse.com/security/cve/CVE-2016-1638" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0684-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0729-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html" source="SUSE-SU"/>
    <description>
    extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-1638/">CVE-2016-1638</cve>
	<bugzilla href="https://bugzilla.suse.com/969333">SUSE bug 969333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1639</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1639" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1639" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1639" ref_url="https://www.suse.com/security/cve/CVE-2016-1639" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0684-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0729-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in browser/extensions/api/webrtc_audio_private/webrtc_audio_private_api.cc in the WebRTC Audio Private API implementation in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect reliance on the resource context pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1639/">CVE-2016-1639</cve>
	<bugzilla href="https://bugzilla.suse.com/969333">SUSE bug 969333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1640</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1640" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1640" ref_url="https://www.suse.com/security/cve/CVE-2016-1640" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0684-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0729-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html" source="SUSE-SU"/>
    <description>
    The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the user's next navigation target via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1640/">CVE-2016-1640</cve>
	<bugzilla href="https://bugzilla.suse.com/969333">SUSE bug 969333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1641</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1641" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1641" ref_url="https://www.suse.com/security/cve/CVE-2016-1641" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0684-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0729-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an image download after a certain data structure is deleted, as demonstrated by a favicon.ico download.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1641/">CVE-2016-1641</cve>
	<bugzilla href="https://bugzilla.suse.com/969333">SUSE bug 969333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1642</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1642" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1642" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1642" ref_url="https://www.suse.com/security/cve/CVE-2016-1642" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0684-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0729-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1642/">CVE-2016-1642</cve>
	<bugzilla href="https://bugzilla.suse.com/969333">SUSE bug 969333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1643</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1643" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1643" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1643" ref_url="https://www.suse.com/security/cve/CVE-2016-1643" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0817-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0818-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0828-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00073.html" source="SUSE-SU"/>
    <description>
    The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1643/">CVE-2016-1643</cve>
	<bugzilla href="https://bugzilla.suse.com/970514">SUSE bug 970514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161644" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1644</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1644" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1644" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1644" ref_url="https://www.suse.com/security/cve/CVE-2016-1644" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0817-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0818-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0828-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00073.html" source="SUSE-SU"/>
    <description>
    WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly restrict relayout scheduling, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1644/">CVE-2016-1644</cve>
	<bugzilla href="https://bugzilla.suse.com/970509">SUSE bug 970509</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1645</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1645" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1645" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1645" ref_url="https://www.suse.com/security/cve/CVE-2016-1645" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0817-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0818-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0828-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00073.html" source="SUSE-SU"/>
    <description>
    Multiple integer signedness errors in the opj_j2k_update_image_data function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service (incorrect cast and out-of-bounds write) or possibly have unspecified other impact via crafted JPEG 2000 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1645/">CVE-2016-1645</cve>
	<bugzilla href="https://bugzilla.suse.com/970511">SUSE bug 970511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1646</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1646" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1646" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1646" ref_url="https://www.suse.com/security/cve/CVE-2016-1646" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0930-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1059-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00039.html" source="SUSE-SU"/>
    <description>
    The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1646/">CVE-2016-1646</cve>
	<bugzilla href="https://bugzilla.suse.com/972834">SUSE bug 972834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973166">SUSE bug 973166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161647" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1647</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1647" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1647" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1647" ref_url="https://www.suse.com/security/cve/CVE-2016-1647" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0930-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1059-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00039.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/renderer_host/render_widget_host_impl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1647/">CVE-2016-1647</cve>
	<bugzilla href="https://bugzilla.suse.com/972834">SUSE bug 972834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973166">SUSE bug 973166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1648</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1648" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1648" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1648" ref_url="https://www.suse.com/security/cve/CVE-2016-1648" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0930-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1059-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00039.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1648/">CVE-2016-1648</cve>
	<bugzilla href="https://bugzilla.suse.com/972834">SUSE bug 972834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973166">SUSE bug 973166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161649" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1649</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1649" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1649" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1649" ref_url="https://www.suse.com/security/cve/CVE-2016-1649" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0930-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1059-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00039.html" source="SUSE-SU"/>
    <description>
    The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted shader stages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1649/">CVE-2016-1649</cve>
	<bugzilla href="https://bugzilla.suse.com/972834">SUSE bug 972834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973166">SUSE bug 973166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1650</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1650" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1650" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1650" ref_url="https://www.suse.com/security/cve/CVE-2016-1650" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0930-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1059-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00039.html" source="SUSE-SU"/>
    <description>
    The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc in Google Chrome before 49.0.2623.108 allows attackers to cause a denial of service or possibly have unspecified other impact by triggering an error in creating an MHTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1650/">CVE-2016-1650</cve>
	<bugzilla href="https://bugzilla.suse.com/972834">SUSE bug 972834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973166">SUSE bug 973166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1651</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1651" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1651" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1651" ref_url="https://www.suse.com/security/cve/CVE-2016-1651" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1136-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html" source="SUSE-SU"/>
    <description>
    fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement the sycc420_to_rgb and sycc422_to_rgb functions, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via crafted JPEG 2000 data in a PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1651/">CVE-2016-1651</cve>
	<bugzilla href="https://bugzilla.suse.com/975572">SUSE bug 975572</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1652</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1652" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1652" ref_url="https://www.suse.com/security/cve/CVE-2016-1652" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1136-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the Extensions subsystem in Google Chrome before 50.0.2661.75 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS (UXSS)."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1652/">CVE-2016-1652</cve>
	<bugzilla href="https://bugzilla.suse.com/975572">SUSE bug 975572</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161653" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1653</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1653" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1653" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1653" ref_url="https://www.suse.com/security/cve/CVE-2016-1653" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1136-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html" source="SUSE-SU"/>
    <description>
    The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds write operation, related to compiler/pipeline.cc and compiler/simplified-lowering.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1653/">CVE-2016-1653</cve>
	<bugzilla href="https://bugzilla.suse.com/975572">SUSE bug 975572</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1654</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1654" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1654" ref_url="https://www.suse.com/security/cve/CVE-2016-1654" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1136-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html" source="SUSE-SU"/>
    <description>
    The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service (invalid read operation) via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1654/">CVE-2016-1654</cve>
	<bugzilla href="https://bugzilla.suse.com/975572">SUSE bug 975572</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1655</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1655" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1655" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1655" ref_url="https://www.suse.com/security/cve/CVE-2016-1655" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1136-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html" source="SUSE-SU"/>
    <description>
    Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1655/">CVE-2016-1655</cve>
	<bugzilla href="https://bugzilla.suse.com/975572">SUSE bug 975572</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161656" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1656</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1656" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1656" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1656" ref_url="https://www.suse.com/security/cve/CVE-2016-1656" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1136-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html" source="SUSE-SU"/>
    <description>
    The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname restrictions via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-1656/">CVE-2016-1656</cve>
	<bugzilla href="https://bugzilla.suse.com/975572">SUSE bug 975572</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161657" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1657</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1657" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1657" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1657" ref_url="https://www.suse.com/security/cve/CVE-2016-1657" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1136-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html" source="SUSE-SU"/>
    <description>
    The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1657/">CVE-2016-1657</cve>
	<bugzilla href="https://bugzilla.suse.com/975572">SUSE bug 975572</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1658</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1658" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1658" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1658" ref_url="https://www.suse.com/security/cve/CVE-2016-1658" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1136-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html" source="SUSE-SU"/>
    <description>
    The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1658/">CVE-2016-1658</cve>
	<bugzilla href="https://bugzilla.suse.com/975572">SUSE bug 975572</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1659</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1659" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1659" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1659" ref_url="https://www.suse.com/security/cve/CVE-2016-1659" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1136-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1659/">CVE-2016-1659</cve>
	<bugzilla href="https://bugzilla.suse.com/975572">SUSE bug 975572</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161660" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1660</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1660" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1660" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1660" ref_url="https://www.suse.com/security/cve/CVE-2016-1660" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::double_conversion::Vector classes, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1660/">CVE-2016-1660</cve>
	<bugzilla href="https://bugzilla.suse.com/977830">SUSE bug 977830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161661" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1661</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1661" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1661" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1661" ref_url="https://www.suse.com/security/cve/CVE-2016-1661" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site, related to BindingSecurity.cpp and DOMWindow.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1661/">CVE-2016-1661</cve>
	<bugzilla href="https://bugzilla.suse.com/977830">SUSE bug 977830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161662" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1662</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1662" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1662" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1662" ref_url="https://www.suse.com/security/cve/CVE-2016-1662" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html" source="SUSE-SU"/>
    <description>
    extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1662/">CVE-2016-1662</cve>
	<bugzilla href="https://bugzilla.suse.com/977830">SUSE bug 977830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1663</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1663" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1663" ref_url="https://www.suse.com/security/cve/CVE-2016-1663" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html" source="SUSE-SU"/>
    <description>
    The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.94, mishandles certain array-buffer data structures, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1663/">CVE-2016-1663</cve>
	<bugzilla href="https://bugzilla.suse.com/977830">SUSE bug 977830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1664</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1664" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1664" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1664" ref_url="https://www.suse.com/security/cve/CVE-2016-1664" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html" source="SUSE-SU"/>
    <description>
    The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations, which allows remote attackers to spoof the address bar via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1664/">CVE-2016-1664</cve>
	<bugzilla href="https://bugzilla.suse.com/977830">SUSE bug 977830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1665</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1665" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1665" ref_url="https://www.suse.com/security/cve/CVE-2016-1665" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html" source="SUSE-SU"/>
    <description>
    The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1665/">CVE-2016-1665</cve>
	<bugzilla href="https://bugzilla.suse.com/977830">SUSE bug 977830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161666" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1666</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1666" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1666" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1666" ref_url="https://www.suse.com/security/cve/CVE-2016-1666" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1666/">CVE-2016-1666</cve>
	<bugzilla href="https://bugzilla.suse.com/977830">SUSE bug 977830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1667</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1667" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1667" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1667" ref_url="https://www.suse.com/security/cve/CVE-2016-1667" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html" source="SUSE-SU"/>
    <description>
    The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1667/">CVE-2016-1667</cve>
	<bugzilla href="https://bugzilla.suse.com/979859">SUSE bug 979859</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1668</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1668" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1668" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1668" ref_url="https://www.suse.com/security/cve/CVE-2016-1668" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html" source="SUSE-SU"/>
    <description>
    The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1668/">CVE-2016-1668</cve>
	<bugzilla href="https://bugzilla.suse.com/979859">SUSE bug 979859</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1669</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1669" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1669" ref_url="https://www.suse.com/security/cve/CVE-2016-1669" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1834-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html" source="SUSE-SU"/>
    <description>
    The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1669/">CVE-2016-1669</cve>
	<bugzilla href="https://bugzilla.suse.com/979859">SUSE bug 979859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987919">SUSE bug 987919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1670</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1670" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1670" ref_url="https://www.suse.com/security/cve/CVE-2016-1670" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-1670/">CVE-2016-1670</cve>
	<bugzilla href="https://bugzilla.suse.com/979859">SUSE bug 979859</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1672</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1672" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1672" ref_url="https://www.suse.com/security/cve/CVE-2016-1672" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the extension bindings in Google Chrome before 51.0.2704.63 mishandles properties, which allows remote attackers to conduct bindings-interception attacks and bypass the Same Origin Policy via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1672/">CVE-2016-1672</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1673</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1673" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1673" ref_url="https://www.suse.com/security/cve/CVE-2016-1673" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1673/">CVE-2016-1673</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1674</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1674" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1674" ref_url="https://www.suse.com/security/cve/CVE-2016-1674" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1674/">CVE-2016-1674</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1675</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1675" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1675" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1675" ref_url="https://www.suse.com/security/cve/CVE-2016-1675" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during destruction, related to FrameLoader.cpp and LocalFrame.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1675/">CVE-2016-1675</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1676</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1676" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1676" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1676" ref_url="https://www.suse.com/security/cve/CVE-2016-1676" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1676/">CVE-2016-1676</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161677" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1677</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1677" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1677" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1677" ref_url="https://www.suse.com/security/cve/CVE-2016-1677" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging "type confusion."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1677/">CVE-2016-1677</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1678</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1678" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1678" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1678" ref_url="https://www.suse.com/security/cve/CVE-2016-1678" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1678/">CVE-2016-1678</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161679" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1679</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1679" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1679" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1679" ref_url="https://www.suse.com/security/cve/CVE-2016-1679" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google Chrome before 51.0.2704.63 does not properly restrict use of getters and setters, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1679/">CVE-2016-1679</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161680" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1680</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1680" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1680" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1680" ref_url="https://www.suse.com/security/cve/CVE-2016-1680" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1680/">CVE-2016-1680</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161681" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1681</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1681" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1681" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1681" ref_url="https://www.suse.com/security/cve/CVE-2016-1681" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1681/">CVE-2016-1681</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161682" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1682</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1682" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1682" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1682" ref_url="https://www.suse.com/security/cve/CVE-2016-1682" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a ServiceWorker registration.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1682/">CVE-2016-1682</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1683</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1683" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1683" ref_url="https://www.suse.com/security/cve/CVE-2016-1683" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service (out-of-bounds heap memory access) or possibly have unspecified other impact via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1683/">CVE-2016-1683</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161684" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1684</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1684" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1684" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1684" ref_url="https://www.suse.com/security/cve/CVE-2016-1684" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1684/">CVE-2016-1684</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1685</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1685" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1685" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1685" ref_url="https://www.suse.com/security/cve/CVE-2016-1685" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    core/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1685/">CVE-2016-1685</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1686</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1686" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1686" ref_url="https://www.suse.com/security/cve/CVE-2016-1686" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1686/">CVE-2016-1686</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1687</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1687" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1687" ref_url="https://www.suse.com/security/cve/CVE-2016-1687" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict public exposure of classes, which allows remote attackers to obtain sensitive information via vectors related to extensions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1687/">CVE-2016-1687</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1688</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1688" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1688" ref_url="https://www.suse.com/security/cve/CVE-2016-1688" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1688/">CVE-2016-1688</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1689</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1689" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1689" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1689" ref_url="https://www.suse.com/security/cve/CVE-2016-1689" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome before 51.0.2704.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1689/">CVE-2016-1689</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1690</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1690" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1690" ref_url="https://www.suse.com/security/cve/CVE-2016-1690" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site, a different vulnerability than CVE-2016-1701.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1690/">CVE-2016-1690</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1691</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1691" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1691" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1691" ref_url="https://www.suse.com/security/cve/CVE-2016-1691" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted curves, related to SkOpCoincidence.cpp and SkPathOpsCommon.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1691/">CVE-2016-1691</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1692</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1692" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1692" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1692" ref_url="https://www.suse.com/security/cve/CVE-2016-1692" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-origin loading of CSS stylesheets by a ServiceWorker even when the stylesheet download has an incorrect MIME type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1692/">CVE-2016-1692</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1693</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1693" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1693" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1693" ref_url="https://www.suse.com/security/cve/CVE-2016-1693" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    browser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the Software Removal Tool, which allows remote attackers to spoof the chrome_cleanup_tool.exe (aka CCT) file via a man-in-the-middle attack on an HTTP session.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-1693/">CVE-2016-1693</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1694</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1694" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1694" ref_url="https://www.suse.com/security/cve/CVE-2016-1694" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-1694/">CVE-2016-1694</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1695</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1695" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1695" ref_url="https://www.suse.com/security/cve/CVE-2016-1695" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1695/">CVE-2016-1695</cve>
	<bugzilla href="https://bugzilla.suse.com/981886">SUSE bug 981886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1696</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1696" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1696" ref_url="https://www.suse.com/security/cve/CVE-2016-1696" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1696/">CVE-2016-1696</cve>
	<bugzilla href="https://bugzilla.suse.com/982719">SUSE bug 982719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1697</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1697" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1697" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1697" ref_url="https://www.suse.com/security/cve/CVE-2016-1697" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1697/">CVE-2016-1697</cve>
	<bugzilla href="https://bugzilla.suse.com/982719">SUSE bug 982719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1698</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1698" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1698" ref_url="https://www.suse.com/security/cve/CVE-2016-1698" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1698/">CVE-2016-1698</cve>
	<bugzilla href="https://bugzilla.suse.com/982719">SUSE bug 982719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1699</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1699" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1699" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1699" ref_url="https://www.suse.com/security/cve/CVE-2016-1699" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79, does not ensure that the remoteFrontendUrl parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-1699/">CVE-2016-1699</cve>
	<bugzilla href="https://bugzilla.suse.com/982719">SUSE bug 982719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161700" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1700</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1700" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1700" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1700" ref_url="https://www.suse.com/security/cve/CVE-2016-1700" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to extensions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1700/">CVE-2016-1700</cve>
	<bugzilla href="https://bugzilla.suse.com/982719">SUSE bug 982719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1701</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1701" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1701" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1701" ref_url="https://www.suse.com/security/cve/CVE-2016-1701" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site, a different vulnerability than CVE-2016-1690.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1701/">CVE-2016-1701</cve>
	<bugzilla href="https://bugzilla.suse.com/982719">SUSE bug 982719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1702</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1702" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1702" ref_url="https://www.suse.com/security/cve/CVE-2016-1702" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted serialized data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1702/">CVE-2016-1702</cve>
	<bugzilla href="https://bugzilla.suse.com/982719">SUSE bug 982719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161703" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1703</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1703" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1703" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1703" ref_url="https://www.suse.com/security/cve/CVE-2016-1703" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1703/">CVE-2016-1703</cve>
	<bugzilla href="https://bugzilla.suse.com/982719">SUSE bug 982719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1704</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1704" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1704" ref_url="https://www.suse.com/security/cve/CVE-2016-1704" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1623-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1704/">CVE-2016-1704</cve>
	<bugzilla href="https://bugzilla.suse.com/985397">SUSE bug 985397</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1705</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1705" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1705" ref_url="https://www.suse.com/security/cve/CVE-2016-1705" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1705/">CVE-2016-1705</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1706</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1706" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1706" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1706" ref_url="https://www.suse.com/security/cve/CVE-2016-1706" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote attackers to bypass a sandbox protection mechanism via an unexpected message type, related to broker_process_dispatcher.cc, ppapi_plugin_process_host.cc, ppapi_thread.cc, and render_frame_message_filter.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1706/">CVE-2016-1706</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1707</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1707" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1707" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1707" ref_url="https://www.suse.com/security/cve/CVE-2016-1707" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    ios/web/web_state/ui/crw_web_controller.mm in Google Chrome before 52.0.2743.82 on iOS does not ensure that an invalid URL is replaced with the about:blank URL, which allows remote attackers to spoof the URL display via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-1707/">CVE-2016-1707</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1708</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1708" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1708" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1708" ref_url="https://www.suse.com/security/cve/CVE-2016-1708" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.82 does not properly consider object lifetimes during progress observation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1708/">CVE-2016-1708</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1709</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1709" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1709" ref_url="https://www.suse.com/security/cve/CVE-2016-1709" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1709/">CVE-2016-1709</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1710</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1710" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1710" ref_url="https://www.suse.com/security/cve/CVE-2016-1710" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1710/">CVE-2016-1710</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1711</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1711" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1711" ref_url="https://www.suse.com/security/cve/CVE-2016-1711" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable frame navigation during a detach operation on a DocumentLoader object, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1711/">CVE-2016-1711</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161714" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1714</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1714" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1714" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1714" ref_url="https://www.suse.com/security/cve/CVE-2016-1714" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read/write flaw was discovered in the way QEMU's Firmware Configuration device emulation processed certain firmware configurations. A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance or, potentially, execute arbitrary code on the host with privileges of the QEMU process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1714/">CVE-2016-1714</cve>
	<bugzilla href="https://bugzilla.suse.com/961691">SUSE bug 961691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961692">SUSE bug 961692</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1762</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1762" ref_url="https://www.suse.com/security/cve/CVE-2016-1762" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1762/">CVE-2016-1762</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981040">SUSE bug 981040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1833</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1833" ref_url="https://www.suse.com/security/cve/CVE-2016-1833" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1833/">CVE-2016-1833</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981108">SUSE bug 981108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1834</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1834" ref_url="https://www.suse.com/security/cve/CVE-2016-1834" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1834/">CVE-2016-1834</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981041">SUSE bug 981041</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1835</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1835" ref_url="https://www.suse.com/security/cve/CVE-2016-1835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to cause a denial of service via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1835/">CVE-2016-1835</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981109">SUSE bug 981109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1836</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1836" ref_url="https://www.suse.com/security/cve/CVE-2016-1836" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1836/">CVE-2016-1836</cve>
	<bugzilla href="https://bugzilla.suse.com/1174862">SUSE bug 1174862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981110">SUSE bug 981110</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1837</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1837" ref_url="https://www.suse.com/security/cve/CVE-2016-1837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1837/">CVE-2016-1837</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981111">SUSE bug 981111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1838</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1838" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1838" ref_url="https://www.suse.com/security/cve/CVE-2016-1838" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1838/">CVE-2016-1838</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981112">SUSE bug 981112</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1839</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1839" ref_url="https://www.suse.com/security/cve/CVE-2016-1839" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1454-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00022.html" source="SUSE-SU"/>
    <description>
    The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1839/">CVE-2016-1839</cve>
	<bugzilla href="https://bugzilla.suse.com/1039069">SUSE bug 1039069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039661">SUSE bug 1039661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069433">SUSE bug 1069433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069690">SUSE bug 1069690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963963">SUSE bug 963963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981114">SUSE bug 981114</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1840</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1840" ref_url="https://www.suse.com/security/cve/CVE-2016-1840" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1840/">CVE-2016-1840</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981115">SUSE bug 981115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161856" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1856</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1856" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1856" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1856" ref_url="https://www.suse.com/security/cve/CVE-2016-1856" source="SUSE CVE"/>
    <description>
    WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1857.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1856/">CVE-2016-1856</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161857" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1857</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1857" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1857" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1857" ref_url="https://www.suse.com/security/cve/CVE-2016-1857" source="SUSE CVE"/>
    <description>
    WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1856.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1857/">CVE-2016-1857</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1867</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1867" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1867" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1867" ref_url="https://www.suse.com/security/cve/CVE-2016-1867" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0211-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0217-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1867/">CVE-2016-1867</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961886">SUSE bug 961886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161897" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1897</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1897" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1897" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1897" ref_url="https://www.suse.com/security/cve/CVE-2016-1897" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html" source="SUSE-SU"/>
    <description>
    FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1897/">CVE-2016-1897</cve>
	<bugzilla href="https://bugzilla.suse.com/961937">SUSE bug 961937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1898</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1898" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1898" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1898" ref_url="https://www.suse.com/security/cve/CVE-2016-1898" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html" source="SUSE-SU"/>
    <description>
    FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains an arbitrary line of a local file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1898/">CVE-2016-1898</cve>
	<bugzilla href="https://bugzilla.suse.com/961937">SUSE bug 961937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1922</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1922" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1922" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1922" ref_url="https://www.suse.com/security/cve/CVE-2016-1922" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'current_cpu' remains null, which leads to the null pointer dereference. A user or process could use this flaw to crash the QEMU instance, resulting in DoS issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1922/">CVE-2016-1922</cve>
	<bugzilla href="https://bugzilla.suse.com/962320">SUSE bug 962320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962321">SUSE bug 962321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161930" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1930</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1930" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1930" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1930" ref_url="https://www.suse.com/security/cve/CVE-2016-1930" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0338-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001894.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0488-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00105.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1930/">CVE-2016-1930</cve>
	<bugzilla href="https://bugzilla.suse.com/963520">SUSE bug 963520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963632">SUSE bug 963632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161931" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1931</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1931" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1931" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1931" ref_url="https://www.suse.com/security/cve/CVE-2016-1931" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to uninitialized memory encountered during brotli data compression, and other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="10/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1931/">CVE-2016-1931</cve>
	<bugzilla href="https://bugzilla.suse.com/963633">SUSE bug 963633</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161933" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1933</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1933" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1933" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1933" ref_url="https://www.suse.com/security/cve/CVE-2016-1933" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted GIF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1933/">CVE-2016-1933</cve>
	<bugzilla href="https://bugzilla.suse.com/963634">SUSE bug 963634</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1935</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1935" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1935" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1935" ref_url="https://www.suse.com/security/cve/CVE-2016-1935" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0338-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001894.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0488-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00105.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows remote attackers to execute arbitrary code via crafted WebGL content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1935/">CVE-2016-1935</cve>
	<bugzilla href="https://bugzilla.suse.com/963520">SUSE bug 963520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963635">SUSE bug 963635</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161937" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1937</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1937" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1937" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1937" ref_url="https://www.suse.com/security/cve/CVE-2016-1937" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct clickjacking attacks via a crafted web site that triggers a single-click action in a situation where a double-click action was intended.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1937/">CVE-2016-1937</cve>
	<bugzilla href="https://bugzilla.suse.com/963641">SUSE bug 963641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977736">SUSE bug 977736</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161938" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1938</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1938" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1938" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1938" ref_url="https://www.suse.com/security/cve/CVE-2016-1938" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0338-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001894.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging use of the (1) mp_div or (2) mp_exptmod function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1938/">CVE-2016-1938</cve>
	<bugzilla href="https://bugzilla.suse.com/963731">SUSE bug 963731</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1939</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1939" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1939" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1939" ref_url="https://www.suse.com/security/cve/CVE-2016-1939" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 44.0 stores cookies with names containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7208.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1939/">CVE-2016-1939</cve>
	<bugzilla href="https://bugzilla.suse.com/963637">SUSE bug 963637</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1942</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1942" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1942" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1942" ref_url="https://www.suse.com/security/cve/CVE-2016-1942" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring in the address bar by leveraging a user's paste of a (1) wyciwyg: URI or (2) resource: URI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-1942/">CVE-2016-1942</cve>
	<bugzilla href="https://bugzilla.suse.com/963643">SUSE bug 963643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161943" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1943</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1943" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1943" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1943" ref_url="https://www.suse.com/security/cve/CVE-2016-1943" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the scrollTo method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1943/">CVE-2016-1943</cve>
	<bugzilla href="https://bugzilla.suse.com/963643">SUSE bug 963643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1944</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1944" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1944" ref_url="https://www.suse.com/security/cve/CVE-2016-1944" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0, might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1944/">CVE-2016-1944</cve>
	<bugzilla href="https://bugzilla.suse.com/963644">SUSE bug 963644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1945</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1945" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1945" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1945" ref_url="https://www.suse.com/security/cve/CVE-2016-1945" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The nsZipArchive function in Mozilla Firefox before 44.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect use of a pointer during processing of a ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1945/">CVE-2016-1945</cve>
	<bugzilla href="https://bugzilla.suse.com/963644">SUSE bug 963644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161946" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1946</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1946" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1946" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1946" ref_url="https://www.suse.com/security/cve/CVE-2016-1946" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operations, which might allow remote attackers to cause a denial of service (integer overflow and buffer overflow) or possibly have unspecified other impact via crafted metadata.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1946/">CVE-2016-1946</cve>
	<bugzilla href="https://bugzilla.suse.com/963644">SUSE bug 963644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1947</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1947" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1947" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1947" ref_url="https://www.suse.com/security/cve/CVE-2016-1947" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which makes it easier for remote attackers to trigger an unintended download by leveraging the absence of reputation data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1947/">CVE-2016-1947</cve>
	<bugzilla href="https://bugzilla.suse.com/963645">SUSE bug 963645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161949" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1949</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1949" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1949" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1949" ref_url="https://www.suse.com/security/cve/CVE-2016-1949" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0489-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0553-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00142.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which allows remote attackers to bypass the Same Origin Policy via a crafted web site that triggers spoofed responses to requests that use NPAPI, as demonstrated by a request for a crossdomain.xml file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1949/">CVE-2016-1949</cve>
	<bugzilla href="https://bugzilla.suse.com/966438">SUSE bug 966438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967087">SUSE bug 967087</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161950" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1950</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1950" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1950" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1950" ref_url="https://www.suse.com/security/cve/CVE-2016-1950" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1950/">CVE-2016-1950</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161952" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1952</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1952" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1952" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1952" ref_url="https://www.suse.com/security/cve/CVE-2016-1952" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1952/">CVE-2016-1952</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161953" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1953</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1953" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1953" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1953" ref_url="https://www.suse.com/security/cve/CVE-2016-1953" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp, and unknown other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1953/">CVE-2016-1953</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1954</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1954" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1954" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1954" ref_url="https://www.suse.com/security/cve/CVE-2016-1954" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1954/">CVE-2016-1954</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1955</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1955" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1955" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1955" ref_url="https://www.suse.com/security/cve/CVE-2016-1955" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a Content Security Policy (CSP) violation report that contains path information associated with an IFRAME element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1955/">CVE-2016-1955</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1956</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1956" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1956" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1956" ref_url="https://www.suse.com/security/cve/CVE-2016-1956" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 45.0 on Linux, when an Intel video driver is used, allows remote attackers to cause a denial of service (memory consumption or stack memory corruption) by triggering use of a WebGL shader.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1956/">CVE-2016-1956</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1957</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1957" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1957" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1957" ref_url="https://www.suse.com/security/cve/CVE-2016-1957" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-1957/">CVE-2016-1957</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1958</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1958" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1958" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1958" ref_url="https://www.suse.com/security/cve/CVE-2016-1958" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
    <description>
    browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1958/">CVE-2016-1958</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1959</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1959" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1959" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1959" ref_url="https://www.suse.com/security/cve/CVE-2016-1959" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    The ServiceWorkerManager class in Mozilla Firefox before 45.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via unspecified use of the Clients API.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1959/">CVE-2016-1959</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1960</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1960" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1960" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1960" ref_url="https://www.suse.com/security/cve/CVE-2016-1960" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end tags, as demonstrated by incorrect SVG processing, aka ZDI-CAN-3545.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1960/">CVE-2016-1960</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1961</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1961" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1961" ref_url="https://www.suse.com/security/cve/CVE-2016-1961" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of a root element, aka ZDI-CAN-3574.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1961/">CVE-2016-1961</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1962</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1962" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1962" ref_url="https://www.suse.com/security/cve/CVE-2016-1962" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1962/">CVE-2016-1962</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161963" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1963</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1963" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1963" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1963" ref_url="https://www.suse.com/security/cve/CVE-2016-1963" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service (memory corruption) by changing a file during a FileReader API read operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1963/">CVE-2016-1963</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1964</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1964" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1964" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1964" ref_url="https://www.suse.com/security/cve/CVE-2016-1964" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging mishandling of XML transformations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1964/">CVE-2016-1964</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1965</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1965" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1965" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1965" ref_url="https://www.suse.com/security/cve/CVE-2016-1965" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1965/">CVE-2016-1965</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1966</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1966" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1966" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1966" ref_url="https://www.suse.com/security/cve/CVE-2016-1966" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference and memory corruption) via a crafted NPAPI plugin.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1966/">CVE-2016-1966</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161967" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1967</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1967" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1967" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1967" ref_url="https://www.suse.com/security/cve/CVE-2016-1967" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1967/">CVE-2016-1967</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161968" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1968</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1968" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1968" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1968" ref_url="https://www.suse.com/security/cve/CVE-2016-1968" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted data with brotli compression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1968/">CVE-2016-1968</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1970</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1970" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1970" ref_url="https://www.suse.com/security/cve/CVE-2016-1970" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1970/">CVE-2016-1970</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1971</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1971" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1971" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1971" ref_url="https://www.suse.com/security/cve/CVE-2016-1971" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    The I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows omits an unspecified status check, which might allow remote attackers to cause a denial of service (memory corruption) or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1971/">CVE-2016-1971</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1972</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1972" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1972" ref_url="https://www.suse.com/security/cve/CVE-2016-1972" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Race condition in libvpx in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1972/">CVE-2016-1972</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1973</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1973" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1973" ref_url="https://www.suse.com/security/cve/CVE-2016-1973" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Race condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox before 45.0 might allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1973/">CVE-2016-1973</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1974</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1974" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1974" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1974" ref_url="https://www.suse.com/security/cve/CVE-2016-1974" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via crafted Unicode data in an HTML, XML, or SVG document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1974/">CVE-2016-1974</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1975</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1975" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1975" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1975" ref_url="https://www.suse.com/security/cve/CVE-2016-1975" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-1975/">CVE-2016-1975</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1976</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1976" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1976" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1976" ref_url="https://www.suse.com/security/cve/CVE-2016-1976" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-1976/">CVE-2016-1976</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1977</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1977" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1977" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1977" ref_url="https://www.suse.com/security/cve/CVE-2016-1977" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1977/">CVE-2016-1977</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1979</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1979" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1979" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1979" ref_url="https://www.suse.com/security/cve/CVE-2016-1979" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted key data with DER encoding.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1979/">CVE-2016-1979</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161981" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1981</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1981" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1981" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1981" ref_url="https://www.suse.com/security/cve/CVE-2016-1981" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    An infinite loop flaw was found in the way QEMU's e1000 NIC emulation implementation processed data using transmit or receive descriptors under certain conditions. A privileged user inside a guest could use this flaw to crash the QEMU instance.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1981/">CVE-2016-1981</cve>
	<bugzilla href="https://bugzilla.suse.com/963782">SUSE bug 963782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963783">SUSE bug 963783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2037</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2037" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2037" ref_url="https://www.suse.com/security/cve/CVE-2016-2037" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0389-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00026.html" source="SUSE-SU"/>
    <description>
    The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-2037/">CVE-2016-2037</cve>
	<bugzilla href="https://bugzilla.suse.com/1028410">SUSE bug 1028410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963448">SUSE bug 963448</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481843" comment="cpio-2.12-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151389" comment="cpio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481844" comment="cpio-lang-2.12-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151390" comment="cpio-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481845" comment="cpio-mt-2.12-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177165" comment="cpio-mt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162047" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2047</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2047" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2047" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2047" ref_url="https://www.suse.com/security/cve/CVE-2016-2047" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/CN=foo.com."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2047/">CVE-2016-2047</cve>
	<bugzilla href="https://bugzilla.suse.com/963806">SUSE bug 963806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2088</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2088" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2088" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2088" ref_url="https://www.suse.com/security/cve/CVE-2016-2088" source="SUSE CVE"/>
    <description>
    resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed packet with more than one cookie option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2088/">CVE-2016-2088</cve>
	<bugzilla href="https://bugzilla.suse.com/970074">SUSE bug 970074</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2089</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2089" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2089" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2089" ref_url="https://www.suse.com/security/cve/CVE-2016-2089" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0408-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0413-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2089/">CVE-2016-2089</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963983">SUSE bug 963983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2099</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2099" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2099" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2099" ref_url="https://www.suse.com/security/cve/CVE-2016-2099" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2154-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002228.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1744-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1808-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00013.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2099/">CVE-2016-2099</cve>
	<bugzilla href="https://bugzilla.suse.com/979208">SUSE bug 979208</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628923" comment="libxerces-c-3_2-3.2.3-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695536" comment="libxerces-c-3_2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2105</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2105" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2105" ref_url="https://www.suse.com/security/cve/CVE-2016-2105" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1228-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7017583" ref_url="https://www.suse.com/support/kb/doc/?id=7017583" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1237-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1238-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2105/">CVE-2016-2105</cve>
	<bugzilla href="https://bugzilla.suse.com/977584">SUSE bug 977584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977614">SUSE bug 977614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978492">SUSE bug 978492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989902">SUSE bug 989902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990369">SUSE bug 990369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990370">SUSE bug 990370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2106</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2106" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2106" ref_url="https://www.suse.com/security/cve/CVE-2016-2106" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1228-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7017583" ref_url="https://www.suse.com/support/kb/doc/?id=7017583" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1237-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1238-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2106/">CVE-2016-2106</cve>
	<bugzilla href="https://bugzilla.suse.com/977584">SUSE bug 977584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977615">SUSE bug 977615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978492">SUSE bug 978492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990369">SUSE bug 990369</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2107</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2107" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2107" ref_url="https://www.suse.com/security/cve/CVE-2016-2107" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1228-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7017583" ref_url="https://www.suse.com/support/kb/doc/?id=7017583" source="SUSE-SU"/>
		<reference ref_id="TID7017793" ref_url="https://www.suse.com/support/kb/doc/?id=7017793" source="SUSE-SU"/>
		<reference ref_id="TID7017881" ref_url="https://www.suse.com/support/kb/doc/?id=7017881" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1237-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1238-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html" source="SUSE-SU"/>
    <description>
    The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2107/">CVE-2016-2107</cve>
	<bugzilla href="https://bugzilla.suse.com/976942">SUSE bug 976942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977584">SUSE bug 977584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977616">SUSE bug 977616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978492">SUSE bug 978492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990369">SUSE bug 990369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990370">SUSE bug 990370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2109</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2109" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2109" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2109" ref_url="https://www.suse.com/security/cve/CVE-2016-2109" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1228-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7017583" ref_url="https://www.suse.com/support/kb/doc/?id=7017583" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1237-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1238-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html" source="SUSE-SU"/>
    <description>
    The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2109/">CVE-2016-2109</cve>
	<bugzilla href="https://bugzilla.suse.com/1015243">SUSE bug 1015243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976942">SUSE bug 976942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977584">SUSE bug 977584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978492">SUSE bug 978492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990369">SUSE bug 990369</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2110</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2110" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2110" ref_url="https://www.suse.com/security/cve/CVE-2016-2110" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="TID7017473" ref_url="https://www.suse.com/support/kb/doc?id=7017473" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1440-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00124.html" source="SUSE-SU"/>
    <description>
    The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryption settings, as demonstrated by clearing the NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN option to disrupt LDAP security.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2110/">CVE-2016-2110</cve>
	<bugzilla href="https://bugzilla.suse.com/1009711">SUSE bug 1009711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973031">SUSE bug 973031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973033">SUSE bug 973033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973036">SUSE bug 973036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975276">SUSE bug 975276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977416">SUSE bug 977416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2111</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2111" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2111" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2111" ref_url="https://www.suse.com/security/cve/CVE-2016-2111" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="TID7017473" ref_url="https://www.suse.com/support/kb/doc?id=7017473" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, a related issue to CVE-2015-0005.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2111/">CVE-2016-2111</cve>
	<bugzilla href="https://bugzilla.suse.com/973032">SUSE bug 973032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975276">SUSE bug 975276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977416">SUSE bug 977416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2112</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2112" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2112" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2112" ref_url="https://www.suse.com/security/cve/CVE-2016-2112" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="TID7017473" ref_url="https://www.suse.com/support/kb/doc?id=7017473" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2112/">CVE-2016-2112</cve>
	<bugzilla href="https://bugzilla.suse.com/973031">SUSE bug 973031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973033">SUSE bug 973033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975276">SUSE bug 975276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977416">SUSE bug 977416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2113</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2113" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2113" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2113" ref_url="https://www.suse.com/security/cve/CVE-2016-2113" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="TID7017473" ref_url="https://www.suse.com/support/kb/doc?id=7017473" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2113/">CVE-2016-2113</cve>
	<bugzilla href="https://bugzilla.suse.com/973031">SUSE bug 973031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973033">SUSE bug 973033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973034">SUSE bug 973034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975276">SUSE bug 975276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977416">SUSE bug 977416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162115" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2115</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2115" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2115" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2115" ref_url="https://www.suse.com/security/cve/CVE-2016-2115" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="TID7017473" ref_url="https://www.suse.com/support/kb/doc?id=7017473" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2115/">CVE-2016-2115</cve>
	<bugzilla href="https://bugzilla.suse.com/973036">SUSE bug 973036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975276">SUSE bug 975276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977416">SUSE bug 977416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2116</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2116" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2116" ref_url="https://www.suse.com/security/cve/CVE-2016-2116" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-2116/">CVE-2016-2116</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968373">SUSE bug 968373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2118</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2118" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2118" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2118" ref_url="https://www.suse.com/security/cve/CVE-2016-2118" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="TID7017473" ref_url="https://www.suse.com/support/kb/doc?id=7017473" source="SUSE-SU"/>
		<reference ref_id="TID7017482" ref_url="https://www.suse.com/support/kb/doc/?id=7017482" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2118/">CVE-2016-2118</cve>
	<bugzilla href="https://bugzilla.suse.com/971965">SUSE bug 971965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975276">SUSE bug 975276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977416">SUSE bug 977416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2119</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2119" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2119" ref_url="https://www.suse.com/security/cve/CVE-2016-2119" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002341.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1830-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2371-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00086.html" source="SUSE-SU"/>
    <description>
    libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing protection mechanism, and consequently spoof SMB2 and SMB3 servers, via the (1) SMB2_SESSION_FLAG_IS_GUEST or (2) SMB2_SESSION_FLAG_IS_NULL flag.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2119/">CVE-2016-2119</cve>
	<bugzilla href="https://bugzilla.suse.com/986869">SUSE bug 986869</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162123" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2123</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2123" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2123" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2123" ref_url="https://www.suse.com/security/cve/CVE-2016-2123" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002526.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002535.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0020-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0021-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00010.html" source="SUSE-SU"/>
    <description>
    A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2123/">CVE-2016-2123</cve>
	<bugzilla href="https://bugzilla.suse.com/1014437">SUSE bug 1014437</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162124" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2124</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2124" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2124" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2124" ref_url="https://www.suse.com/security/cve/CVE-2016-2124" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:28-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:29-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009716.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009714.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009729.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009750.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009748.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010209.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1471-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6W4QSQCTUGSIZCTRT4FGJNMRLZDUZS6Y/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3647-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/36K5HNX67LYX5XOVQRL3MSIC5YSJ5M5W/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3650-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7ZU5FWTEOBTHR7WNP3HEICT3NJTBNV2V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3674-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZYEHJEQQ7LEL2T775B7QLR3IFR6LJGLZ/" source="SUSE-SU"/>
    <description>
    A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2124/">CVE-2016-2124</cve>
	<bugzilla href="https://bugzilla.suse.com/1014440">SUSE bug 1014440</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654904" comment="ctdb-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655346" comment="ctdb-pcp-pmda-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233089" comment="ctdb-pcp-pmda is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655347" comment="ctdb-tests-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654738" comment="ldb-tools-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152723" comment="ldb-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654739" comment="libdcerpc-binding0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654740" comment="libdcerpc-binding0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655348" comment="libdcerpc-binding0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623625" comment="libdcerpc-binding0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654741" comment="libdcerpc-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654742" comment="libdcerpc-samr-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654743" comment="libdcerpc-samr0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655349" comment="libdcerpc-samr0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655350" comment="libdcerpc-samr0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623626" comment="libdcerpc-samr0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654744" comment="libdcerpc0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654745" comment="libdcerpc0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655351" comment="libdcerpc0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623627" comment="libdcerpc0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654746" comment="libldb-devel-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152732" comment="libldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654747" comment="libldb2-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291435" comment="libldb2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654748" comment="libldb2-32bit-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291436" comment="libldb2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654749" comment="libndr-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654750" comment="libndr-krb5pac-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654751" comment="libndr-krb5pac0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654752" comment="libndr-krb5pac0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655352" comment="libndr-krb5pac0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623628" comment="libndr-krb5pac0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654753" comment="libndr-nbt-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654754" comment="libndr-nbt0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654755" comment="libndr-nbt0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655353" comment="libndr-nbt0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623629" comment="libndr-nbt0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654756" comment="libndr-standard-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654757" comment="libndr-standard0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654758" comment="libndr-standard0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655354" comment="libndr-standard0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623630" comment="libndr-standard0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654687" comment="libndr0-4.11.14+git.308.666c63d4eea-4.28.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654688" comment="libndr0-32bit-4.11.14+git.308.666c63d4eea-4.28.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654759" comment="libndr1-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654760" comment="libndr1-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655355" comment="libndr1-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655384" comment="libndr1-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654761" comment="libnetapi-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655356" comment="libnetapi-devel-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009287505" comment="libnetapi-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655357" comment="libnetapi-devel-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623632" comment="libnetapi-devel-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654762" comment="libnetapi0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654763" comment="libnetapi0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655358" comment="libnetapi0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623633" comment="libnetapi0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654764" comment="libsamba-credentials-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654765" comment="libsamba-credentials0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654766" comment="libsamba-credentials0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655359" comment="libsamba-credentials0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623634" comment="libsamba-credentials0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654767" comment="libsamba-errors-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654768" comment="libsamba-errors0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654769" comment="libsamba-errors0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655360" comment="libsamba-errors0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623635" comment="libsamba-errors0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654770" comment="libsamba-hostconfig-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654771" comment="libsamba-hostconfig0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654772" comment="libsamba-hostconfig0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655361" comment="libsamba-hostconfig0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623636" comment="libsamba-hostconfig0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654773" comment="libsamba-passdb-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654774" comment="libsamba-passdb0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654775" comment="libsamba-passdb0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655362" comment="libsamba-passdb0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623637" comment="libsamba-passdb0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654776" comment="libsamba-policy-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655340" comment="libsamba-policy-python-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266817" comment="libsamba-policy-python-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654777" comment="libsamba-policy-python3-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266818" comment="libsamba-policy-python3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655341" comment="libsamba-policy0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152746" comment="libsamba-policy0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655342" comment="libsamba-policy0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152747" comment="libsamba-policy0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654778" comment="libsamba-policy0-python3-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655363" comment="libsamba-policy0-python3-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266820" comment="libsamba-policy0-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655364" comment="libsamba-policy0-python3-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623639" comment="libsamba-policy0-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654779" comment="libsamba-util-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654780" comment="libsamba-util0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654781" comment="libsamba-util0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655365" comment="libsamba-util0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623640" comment="libsamba-util0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654782" comment="libsamdb-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654783" comment="libsamdb0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654784" comment="libsamdb0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655366" comment="libsamdb0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623641" comment="libsamdb0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654785" comment="libsmbclient-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654786" comment="libsmbclient0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655367" comment="libsmbclient0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655368" comment="libsmbclient0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623642" comment="libsmbclient0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654787" comment="libsmbconf-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654788" comment="libsmbconf0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654789" comment="libsmbconf0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655369" comment="libsmbconf0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623643" comment="libsmbconf0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654790" comment="libsmbldap-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654791" comment="libsmbldap2-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654792" comment="libsmbldap2-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655370" comment="libsmbldap2-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623644" comment="libsmbldap2-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654793" comment="libtevent-util-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654794" comment="libtevent-util0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654795" comment="libtevent-util0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655371" comment="libtevent-util0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623645" comment="libtevent-util0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654796" comment="libwbclient-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654797" comment="libwbclient0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654798" comment="libwbclient0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655372" comment="libwbclient0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623646" comment="libwbclient0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654799" comment="python3-ldb-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247520" comment="python3-ldb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655373" comment="python3-ldb-32bit-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247521" comment="python3-ldb-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654800" comment="python3-ldb-devel-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247522" comment="python3-ldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654801" comment="samba-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654815" comment="samba-ad-dc-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266821" comment="samba-ad-dc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655374" comment="samba-ad-dc-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266822" comment="samba-ad-dc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655375" comment="samba-ad-dc-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623647" comment="samba-ad-dc-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654802" comment="samba-ceph-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009162650" comment="samba-ceph is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654803" comment="samba-client-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655376" comment="samba-client-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655377" comment="samba-client-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623648" comment="samba-client-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654804" comment="samba-core-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655378" comment="samba-doc-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654805" comment="samba-dsdb-modules-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177163" comment="samba-dsdb-modules is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654806" comment="samba-gpupdate-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655385" comment="samba-gpupdate is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654807" comment="samba-ldb-ldap-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655386" comment="samba-ldb-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654808" comment="samba-libs-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654809" comment="samba-libs-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655379" comment="samba-libs-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623649" comment="samba-libs-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655343" comment="samba-libs-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266823" comment="samba-libs-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655344" comment="samba-libs-python-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266824" comment="samba-libs-python-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654810" comment="samba-libs-python3-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655380" comment="samba-libs-python3-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266826" comment="samba-libs-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655381" comment="samba-libs-python3-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623651" comment="samba-libs-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655345" comment="samba-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152777" comment="samba-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654811" comment="samba-python3-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655382" comment="samba-test-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654812" comment="samba-winbind-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654813" comment="samba-winbind-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655383" comment="samba-winbind-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623652" comment="samba-winbind-64bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2125</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2125" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2125" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2125" ref_url="https://www.suse.com/security/cve/CVE-2016-2125" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002526.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002534.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0020-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0021-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00010.html" source="SUSE-SU"/>
    <description>
    It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2125/">CVE-2016-2125</cve>
	<bugzilla href="https://bugzilla.suse.com/1014441">SUSE bug 1014441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2126" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2126" ref_url="https://www.suse.com/security/cve/CVE-2016-2126" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002526.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002534.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0020-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0021-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00010.html" source="SUSE-SU"/>
    <description>
    Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2126/">CVE-2016-2126</cve>
	<bugzilla href="https://bugzilla.suse.com/1014442">SUSE bug 1014442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2147</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2147" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2147" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2147" ref_url="https://www.suse.com/security/cve/CVE-2016-2147" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-encoded domain name, which triggers an out-of-bounds heap write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2147/">CVE-2016-2147</cve>
	<bugzilla href="https://bugzilla.suse.com/970663">SUSE bug 970663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152555" comment="busybox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653584" comment="busybox-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2148</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2148" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2148" ref_url="https://www.suse.com/security/cve/CVE-2016-2148" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2148/">CVE-2016-2148</cve>
	<bugzilla href="https://bugzilla.suse.com/970662">SUSE bug 970662</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152555" comment="busybox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653584" comment="busybox-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2150</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2150" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2150" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2150" ref_url="https://www.suse.com/security/cve/CVE-2016-2150" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002108.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1561-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008966.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1725-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1726-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html" source="SUSE-SU"/>
    <description>
    SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2150/">CVE-2016-2150</cve>
	<bugzilla href="https://bugzilla.suse.com/982385">SUSE bug 982385</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982386">SUSE bug 982386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629866" comment="libspice-server1-0.14.3-1.48 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2161</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2161" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2161" ref_url="https://www.suse.com/security/cve/CVE-2016-2161" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002741.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0897-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0903-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00120.html" source="SUSE-SU"/>
    <description>
    In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for subsequently valid requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2161/">CVE-2016-2161</cve>
	<bugzilla href="https://bugzilla.suse.com/1016714">SUSE bug 1016714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033513">SUSE bug 1033513</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2176</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2176" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2176" ref_url="https://www.suse.com/security/cve/CVE-2016-2176" source="SUSE CVE"/>
		<reference ref_id="TID7017583" ref_url="https://www.suse.com/support/kb/doc/?id=7017583" source="SUSE-SU"/>
    <description>
    The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2176/">CVE-2016-2176</cve>
	<bugzilla href="https://bugzilla.suse.com/978224">SUSE bug 978224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990369">SUSE bug 990369</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2177</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2177" ref_url="https://www.suse.com/security/cve/CVE-2016-2177" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2177/">CVE-2016-2177</cve>
	<bugzilla href="https://bugzilla.suse.com/982575">SUSE bug 982575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999075">SUSE bug 999075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2178</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2178" ref_url="https://www.suse.com/security/cve/CVE-2016-2178" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-17"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2178/">CVE-2016-2178</cve>
	<bugzilla href="https://bugzilla.suse.com/1004104">SUSE bug 1004104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983249">SUSE bug 983249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983519">SUSE bug 983519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2179</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2179" ref_url="https://www.suse.com/security/cve/CVE-2016-2179" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2179/">CVE-2016-2179</cve>
	<bugzilla href="https://bugzilla.suse.com/1004104">SUSE bug 1004104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994844">SUSE bug 994844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2180</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2180" ref_url="https://www.suse.com/security/cve/CVE-2016-2180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the "openssl ts" command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2180/">CVE-2016-2180</cve>
	<bugzilla href="https://bugzilla.suse.com/1003811">SUSE bug 1003811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990419">SUSE bug 990419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2181</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2181" ref_url="https://www.suse.com/security/cve/CVE-2016-2181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-17"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2181/">CVE-2016-2181</cve>
	<bugzilla href="https://bugzilla.suse.com/1004104">SUSE bug 1004104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994749">SUSE bug 994749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994844">SUSE bug 994844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2182</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2182" ref_url="https://www.suse.com/security/cve/CVE-2016-2182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-17"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2182/">CVE-2016-2182</cve>
	<bugzilla href="https://bugzilla.suse.com/1004104">SUSE bug 1004104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/993819">SUSE bug 993819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994844">SUSE bug 994844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/995959">SUSE bug 995959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2183</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2183" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2183" ref_url="https://www.suse.com/security/cve/CVE-2016-2183" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002706.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0720-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002707.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0726-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002708.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7017985" ref_url="https://www.suse.com/support/kb/doc/?id=7017985" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="TID7020150" ref_url="https://www.suse.com/support/kb/doc/?id=7020150" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way the DES/3DES cipher was used as part of the TLS/SSL protocol. A man-in-the-middle attacker could use this flaw to recover some plaintext data by capturing large amounts of encrypted traffic between TLS/SSL server and client if the communication used a DES/3DES based ciphersuite.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2183/">CVE-2016-2183</cve>
	<bugzilla href="https://bugzilla.suse.com/1001912">SUSE bug 1001912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024218">SUSE bug 1024218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1027038">SUSE bug 1027038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1034689">SUSE bug 1034689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171693">SUSE bug 1171693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994844">SUSE bug 994844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/995359">SUSE bug 995359</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2198</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2198" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2198" ref_url="https://www.suse.com/security/cve/CVE-2016-2198" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2198/">CVE-2016-2198</cve>
	<bugzilla href="https://bugzilla.suse.com/964413">SUSE bug 964413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964415">SUSE bug 964415</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2270</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2270" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2270" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2270" ref_url="https://www.suse.com/security/cve/CVE-2016-2270" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2270/">CVE-2016-2270</cve>
	<bugzilla href="https://bugzilla.suse.com/965315">SUSE bug 965315</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2271</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2271" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2271" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2271" ref_url="https://www.suse.com/security/cve/CVE-2016-2271" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2271/">CVE-2016-2271</cve>
	<bugzilla href="https://bugzilla.suse.com/965317">SUSE bug 965317</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2312</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2312" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2312" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2312" ref_url="https://www.suse.com/security/cve/CVE-2016-2312" source="SUSE CVE"/>
    <description>
    Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2312/">CVE-2016-2312</cve>
	<bugzilla href="https://bugzilla.suse.com/964548">SUSE bug 964548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968966">SUSE bug 968966</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694822" comment="kscreenlocker-5.18.5-bp153.1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154223" comment="kscreenlocker is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694823" comment="kscreenlocker-lang-5.18.5-bp153.1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154224" comment="kscreenlocker-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694824" comment="libKScreenLocker5-5.18.5-bp153.1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154225" comment="libKScreenLocker5 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162334" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2334</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2334" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2334" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2334" ref_url="https://www.suse.com/security/cve/CVE-2016-2334" source="SUSE CVE"/>
    <description>
    Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2334/">CVE-2016-2334</cve>
	<bugzilla href="https://bugzilla.suse.com/979822">SUSE bug 979822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694907" comment="p7zip-16.02-14.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152637" comment="p7zip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694908" comment="p7zip-full-16.02-14.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474268" comment="p7zip-full is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162335" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2335</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2335" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2335" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2335" ref_url="https://www.suse.com/security/cve/CVE-2016-2335" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002118.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1464-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1675-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1850-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00069.html" source="SUSE-SU"/>
    <description>
    The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2335/">CVE-2016-2335</cve>
	<bugzilla href="https://bugzilla.suse.com/979823">SUSE bug 979823</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694907" comment="p7zip-16.02-14.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152637" comment="p7zip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694908" comment="p7zip-full-16.02-14.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474268" comment="p7zip-full is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2391</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2391" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2391" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2391" ref_url="https://www.suse.com/security/cve/CVE-2016-2391" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2391/">CVE-2016-2391</cve>
	<bugzilla href="https://bugzilla.suse.com/967012">SUSE bug 967012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967013">SUSE bug 967013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967101">SUSE bug 967101</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2392</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2392" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2392" ref_url="https://www.suse.com/security/cve/CVE-2016-2392" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving a remote NDIS control message packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2392/">CVE-2016-2392</cve>
	<bugzilla href="https://bugzilla.suse.com/967012">SUSE bug 967012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967090">SUSE bug 967090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2399</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2399" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2399" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2399" ref_url="https://www.suse.com/security/cve/CVE-2016-2399" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0610-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1986-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0552-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00102.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2399/">CVE-2016-2399</cve>
	<bugzilla href="https://bugzilla.suse.com/1022805">SUSE bug 1022805</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487566" comment="libquicktime0-1.2.4+git20180804.fff99cd-1.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153617" comment="libquicktime0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2464</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2464" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2464" ref_url="https://www.suse.com/security/cve/CVE-2016-2464" source="SUSE CVE"/>
    <description>
    libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted mkv file, aka internal bug 23167726.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2464/">CVE-2016-2464</cve>
	<bugzilla href="https://bugzilla.suse.com/984448">SUSE bug 984448</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482448" comment="libvpx4-1.6.1-6.6.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177224" comment="libvpx4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2538</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2538" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2538" ref_url="https://www.suse.com/security/cve/CVE-2016-2538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service (QEMU process crash) or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the (1) rndis_query_response, (2) rndis_set_response, or (3) usb_net_handle_dataout function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2538/">CVE-2016-2538</cve>
	<bugzilla href="https://bugzilla.suse.com/967969">SUSE bug 967969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968004">SUSE bug 968004</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2775</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2775" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2775" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2775" ref_url="https://www.suse.com/security/cve/CVE-2016-2775" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0999-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002797.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1063-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00022.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2775/">CVE-2016-2775</cve>
	<bugzilla href="https://bugzilla.suse.com/989528">SUSE bug 989528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2776</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2776" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2776" ref_url="https://www.suse.com/security/cve/CVE-2016-2776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2401-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="TID7018100" ref_url="https://www.suse.com/support/kb/doc/?id=7018100" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00030.html" source="SUSE-SU"/>
    <description>
    buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2776/">CVE-2016-2776</cve>
	<bugzilla href="https://bugzilla.suse.com/1000362">SUSE bug 1000362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1001595">SUSE bug 1001595</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1001597">SUSE bug 1001597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007829">SUSE bug 1007829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2779</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2779" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2779" ref_url="https://www.suse.com/security/cve/CVE-2016-2779" source="SUSE CVE"/>
    <description>
    runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2779/">CVE-2016-2779</cve>
	<bugzilla href="https://bugzilla.suse.com/1000998">SUSE bug 1000998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018892">SUSE bug 1018892</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/946429">SUSE bug 946429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968375">SUSE bug 968375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968674">SUSE bug 968674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968675">SUSE bug 968675</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628636" comment="libblkid1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151787" comment="libblkid1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628637" comment="libblkid1-32bit-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151788" comment="libblkid1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628639" comment="libfdisk1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154114" comment="libfdisk1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628641" comment="libmount1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151789" comment="libmount1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628642" comment="libmount1-32bit-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151790" comment="libmount1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628644" comment="libsmartcols1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151791" comment="libsmartcols1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628647" comment="libuuid1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151793" comment="libuuid1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628648" comment="libuuid1-32bit-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151794" comment="libuuid1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628649" comment="util-linux-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151795" comment="util-linux is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628650" comment="util-linux-lang-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151796" comment="util-linux-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628651" comment="util-linux-systemd-2.36.2-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151797" comment="util-linux-systemd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2790</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2790" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2790" ref_url="https://www.suse.com/security/cve/CVE-2016-2790" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2790/">CVE-2016-2790</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2791</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2791" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2791" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2791" ref_url="https://www.suse.com/security/cve/CVE-2016-2791" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2791/">CVE-2016-2791</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2792</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2792" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2792" ref_url="https://www.suse.com/security/cve/CVE-2016-2792" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2800.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2792/">CVE-2016-2792</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2793</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2793" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2793" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2793" ref_url="https://www.suse.com/security/cve/CVE-2016-2793" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2793/">CVE-2016-2793</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2794</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2794" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2794" ref_url="https://www.suse.com/security/cve/CVE-2016-2794" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2794/">CVE-2016-2794</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162795" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2795</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2795" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2795" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2795" ref_url="https://www.suse.com/security/cve/CVE-2016-2795" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2795/">CVE-2016-2795</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162796" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2796</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2796" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2796" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2796" ref_url="https://www.suse.com/security/cve/CVE-2016-2796" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2796/">CVE-2016-2796</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2797</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2797" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2797" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2797" ref_url="https://www.suse.com/security/cve/CVE-2016-2797" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2801.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2797/">CVE-2016-2797</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2798</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2798" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2798" ref_url="https://www.suse.com/security/cve/CVE-2016-2798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2798/">CVE-2016-2798</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2799</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2799" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2799" ref_url="https://www.suse.com/security/cve/CVE-2016-2799" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2799/">CVE-2016-2799</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2800</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2800" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2800" ref_url="https://www.suse.com/security/cve/CVE-2016-2800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2792.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2800/">CVE-2016-2800</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2801</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2801" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2801" ref_url="https://www.suse.com/security/cve/CVE-2016-2801" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2797.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2801/">CVE-2016-2801</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2802</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2802" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2802" ref_url="https://www.suse.com/security/cve/CVE-2016-2802" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2802/">CVE-2016-2802</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2804</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2804" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2804" ref_url="https://www.suse.com/security/cve/CVE-2016-2804" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2804/">CVE-2016-2804</cve>
	<bugzilla href="https://bugzilla.suse.com/977373">SUSE bug 977373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2806</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2806" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2806" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2806" ref_url="https://www.suse.com/security/cve/CVE-2016-2806" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2806/">CVE-2016-2806</cve>
	<bugzilla href="https://bugzilla.suse.com/977375">SUSE bug 977375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2807</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2807" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2807" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2807" ref_url="https://www.suse.com/security/cve/CVE-2016-2807" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1342-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1352-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2807/">CVE-2016-2807</cve>
	<bugzilla href="https://bugzilla.suse.com/977333">SUSE bug 977333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977376">SUSE bug 977376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2808</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2808" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2808" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2808" ref_url="https://www.suse.com/security/cve/CVE-2016-2808" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1342-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1352-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    The watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code or cause a denial of service (generation-count overflow, out-of-bounds HashMap write access, and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2808/">CVE-2016-2808</cve>
	<bugzilla href="https://bugzilla.suse.com/977333">SUSE bug 977333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977386">SUSE bug 977386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162809" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2809</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2809" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2809" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2809" ref_url="https://www.suse.com/security/cve/CVE-2016-2809" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2809/">CVE-2016-2809</cve>
	<bugzilla href="https://bugzilla.suse.com/977333">SUSE bug 977333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977377">SUSE bug 977377</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2810</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2810" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2810" ref_url="https://www.suse.com/security/cve/CVE-2016-2810" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2810/">CVE-2016-2810</cve>
	<bugzilla href="https://bugzilla.suse.com/977333">SUSE bug 977333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977378">SUSE bug 977378</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2811</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2811" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2811" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2811" ref_url="https://www.suse.com/security/cve/CVE-2016-2811" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code via vectors related to the BeginReading method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2811/">CVE-2016-2811</cve>
	<bugzilla href="https://bugzilla.suse.com/977379">SUSE bug 977379</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2812</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2812" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2812" ref_url="https://www.suse.com/security/cve/CVE-2016-2812" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    Race condition in the get implementation in the ServiceWorkerManager class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2812/">CVE-2016-2812</cve>
	<bugzilla href="https://bugzilla.suse.com/977379">SUSE bug 977379</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2813</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2813" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2813" ref_url="https://www.suse.com/security/cve/CVE-2016-2813" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment, and possibly discover PIN values, via a crafted web site, a similar issue to CVE-2016-1780.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2813/">CVE-2016-2813</cve>
	<bugzilla href="https://bugzilla.suse.com/977333">SUSE bug 977333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977380">SUSE bug 977380</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2814</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2814" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2814" ref_url="https://www.suse.com/security/cve/CVE-2016-2814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1342-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1352-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in libstagefright in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code via crafted CENC offsets that lead to mismanagement of the sizes table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2814/">CVE-2016-2814</cve>
	<bugzilla href="https://bugzilla.suse.com/977333">SUSE bug 977333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977381">SUSE bug 977381</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2815</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2815" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2815" ref_url="https://www.suse.com/security/cve/CVE-2016-2815" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2815/">CVE-2016-2815</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983638">SUSE bug 983638</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2816</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2816" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2816" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2816" ref_url="https://www.suse.com/security/cve/CVE-2016-2816" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via the multipart/x-mixed-replace content type.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2816/">CVE-2016-2816</cve>
	<bugzilla href="https://bugzilla.suse.com/977382">SUSE bug 977382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2817</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2817" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2817" ref_url="https://www.suse.com/security/cve/CVE-2016-2817" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-2817/">CVE-2016-2817</cve>
	<bugzilla href="https://bugzilla.suse.com/977384">SUSE bug 977384</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2818</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2818" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2818" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2818" ref_url="https://www.suse.com/security/cve/CVE-2016-2818" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2818/">CVE-2016-2818</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983638">SUSE bug 983638</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2819</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2819" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2819" ref_url="https://www.suse.com/security/cve/CVE-2016-2819" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2819/">CVE-2016-2819</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983655">SUSE bug 983655</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2820</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2820" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2820" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2820" ref_url="https://www.suse.com/security/cve/CVE-2016-2820" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    The Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify sharing preferences by leveraging access to the remote-report IFRAME element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-2820/">CVE-2016-2820</cve>
	<bugzilla href="https://bugzilla.suse.com/977388">SUSE bug 977388</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2821</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2821" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2821" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2821" ref_url="https://www.suse.com/security/cve/CVE-2016-2821" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering deletion of DOM elements that were created in the editor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2821/">CVE-2016-2821</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983653">SUSE bug 983653</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2822</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2822" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2822" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2822" ref_url="https://www.suse.com/security/cve/CVE-2016-2822" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent menu.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2822/">CVE-2016-2822</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983652">SUSE bug 983652</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2824</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2824" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2824" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2824" ref_url="https://www.suse.com/security/cve/CVE-2016-2824" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows, allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact by triggering use of a WebGL shader that writes to an array.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2824/">CVE-2016-2824</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983651">SUSE bug 983651</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2825</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2825" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2825" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2825" ref_url="https://www.suse.com/security/cve/CVE-2016-2825" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify the location.host property via an invalid data: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2825/">CVE-2016-2825</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983649">SUSE bug 983649</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2827</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2827" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2827" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2827" ref_url="https://www.suse.com/security/cve/CVE-2016-2827" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    The mozilla::net::IsValidReferrerPolicy function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a Content Security Policy (CSP) referrer directive with zero values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2827/">CVE-2016-2827</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2828</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2828" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2828" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2828" ref_url="https://www.suse.com/security/cve/CVE-2016-2828" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via WebGL content that triggers texture access after destruction of the texture's recycle pool.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2828/">CVE-2016-2828</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983646">SUSE bug 983646</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2829</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2829" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2829" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2829" ref_url="https://www.suse.com/security/cve/CVE-2016-2829" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 47.0 allows remote attackers to spoof permission notifications via a crafted web site that rapidly triggers permission requests, as demonstrated by the microphone permission or the geolocation permission.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2829/">CVE-2016-2829</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983644">SUSE bug 983644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2830</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2830" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2830" ref_url="https://www.suse.com/security/cve/CVE-2016-2830" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource retrieval after the associated browser window is closed, which makes it easier for remote web servers to track users by observing network traffic from multiple IP addresses.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2830/">CVE-2016-2830</cve>
	<bugzilla href="https://bugzilla.suse.com/983922">SUSE bug 983922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2831</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2831" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2831" ref_url="https://www.suse.com/security/cve/CVE-2016-2831" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves the fullscreen and pointerlock settings, which allows remote attackers to cause a denial of service (UI outage), or conduct clickjacking or spoofing attacks, via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-2831/">CVE-2016-2831</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983632">SUSE bug 983632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983643">SUSE bug 983643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162832" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2832</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2832" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2832" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2832" ref_url="https://www.suse.com/security/cve/CVE-2016-2832" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via a fingerprinting attack involving Cascading Style Sheets (CSS) pseudo-classes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2832/">CVE-2016-2832</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983632">SUSE bug 983632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2833</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2833" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2833" ref_url="https://www.suse.com/security/cve/CVE-2016-2833" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted applet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-2833/">CVE-2016-2833</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983640">SUSE bug 983640</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2834</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2834" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2834" ref_url="https://www.suse.com/security/cve/CVE-2016-2834" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2834/">CVE-2016-2834</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983639">SUSE bug 983639</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2835</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2835" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2835" ref_url="https://www.suse.com/security/cve/CVE-2016-2835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2835/">CVE-2016-2835</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2836</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2836" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2836" ref_url="https://www.suse.com/security/cve/CVE-2016-2836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to Http2Session::Shutdown and SpdySession31::Shutdown, and other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2836/">CVE-2016-2836</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2837</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2837" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2837" ref_url="https://www.suse.com/security/cve/CVE-2016-2837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media Plugin (GMP) sandbox bypass.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-2837/">CVE-2016-2837</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2838</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2838" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2838" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2838" ref_url="https://www.suse.com/security/cve/CVE-2016-2838" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via directional content in an SVG document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2838/">CVE-2016-2838</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2839</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2839" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2839" ref_url="https://www.suse.com/security/cve/CVE-2016-2839" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo _cairo_surface_get_extents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service (application crash) via a crafted video.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2839/">CVE-2016-2839</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2841</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2841" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2841" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2841" ref_url="https://www.suse.com/security/cve/CVE-2016-2841" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    The ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via crafted values for the PSTART and PSTOP registers, involving ring buffer control.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2841/">CVE-2016-2841</cve>
	<bugzilla href="https://bugzilla.suse.com/969350">SUSE bug 969350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969351">SUSE bug 969351</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3075</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3075" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3075" ref_url="https://www.suse.com/security/cve/CVE-2016-3075" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002230.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1779-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2.24 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a long name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3075/">CVE-2016-3075</cve>
	<bugzilla href="https://bugzilla.suse.com/973164">SUSE bug 973164</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163100" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3100</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3100" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3100" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3100" ref_url="https://www.suse.com/security/cve/CVE-2016-3100" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002250.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1723-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00001.html" source="SUSE-SU"/>
    <description>
    kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3100/">CVE-2016-3100</cve>
	<bugzilla href="https://bugzilla.suse.com/983926">SUSE bug 983926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694813" comment="kinit-5.76.0-bp153.1.15 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153635" comment="kinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694814" comment="kinit-lang-5.76.0-bp153.1.15 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153638" comment="kinit-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3119</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3119" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3119" ref_url="https://www.suse.com/security/cve/CVE-2016-3119" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0994-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/001993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/002016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1072-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00055.html" source="SUSE-SU"/>
    <description>
    The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3119/">CVE-2016-3119</cve>
	<bugzilla href="https://bugzilla.suse.com/971942">SUSE bug 971942</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3120</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3120" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3120" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3120" ref_url="https://www.suse.com/security/cve/CVE-2016-3120" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2136-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002222.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00035.html" source="SUSE-SU"/>
    <description>
    The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3120/">CVE-2016-3120</cve>
	<bugzilla href="https://bugzilla.suse.com/991088">SUSE bug 991088</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3186</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3186" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3186" ref_url="https://www.suse.com/security/cve/CVE-2016-3186" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1081-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1103-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3186/">CVE-2016-3186</cve>
	<bugzilla href="https://bugzilla.suse.com/973340">SUSE bug 973340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983268">SUSE bug 983268</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163189" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3189</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3189" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3189" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3189" ref_url="https://www.suse.com/security/cve/CVE-2016-3189" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1206-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1955-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005739.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1435-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00056.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3189/">CVE-2016-3189</cve>
	<bugzilla href="https://bugzilla.suse.com/985657">SUSE bug 985657</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694726" comment="bzip2-1.0.6-5.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151380" comment="bzip2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694727" comment="libbz2-1-1.0.6-5.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151382" comment="libbz2-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694728" comment="libbz2-1-32bit-1.0.6-5.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151383" comment="libbz2-1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3191</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3191" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3191" ref_url="https://www.suse.com/security/cve/CVE-2016-3191" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2035-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2805-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00076.html" source="SUSE-SU"/>
    <description>
    The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-3191/">CVE-2016-3191</cve>
	<bugzilla href="https://bugzilla.suse.com/971741">SUSE bug 971741</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480665" comment="libpcre2-16-0-10.31-1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153649" comment="libpcre2-16-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480667" comment="libpcre2-8-0-10.31-1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153653" comment="libpcre2-8-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3477</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3477" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3477" ref_url="https://www.suse.com/security/cve/CVE-2016-3477" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2278-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3477/">CVE-2016-3477</cve>
	<bugzilla href="https://bugzilla.suse.com/989913">SUSE bug 989913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991616">SUSE bug 991616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3492</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3492" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3492" ref_url="https://www.suse.com/security/cve/CVE-2016-3492" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2932-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3492/">CVE-2016-3492</cve>
	<bugzilla href="https://bugzilla.suse.com/1005555">SUSE bug 1005555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008318">SUSE bug 1008318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3521</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3521" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3521" ref_url="https://www.suse.com/security/cve/CVE-2016-3521" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2278-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3521/">CVE-2016-3521</cve>
	<bugzilla href="https://bugzilla.suse.com/989919">SUSE bug 989919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991616">SUSE bug 991616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3615</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3615" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3615" ref_url="https://www.suse.com/security/cve/CVE-2016-3615" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2278-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: DML.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3615/">CVE-2016-3615</cve>
	<bugzilla href="https://bugzilla.suse.com/989922">SUSE bug 989922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991616">SUSE bug 991616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3622</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3622" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3622" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3622" ref_url="https://www.suse.com/security/cve/CVE-2016-3622" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2525-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2526-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2544-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3622/">CVE-2016-3622</cve>
	<bugzilla href="https://bugzilla.suse.com/974449">SUSE bug 974449</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3623</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3623" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3623" ref_url="https://www.suse.com/security/cve/CVE-2016-3623" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2275-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2525-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00048.html" source="SUSE-SU"/>
    <description>
    The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3623/">CVE-2016-3623</cve>
	<bugzilla href="https://bugzilla.suse.com/974617">SUSE bug 974617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/974618">SUSE bug 974618</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3627</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3627" ref_url="https://www.suse.com/security/cve/CVE-2016-3627" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1298-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1446-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
    <description>
    The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3627/">CVE-2016-3627</cve>
	<bugzilla href="https://bugzilla.suse.com/1026099">SUSE bug 1026099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1026101">SUSE bug 1026101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/972335">SUSE bug 972335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975947">SUSE bug 975947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3658</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3658" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3658" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3658" ref_url="https://www.suse.com/security/cve/CVE-2016-3658" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    The TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving the ma variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3658/">CVE-2016-3658</cve>
	<bugzilla href="https://bugzilla.suse.com/974840">SUSE bug 974840</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163679" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3679</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3679" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3679" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3679" ref_url="https://www.suse.com/security/cve/CVE-2016-3679" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0930-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1059-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00039.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome before 49.0.2623.108, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3679/">CVE-2016-3679</cve>
	<bugzilla href="https://bugzilla.suse.com/972834">SUSE bug 972834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973166">SUSE bug 973166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3695</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3695" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3695" ref_url="https://www.suse.com/security/cve/CVE-2016-3695" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:2342-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012587.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3288-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3450-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012771.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013342.html" source="SUSE-SU"/>
    <description>
    The einj_error_inject function in drivers/acpi/apei/einj.c in the Linux kernel allows local users to simulate hardware errors and consequently cause a denial of service by leveraging failure to disable APEI error injection through EINJ when securelevel is set.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-15"/>
	<updated date="2022-12-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.2/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-3695/">CVE-2016-3695</cve>
	<bugzilla href="https://bugzilla.suse.com/1023051">SUSE bug 1023051</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711159" comment="cluster-md-kmp-64kb-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717663" comment="cluster-md-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710801" comment="cluster-md-kmp-default-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711160" comment="cluster-md-kmp-preempt-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711161" comment="dlm-kmp-64kb-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717664" comment="dlm-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710802" comment="dlm-kmp-default-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711162" comment="dlm-kmp-preempt-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711163" comment="dtb-al-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711164" comment="dtb-allwinner-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711165" comment="dtb-altera-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711166" comment="dtb-amd-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711167" comment="dtb-amlogic-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711168" comment="dtb-apm-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711169" comment="dtb-arm-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711170" comment="dtb-broadcom-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711171" comment="dtb-cavium-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711172" comment="dtb-exynos-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711173" comment="dtb-freescale-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711174" comment="dtb-hisilicon-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711175" comment="dtb-lg-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711176" comment="dtb-marvell-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711177" comment="dtb-mediatek-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711178" comment="dtb-nvidia-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711179" comment="dtb-qcom-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711180" comment="dtb-renesas-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711181" comment="dtb-rockchip-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711182" comment="dtb-socionext-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711183" comment="dtb-sprd-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711184" comment="dtb-xilinx-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711185" comment="dtb-zte-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711186" comment="gfs2-kmp-64kb-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717665" comment="gfs2-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710803" comment="gfs2-kmp-default-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711187" comment="gfs2-kmp-preempt-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710778" comment="kernel-64kb-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710779" comment="kernel-64kb-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711188" comment="kernel-64kb-extra-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711189" comment="kernel-64kb-livepatch-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711190" comment="kernel-64kb-optional-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717649" comment="kernel-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717650" comment="kernel-azure-devel-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717666" comment="kernel-azure-extra-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717667" comment="kernel-azure-livepatch-devel-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717668" comment="kernel-azure-optional-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711191" comment="kernel-debug-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711192" comment="kernel-debug-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711193" comment="kernel-debug-livepatch-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710780" comment="kernel-default-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710781" comment="kernel-default-base-5.3.18-150300.59.93.1.150300.18.54.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711194" comment="kernel-default-base-rebuild-5.3.18-150300.59.93.1.150300.18.54.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710782" comment="kernel-default-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711195" comment="kernel-default-extra-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711196" comment="kernel-default-livepatch-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711197" comment="kernel-default-livepatch-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711198" comment="kernel-default-optional-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710783" comment="kernel-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717651" comment="kernel-devel-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710791" comment="kernel-docs-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711199" comment="kernel-docs-html-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711200" comment="kernel-kvmsmall-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711201" comment="kernel-kvmsmall-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711202" comment="kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710784" comment="kernel-macros-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710792" comment="kernel-obs-build-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711203" comment="kernel-obs-qa-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710785" comment="kernel-preempt-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710793" comment="kernel-preempt-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711204" comment="kernel-preempt-extra-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711205" comment="kernel-preempt-livepatch-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711206" comment="kernel-preempt-optional-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710794" comment="kernel-source-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717652" comment="kernel-source-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711207" comment="kernel-source-vanilla-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710795" comment="kernel-syms-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717653" comment="kernel-syms-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710786" comment="kernel-zfcpdump-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711208" comment="kselftests-kmp-64kb-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717669" comment="kselftests-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711209" comment="kselftests-kmp-default-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711210" comment="kselftests-kmp-preempt-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711211" comment="ocfs2-kmp-64kb-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717670" comment="ocfs2-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710804" comment="ocfs2-kmp-default-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711212" comment="ocfs2-kmp-preempt-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711213" comment="reiserfs-kmp-64kb-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717671" comment="reiserfs-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710796" comment="reiserfs-kmp-default-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711214" comment="reiserfs-kmp-preempt-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3698</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3698" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3698" ref_url="https://www.suse.com/security/cve/CVE-2016-3698" source="SUSE CVE"/>
    <description>
    It was found that libndp did not properly validate and check the origin of Neighbor Discovery Protocol (NDP) messages. An attacker on a non-local network could use this flaw to advertise a node as a router, allowing them to perform man-in-the-middle attacks on a connecting client, or disrupt the network connectivity of that client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3698/">CVE-2016-3698</cve>
	<bugzilla href="https://bugzilla.suse.com/979645">SUSE bug 979645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486474" comment="libndp0-1.6-1.26 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154226" comment="libndp0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3705</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3705" ref_url="https://www.suse.com/security/cve/CVE-2016-3705" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1446-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    Missing incrementation of recursion depth counter were found in the xmlParserEntityCheck() and xmlParseAttValueComplex() functions used for parsing XML data. An attacker could launch a Denial of Service attack by passing specially crafted XML data to an application, forcing it to crash due to stack exhaustion.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3705/">CVE-2016-3705</cve>
	<bugzilla href="https://bugzilla.suse.com/1017497">SUSE bug 1017497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975947">SUSE bug 975947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3706</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3706" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3706" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3706" ref_url="https://www.suse.com/security/cve/CVE-2016-3706" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002230.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1779-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc or libc6) allows remote attackers to cause a denial of service (crash) via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4458.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3706/">CVE-2016-3706</cve>
	<bugzilla href="https://bugzilla.suse.com/980483">SUSE bug 980483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/997423">SUSE bug 997423</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3709</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3709" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3709" ref_url="https://www.suse.com/security/cve/CVE-2016-3709" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:2711-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012677.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2833-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/025986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2834-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/025987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2836-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/025989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2838-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/025990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2839-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/025991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2840-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/025992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1130-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012663.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012813.html" source="SUSE-SU"/>
    <description>
    Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-05"/>
	<updated date="2022-12-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-3709/">CVE-2016-3709</cve>
	<bugzilla href="https://bugzilla.suse.com/1201978">SUSE bug 1201978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009718928" comment="libxml2-2-2.9.7-150000.3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009718903" comment="libxml2-2-32bit-2.9.7-150000.3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009718929" comment="libxml2-devel-2.9.7-150000.3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721676" comment="libxml2-devel-32bit-2.9.7-150000.3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152663" comment="libxml2-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721677" comment="libxml2-doc-2.9.7-150000.3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152664" comment="libxml2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009718930" comment="libxml2-tools-2.9.7-150000.3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009718867" comment="python2-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009237173" comment="python2-libxml2-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009718931" comment="python3-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3710</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3710" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3710" ref_url="https://www.suse.com/security/cve/CVE-2016-3710" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3710/">CVE-2016-3710</cve>
	<bugzilla href="https://bugzilla.suse.com/978158">SUSE bug 978158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978164">SUSE bug 978164</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978167">SUSE bug 978167</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3712</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3712" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3712" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3712" ref_url="https://www.suse.com/security/cve/CVE-2016-3712" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    An integer overflow flaw and an out-of-bounds read flaw were found in the way QEMU's VGA emulator set certain VGA registers while in VBE mode. A privileged guest user could use this flaw to crash the QEMU process instance.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3712/">CVE-2016-3712</cve>
	<bugzilla href="https://bugzilla.suse.com/978160">SUSE bug 978160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978164">SUSE bug 978164</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978167">SUSE bug 978167</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163714" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3714</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3714" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3714" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3714" ref_url="https://www.suse.com/security/cve/CVE-2016-3714" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="TID7017647" ref_url="https://www.suse.com/support/kb/doc/?id=7017647" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html" source="SUSE-SU"/>
    <description>
    It was discovered that ImageMagick did not properly sanitize certain input before passing it to the delegate functionality. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would lead to arbitrary execution of shell commands with the privileges of the user running the application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3714/">CVE-2016-3714</cve>
	<bugzilla href="https://bugzilla.suse.com/1000484">SUSE bug 1000484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057163">SUSE bug 1057163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105592">SUSE bug 1105592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978061">SUSE bug 978061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980401">SUSE bug 980401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982178">SUSE bug 982178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163715" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3715</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3715" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3715" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3715" ref_url="https://www.suse.com/security/cve/CVE-2016-3715" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html" source="SUSE-SU"/>
    <description>
    It was discovered that certain ImageMagick coders and pseudo-protocols did not properly prevent security sensitive operations when processing specially crafted images. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would allow the attacker to delete arbitrary files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-3715/">CVE-2016-3715</cve>
	<bugzilla href="https://bugzilla.suse.com/1000484">SUSE bug 1000484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057163">SUSE bug 1057163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105592">SUSE bug 1105592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978061">SUSE bug 978061</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163716" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3716</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3716" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3716" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3716" ref_url="https://www.suse.com/security/cve/CVE-2016-3716" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html" source="SUSE-SU"/>
    <description>
    It was discovered that certain ImageMagick coders and pseudo-protocols did not properly prevent security sensitive operations when processing specially crafted images. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would allow the attacker to move arbitrary files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-3716/">CVE-2016-3716</cve>
	<bugzilla href="https://bugzilla.suse.com/1000484">SUSE bug 1000484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057163">SUSE bug 1057163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105592">SUSE bug 1105592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978061">SUSE bug 978061</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163717" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3717</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3717" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3717" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3717" ref_url="https://www.suse.com/security/cve/CVE-2016-3717" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html" source="SUSE-SU"/>
    <description>
    It was discovered that certain ImageMagick coders and pseudo-protocols did not properly prevent security sensitive operations when processing specially crafted images. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would allow the attacker to disclose the contents of arbitrary files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-3717/">CVE-2016-3717</cve>
	<bugzilla href="https://bugzilla.suse.com/1000484">SUSE bug 1000484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057163">SUSE bug 1057163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105592">SUSE bug 1105592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978061">SUSE bug 978061</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3718</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3718" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3718" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3718" ref_url="https://www.suse.com/security/cve/CVE-2016-3718" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html" source="SUSE-SU"/>
    <description>
    A server-side request forgery flaw was discovered in the way ImageMagick processed certain images. A remote attacker could exploit this flaw to mislead an application using ImageMagick or an unsuspecting user using the ImageMagick utilities into, for example, performing HTTP(S) requests or opening FTP sessions via specially crafted images.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-3718/">CVE-2016-3718</cve>
	<bugzilla href="https://bugzilla.suse.com/1000484">SUSE bug 1000484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057163">SUSE bug 1057163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105592">SUSE bug 1105592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978061">SUSE bug 978061</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3945</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3945" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3945" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3945" ref_url="https://www.suse.com/security/cve/CVE-2016-3945" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2275-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2525-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00048.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3945/">CVE-2016-3945</cve>
	<bugzilla href="https://bugzilla.suse.com/974614">SUSE bug 974614</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3977</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3977" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3977" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3977" ref_url="https://www.suse.com/security/cve/CVE-2016-3977" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011325.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:967-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/002024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/002025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1565-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010963.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1111-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1118-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1219-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00019.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3977/">CVE-2016-3977</cve>
	<bugzilla href="https://bugzilla.suse.com/974847">SUSE bug 974847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679712" comment="giflib-devel-5.2.1-150000.4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153063" comment="giflib-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679754" comment="giflib-devel-32bit-5.2.1-150000.4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153064" comment="giflib-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679755" comment="giflib-progs-5.2.1-150000.4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153065" comment="giflib-progs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493744" comment="libgif7-5.1.4-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177219" comment="libgif7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679756" comment="libgif7-32bit-5.2.1-150000.4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009682761" comment="libgif7-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163990" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3990</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3990" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3990" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3990" ref_url="https://www.suse.com/security/cve/CVE-2016-3990" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2275-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2525-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00048.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3990/">CVE-2016-3990</cve>
	<bugzilla href="https://bugzilla.suse.com/975069">SUSE bug 975069</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3991</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3991" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3991" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3991" ref_url="https://www.suse.com/security/cve/CVE-2016-3991" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002326.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2275-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2525-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00048.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image with zero tiles.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3991/">CVE-2016-3991</cve>
	<bugzilla href="https://bugzilla.suse.com/975070">SUSE bug 975070</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4002</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4002" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4002" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4002" ref_url="https://www.suse.com/security/cve/CVE-2016-4002" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4002/">CVE-2016-4002</cve>
	<bugzilla href="https://bugzilla.suse.com/975136">SUSE bug 975136</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975138">SUSE bug 975138</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164008" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4008</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4008" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4008" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4008" ref_url="https://www.suse.com/security/cve/CVE-2016-4008" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1674-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00097.html" source="SUSE-SU"/>
    <description>
    The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denial of service (infinite recursion) via a crafted certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4008/">CVE-2016-4008</cve>
	<bugzilla href="https://bugzilla.suse.com/982779">SUSE bug 982779</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482427" comment="libtasn1-4.13-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152119" comment="libtasn1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482428" comment="libtasn1-6-4.13-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152120" comment="libtasn1-6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482429" comment="libtasn1-6-32bit-4.13-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152121" comment="libtasn1-6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4020</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4020" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4020" ref_url="https://www.suse.com/security/cve/CVE-2016-4020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    An information-exposure flaw was found in Quick Emulator (QEMU) in Task Priority Register (TPR) optimizations for 32-bit Windows guests. The flaw could occur while accessing TPR. A privileged user inside a guest could use this issue to read portions of the host memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-4020/">CVE-2016-4020</cve>
	<bugzilla href="https://bugzilla.suse.com/975700">SUSE bug 975700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975907">SUSE bug 975907</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4074</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4074" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4074" ref_url="https://www.suse.com/security/cve/CVE-2016-4074" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003382.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2834-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00084.html" source="SUSE-SU"/>
    <description>
    The jv_dump_term function in jq 1.5 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted JSON file. This issue has been fixed in jq 1.6_rc1-r0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4074/">CVE-2016-4074</cve>
	<bugzilla href="https://bugzilla.suse.com/1014176">SUSE bug 1014176</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976992">SUSE bug 976992</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482049" comment="jq-1.6-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153232" comment="jq is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482051" comment="libjq1-1.6-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153234" comment="libjq1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4300</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4300" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4300" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4300" ref_url="https://www.suse.com/security/cve/CVE-2016-4300" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a large number of substreams, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4300/">CVE-2016-4300</cve>
	<bugzilla href="https://bugzilla.suse.com/985832">SUSE bug 985832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4301</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4301" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4301" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4301" ref_url="https://www.suse.com/security/cve/CVE-2016-4301" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the parse_device function in archive_read_support_format_mtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4301/">CVE-2016-4301</cve>
	<bugzilla href="https://bugzilla.suse.com/985826">SUSE bug 985826</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164324" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4324</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4324" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4324" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4324" ref_url="https://www.suse.com/security/cve/CVE-2016-4324" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002316.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2538-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00054.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4324/">CVE-2016-4324</cve>
	<bugzilla href="https://bugzilla.suse.com/987553">SUSE bug 987553</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4429</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4429" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4429" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4429" ref_url="https://www.suse.com/security/cve/CVE-2016-4429" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002230.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1779-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4429/">CVE-2016-4429</cve>
	<bugzilla href="https://bugzilla.suse.com/1081556">SUSE bug 1081556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980854">SUSE bug 980854</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628895" comment="libtirpc-netconfig-1.2.6-1.131 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155752" comment="libtirpc-netconfig is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628896" comment="libtirpc3-1.2.6-1.131 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155753" comment="libtirpc3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628897" comment="libtirpc3-32bit-1.2.6-1.131 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155754" comment="libtirpc3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4439</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4439" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4439" ref_url="https://www.suse.com/security/cve/CVE-2016-4439" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or potentially execute arbitrary code on the QEMU host via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4439/">CVE-2016-4439</cve>
	<bugzilla href="https://bugzilla.suse.com/980711">SUSE bug 980711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980716">SUSE bug 980716</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4441</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4441" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4441" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4441" ref_url="https://www.suse.com/security/cve/CVE-2016-4441" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4441/">CVE-2016-4441</cve>
	<bugzilla href="https://bugzilla.suse.com/980723">SUSE bug 980723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980724">SUSE bug 980724</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164453" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4453</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4453" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4453" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4453" ref_url="https://www.suse.com/security/cve/CVE-2016-4453" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4453/">CVE-2016-4453</cve>
	<bugzilla href="https://bugzilla.suse.com/982223">SUSE bug 982223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982225">SUSE bug 982225</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4454</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4454" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4454" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4454" ref_url="https://www.suse.com/security/cve/CVE-2016-4454" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4454/">CVE-2016-4454</cve>
	<bugzilla href="https://bugzilla.suse.com/982222">SUSE bug 982222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982224">SUSE bug 982224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4463</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4463" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4463" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4463" ref_url="https://www.suse.com/security/cve/CVE-2016-4463" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2154-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002228.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004754.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1808-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00013.html" source="SUSE-SU"/>
    <description>
    A stack exhaustion flaw was found in the way Xerces-C XML parser handled deeply nested DTDs. An attacker could potentially use this flaw to crash an application using Xerces-C by tricking it into processing specially crafted data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4463/">CVE-2016-4463</cve>
	<bugzilla href="https://bugzilla.suse.com/985860">SUSE bug 985860</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628923" comment="libxerces-c-3_2-3.2.3-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695536" comment="libxerces-c-3_2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4472</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4472" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4472" ref_url="https://www.suse.com/security/cve/CVE-2016-4472" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006536.html" source="SUSE-SU"/>
    <description>
    The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4472/">CVE-2016-4472</cve>
	<bugzilla href="https://bugzilla.suse.com/1034050">SUSE bug 1034050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980391">SUSE bug 980391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983985">SUSE bug 983985</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481942" comment="expat-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481944" comment="libexpat1-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481945" comment="libexpat1-32bit-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4476</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4476" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4476" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4476" ref_url="https://www.suse.com/security/cve/CVE-2016-4476" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
    <description>
    hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service (daemon outage) via a crafted WPS operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4476/">CVE-2016-4476</cve>
	<bugzilla href="https://bugzilla.suse.com/978172">SUSE bug 978172</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4477</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4477" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4477" ref_url="https://www.suse.com/security/cve/CVE-2016-4477" source="SUSE CVE"/>
    <description>
    wpa_supplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service (daemon outage), via a crafted (1) SET, (2) SET_CRED, or (3) SET_NETWORK command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4477/">CVE-2016-4477</cve>
	<bugzilla href="https://bugzilla.suse.com/978175">SUSE bug 978175</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4483</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4483" ref_url="https://www.suse.com/security/cve/CVE-2016-4483" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization.  NOTE: this vulnerability may be a duplicate of CVE-2016-3627.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4483/">CVE-2016-4483</cve>
	<bugzilla href="https://bugzilla.suse.com/1026101">SUSE bug 1026101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978395">SUSE bug 978395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4574</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4574" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4574" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4574" ref_url="https://www.suse.com/security/cve/CVE-2016-4574" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1370-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1525-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00028.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-4356.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4574/">CVE-2016-4574</cve>
	<bugzilla href="https://bugzilla.suse.com/1135436">SUSE bug 1135436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979261">SUSE bug 979261</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480597" comment="libksba8-1.3.5-2.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152539" comment="libksba8 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164579" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4579</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4579" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4579" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4579" ref_url="https://www.suse.com/security/cve/CVE-2016-4579" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1525-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00028.html" source="SUSE-SU"/>
    <description>
    Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from _ksba_ber_parse_tl."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4579/">CVE-2016-4579</cve>
	<bugzilla href="https://bugzilla.suse.com/1135436">SUSE bug 1135436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979906">SUSE bug 979906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480597" comment="libksba8-1.3.5-2.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152539" comment="libksba8 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4590</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4590" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4590" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4590" ref_url="https://www.suse.com/security/cve/CVE-2016-4590" source="SUSE CVE"/>
    <description>
    WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-4590/">CVE-2016-4590</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4591</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4591" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4591" ref_url="https://www.suse.com/security/cve/CVE-2016-4591" source="SUSE CVE"/>
    <description>
    WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-4591/">CVE-2016-4591</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4622</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4622" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4622" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4622" ref_url="https://www.suse.com/security/cve/CVE-2016-4622" source="SUSE CVE"/>
    <description>
    WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4623, and CVE-2016-4624.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4622/">CVE-2016-4622</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4624</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4624" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4624" ref_url="https://www.suse.com/security/cve/CVE-2016-4624" source="SUSE CVE"/>
    <description>
    WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4623.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4624/">CVE-2016-4624</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4658</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4658" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4658" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4658" ref_url="https://www.suse.com/security/cve/CVE-2016-4658" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2652-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002619.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2711-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2730-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0446-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00055.html" source="SUSE-SU"/>
    <description>
    xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4658/">CVE-2016-4658</cve>
	<bugzilla href="https://bugzilla.suse.com/1005544">SUSE bug 1005544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014873">SUSE bug 1014873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069433">SUSE bug 1069433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078813">SUSE bug 1078813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4692</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4692" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4692" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4692" ref_url="https://www.suse.com/security/cve/CVE-2016-4692" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4692/">CVE-2016-4692</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4738</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4738" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4738" ref_url="https://www.suse.com/security/cve/CVE-2016-4738" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1390-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00079.html" source="SUSE-SU"/>
    <description>
    libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4738/">CVE-2016-4738</cve>
	<bugzilla href="https://bugzilla.suse.com/1005591">SUSE bug 1005591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123130">SUSE bug 1123130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482466" comment="libxslt-tools-1.1.32-3.8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155747" comment="libxslt-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482467" comment="libxslt1-1.1.32-3.8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155748" comment="libxslt1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4743</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4743" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4743" ref_url="https://www.suse.com/security/cve/CVE-2016-4743" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4743/">CVE-2016-4743</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164809" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4809</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4809" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4809" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4809" ref_url="https://www.suse.com/security/cve/CVE-2016-4809" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1939-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1679-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with a large symlink.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4809/">CVE-2016-4809</cve>
	<bugzilla href="https://bugzilla.suse.com/984990">SUSE bug 984990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164912" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4912</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4912" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4912" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4912" ref_url="https://www.suse.com/security/cve/CVE-2016-4912" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003598.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2712-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00005.html" source="SUSE-SU"/>
    <description>
    The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a large number of crafted packets, which triggers a memory allocation failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4912/">CVE-2016-4912</cve>
	<bugzilla href="https://bugzilla.suse.com/1074356">SUSE bug 1074356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980722">SUSE bug 980722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628951" comment="openslp-2.0.0-6.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151507" comment="openslp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628952" comment="openslp-32bit-2.0.0-6.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153678" comment="openslp-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164952" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4952</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4952" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4952" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4952" ref_url="https://www.suse.com/security/cve/CVE-2016-4952" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vectors related to the (1) PVSCSI_CMD_SETUP_RINGS or (2) PVSCSI_CMD_SETUP_MSG_RING SCSI command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4952/">CVE-2016-4952</cve>
	<bugzilla href="https://bugzilla.suse.com/981266">SUSE bug 981266</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981276">SUSE bug 981276</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4964</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4964" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4964" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4964" ref_url="https://www.suse.com/security/cve/CVE-2016-4964" source="SUSE CVE"/>
    <description>
    The mptsas_fetch_requests function in hw/scsi/mptsas.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop, and CPU consumption or QEMU process crash) via vectors involving s-&gt;state.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4964/">CVE-2016-4964</cve>
	<bugzilla href="https://bugzilla.suse.com/981399">SUSE bug 981399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981401">SUSE bug 981401</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4971</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4971" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4971" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4971" ref_url="https://www.suse.com/security/cve/CVE-2016-4971" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2226-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002286.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2027-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2277-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00041.html" source="SUSE-SU"/>
    <description>
    It was found that wget used a file name provided by the server for the downloaded file when following a HTTP redirect to a FTP server resource. This could cause wget to create a file with a different name than expected, possibly allowing the server to execute arbitrary code on the client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4971/">CVE-2016-4971</cve>
	<bugzilla href="https://bugzilla.suse.com/1023231">SUSE bug 1023231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984060">SUSE bug 984060</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482565" comment="wget-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694929" comment="wget-lang-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695522" comment="wget-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4979</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4979" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4979" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4979" ref_url="https://www.suse.com/security/cve/CVE-2016-4979" source="SUSE CVE"/>
    <description>
    The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the "SSLVerifyClient require" directive for HTTP/2 request authorization, which allows remote attackers to bypass intended access restrictions by leveraging the ability to send multiple requests over a single connection and aborting a renegotiation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-4979/">CVE-2016-4979</cve>
	<bugzilla href="https://bugzilla.suse.com/987365">SUSE bug 987365</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4994</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4994" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4994" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4994" ref_url="https://www.suse.com/security/cve/CVE-2016-4994" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002178.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1727-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00005.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities were found in GIMP in the channel and layer properties parsing process when loading XCF files. An attacker could create a specially crafted XCF file which could cause GIMP to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4994/">CVE-2016-4994</cve>
	<bugzilla href="https://bugzilla.suse.com/986021">SUSE bug 986021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630151" comment="gimp-2.10.12-7.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151540" comment="gimp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630153" comment="gimp-lang-2.10.12-7.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151542" comment="gimp-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630154" comment="gimp-plugin-aa-2.10.12-7.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151543" comment="gimp-plugin-aa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684230" comment="gimp-plugins-python-2.10.12-3.3.7 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151544" comment="gimp-plugins-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630155" comment="libgimp-2_0-0-2.10.12-7.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151545" comment="libgimp-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630156" comment="libgimpui-2_0-0-2.10.12-7.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151546" comment="libgimpui-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5011</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5011" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5011" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5011" ref_url="https://www.suse.com/security/cve/CVE-2016-5011" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2840-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00078.html" source="SUSE-SU"/>
    <description>
    The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5011/">CVE-2016-5011</cve>
	<bugzilla href="https://bugzilla.suse.com/988361">SUSE bug 988361</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628636" comment="libblkid1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151787" comment="libblkid1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628637" comment="libblkid1-32bit-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151788" comment="libblkid1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628639" comment="libfdisk1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154114" comment="libfdisk1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628641" comment="libmount1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151789" comment="libmount1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628642" comment="libmount1-32bit-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151790" comment="libmount1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628644" comment="libsmartcols1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151791" comment="libsmartcols1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628647" comment="libuuid1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151793" comment="libuuid1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628648" comment="libuuid1-32bit-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151794" comment="libuuid1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628649" comment="util-linux-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151795" comment="util-linux is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628650" comment="util-linux-lang-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151796" comment="util-linux-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628651" comment="util-linux-systemd-2.36.2-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151797" comment="util-linux-systemd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5104</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5104" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5104" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5104" ref_url="https://www.suse.com/security/cve/CVE-2016-5104" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1639-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1526-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00029.html" source="SUSE-SU"/>
    <description>
    The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5104/">CVE-2016-5104</cve>
	<bugzilla href="https://bugzilla.suse.com/982014">SUSE bug 982014</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487355" comment="libimobiledevice6-1.2.0+git20180427.26373b3-1.40 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151904" comment="libimobiledevice6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486510" comment="libusbmuxd4-1.0.10-3.23 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153702" comment="libusbmuxd4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5105</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5105" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5105" ref_url="https://www.suse.com/security/cve/CVE-2016-5105" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5105/">CVE-2016-5105</cve>
	<bugzilla href="https://bugzilla.suse.com/982017">SUSE bug 982017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982024">SUSE bug 982024</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5106</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5106" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5106" ref_url="https://www.suse.com/security/cve/CVE-2016-5106" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5106/">CVE-2016-5106</cve>
	<bugzilla href="https://bugzilla.suse.com/982018">SUSE bug 982018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982025">SUSE bug 982025</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5107</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5107" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5107" ref_url="https://www.suse.com/security/cve/CVE-2016-5107" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5107/">CVE-2016-5107</cve>
	<bugzilla href="https://bugzilla.suse.com/982019">SUSE bug 982019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982026">SUSE bug 982026</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5108</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5108" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5108" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5108" ref_url="https://www.suse.com/security/cve/CVE-2016-5108" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1651-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00046.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5108/">CVE-2016-5108</cve>
	<bugzilla href="https://bugzilla.suse.com/984382">SUSE bug 984382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5116</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5116" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5116" ref_url="https://www.suse.com/security/cve/CVE-2016-5116" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002271.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1516-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2363-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html" source="SUSE-SU"/>
    <description>
    gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service (stack-based buffer under-read and application crash) via a long name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5116/">CVE-2016-5116</cve>
	<bugzilla href="https://bugzilla.suse.com/982176">SUSE bug 982176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5118</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5118" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5118" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5118" ref_url="https://www.suse.com/security/cve/CVE-2016-5118" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1610-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1614-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1522-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1653-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00028.html" source="SUSE-SU"/>
    <description>
    The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5118/">CVE-2016-5118</cve>
	<bugzilla href="https://bugzilla.suse.com/1000484">SUSE bug 1000484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982178">SUSE bug 982178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5126" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5126" ref_url="https://www.suse.com/security/cve/CVE-2016-5126" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    Quick Emulator(QEMU) built with the Block driver for iSCSI images support (virtio-blk) is vulnerable to a heap-based buffer overflow issue. The flaw could occur while processing iSCSI asynchronous I/O ioctl(2) calls. A user inside a guest could exploit this flaw to crash the QEMU process resulting in denial of service, or potentially leverage it to execute arbitrary code with QEMU-process privileges on the host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5126/">CVE-2016-5126</cve>
	<bugzilla href="https://bugzilla.suse.com/982285">SUSE bug 982285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982286">SUSE bug 982286</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5127</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5127" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5127" ref_url="https://www.suse.com/security/cve/CVE-2016-5127" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code involving an @import at-rule in a Cascading Style Sheets (CSS) token sequence in conjunction with a rel=import attribute of a LINK element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5127/">CVE-2016-5127</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5128</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5128" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5128" ref_url="https://www.suse.com/security/cve/CVE-2016-5128" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without setting a property, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5128/">CVE-2016-5128</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5129</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5129" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5129" ref_url="https://www.suse.com/security/cve/CVE-2016-5129" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5129/">CVE-2016-5129</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5130</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5130" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5130" ref_url="https://www.suse.com/security/cve/CVE-2016-5130" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL display via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5130/">CVE-2016-5130</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5131</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5131" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5131" ref_url="https://www.suse.com/security/cve/CVE-2016-5131" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003715.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003716.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0418-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00036.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5131/">CVE-2016-5131</cve>
	<bugzilla href="https://bugzilla.suse.com/1014873">SUSE bug 1014873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069433">SUSE bug 1069433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078813">SUSE bug 1078813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5132</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5132" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5132" ref_url="https://www.suse.com/security/cve/CVE-2016-5132" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5132/">CVE-2016-5132</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5133</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5133" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5133" ref_url="https://www.suse.com/security/cve/CVE-2016-5133" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    Google Chrome before 52.0.2743.82 mishandles origin information during proxy authentication, which allows man-in-the-middle attackers to spoof a proxy-authentication login prompt or trigger incorrect credential storage by modifying the client-server data stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5133/">CVE-2016-5133</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5134</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5134" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5134" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5134" ref_url="https://www.suse.com/security/cve/CVE-2016-5134" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    net/proxy/proxy_service.cc in the Proxy Auto-Config (PAC) feature in Google Chrome before 52.0.2743.82 does not ensure that URL information is restricted to a scheme, host, and port, which allows remote attackers to discover credentials by operating a server with a PAC script, a related issue to CVE-2016-3763.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5134/">CVE-2016-5134</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5135</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5135" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5135" ref_url="https://www.suse.com/security/cve/CVE-2016-5135" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a crafted web site, as demonstrated by a "Content-Security-Policy: referrer origin-when-cross-origin" header that overrides a "&lt;META name='referrer' content='no-referrer'&gt;" element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5135/">CVE-2016-5135</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5136</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5136" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5136" ref_url="https://www.suse.com/security/cve/CVE-2016-5136" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in extensions/renderer/user_script_injector.cc in the Extensions subsystem in Google Chrome before 52.0.2743.82 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to script deletion.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5136/">CVE-2016-5136</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5137</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5137" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5137" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5137" ref_url="https://www.suse.com/security/cve/CVE-2016-5137" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1865-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html" source="SUSE-SU"/>
    <description>
    The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 52.0.2743.82, does not apply http :80 policies to https :443 URLs and does not apply ws :80 policies to wss :443 URLs, which makes it easier for remote attackers to determine whether a specific HSTS web site has been visited by reading a CSP report.  NOTE: this vulnerability is associated with a specification change after CVE-2016-1617 resolution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5137/">CVE-2016-5137</cve>
	<bugzilla href="https://bugzilla.suse.com/989901">SUSE bug 989901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5139</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5139" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5139" ref_url="https://www.suse.com/security/cve/CVE-2016-5139" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1982-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00006.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-5139/">CVE-2016-5139</cve>
	<bugzilla href="https://bugzilla.suse.com/992305">SUSE bug 992305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992311">SUSE bug 992311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992325">SUSE bug 992325</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5140</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5140" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5140" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5140" ref_url="https://www.suse.com/security/cve/CVE-2016-5140" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1982-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00006.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the opj_j2k_read_SQcd_SQcc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JPEG 2000 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5140/">CVE-2016-5140</cve>
	<bugzilla href="https://bugzilla.suse.com/992305">SUSE bug 992305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992310">SUSE bug 992310</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992325">SUSE bug 992325</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5141</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5141" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5141" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5141" ref_url="https://www.suse.com/security/cve/CVE-2016-5141" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1982-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00006.html" source="SUSE-SU"/>
    <description>
    Blink, as used in Google Chrome before 52.0.2743.116, allows remote attackers to spoof the address bar via vectors involving a provisional URL for an initially empty document, related to FrameLoader.cpp and ScopedPageLoadDeferrer.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5141/">CVE-2016-5141</cve>
	<bugzilla href="https://bugzilla.suse.com/992305">SUSE bug 992305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992314">SUSE bug 992314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992325">SUSE bug 992325</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5142</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5142" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5142" ref_url="https://www.suse.com/security/cve/CVE-2016-5142" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1982-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00006.html" source="SUSE-SU"/>
    <description>
    The Web Cryptography API (aka WebCrypto) implementation in Blink, as used in Google Chrome before 52.0.2743.116, does not properly copy data buffers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code, related to NormalizeAlgorithm.cpp and SubtleCrypto.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5142/">CVE-2016-5142</cve>
	<bugzilla href="https://bugzilla.suse.com/992305">SUSE bug 992305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992313">SUSE bug 992313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992325">SUSE bug 992325</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5143</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5143" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5143" ref_url="https://www.suse.com/security/cve/CVE-2016-5143" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1982-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00006.html" source="SUSE-SU"/>
    <description>
    The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, which allows remote attackers to bypass intended access restrictions via a crafted URL, a different vulnerability than CVE-2016-5144.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5143/">CVE-2016-5143</cve>
	<bugzilla href="https://bugzilla.suse.com/992305">SUSE bug 992305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992319">SUSE bug 992319</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992325">SUSE bug 992325</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5144</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5144" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5144" ref_url="https://www.suse.com/security/cve/CVE-2016-5144" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1982-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00006.html" source="SUSE-SU"/>
    <description>
    The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, which allows remote attackers to bypass intended access restrictions via a crafted URL, a different vulnerability than CVE-2016-5143.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5144/">CVE-2016-5144</cve>
	<bugzilla href="https://bugzilla.suse.com/992305">SUSE bug 992305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992315">SUSE bug 992315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992325">SUSE bug 992325</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5145</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5145" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5145" ref_url="https://www.suse.com/security/cve/CVE-2016-5145" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1982-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00006.html" source="SUSE-SU"/>
    <description>
    Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object derived from a cross-origin image, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5145/">CVE-2016-5145</cve>
	<bugzilla href="https://bugzilla.suse.com/992305">SUSE bug 992305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992320">SUSE bug 992320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992325">SUSE bug 992325</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5146</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5146" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5146" ref_url="https://www.suse.com/security/cve/CVE-2016-5146" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1982-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00006.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5146/">CVE-2016-5146</cve>
	<bugzilla href="https://bugzilla.suse.com/992305">SUSE bug 992305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992309">SUSE bug 992309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992325">SUSE bug 992325</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5147</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5147" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5147" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5147" ref_url="https://www.suse.com/security/cve/CVE-2016-5147" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles deferred page loads, which allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS (UXSS)."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5147/">CVE-2016-5147</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5148</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5148" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5148" ref_url="https://www.suse.com/security/cve/CVE-2016-5148" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS (UXSS)."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5148/">CVE-2016-5148</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165149" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5149</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5149" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5149" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5149" ref_url="https://www.suse.com/security/cve/CVE-2016-5149" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    The extensions subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux relies on an IFRAME source URL to identify an associated extension, which allows remote attackers to conduct extension-bindings injection attacks by leveraging script access to a resource that initially has the about:blank URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5149/">CVE-2016-5149</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5150</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5150" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5150" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5150" ref_url="https://www.suse.com/security/cve/CVE-2016-5150" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database (aka IndexedDB) API implementation that does not properly restrict key-path evaluation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code that leverages certain side effects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5150/">CVE-2016-5150</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165151" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5151</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5151" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5151" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5151" ref_url="https://www.suse.com/security/cve/CVE-2016-5151" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted PDF document, related to fpdfsdk/javascript/JS_Object.cpp and fpdfsdk/javascript/app.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5151/">CVE-2016-5151</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165152" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5152</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5152" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5152" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5152" ref_url="https://www.suse.com/security/cve/CVE-2016-5152" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5152/">CVE-2016-5152</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5153</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5153" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5153" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5153" ref_url="https://www.suse.com/security/cve/CVE-2016-5153" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    The Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, improperly relies on list iteration, which allows remote attackers to cause a denial of service (use-after-destruction) or possibly have unspecified other impact via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5153/">CVE-2016-5153</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5154</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5154" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5154" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5154" ref_url="https://www.suse.com/security/cve/CVE-2016-5154" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JBig2 image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5154/">CVE-2016-5154</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5155</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5155" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5155" ref_url="https://www.suse.com/security/cve/CVE-2016-5155" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly validate access to the initial document, which allows remote attackers to spoof the address bar via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5155/">CVE-2016-5155</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5156</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5156" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5156" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5156" ref_url="https://www.suse.com/security/cve/CVE-2016-5156" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    extensions/renderer/event_bindings.cc in the event bindings in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux attempts to process filtered events after failure to add an event matcher, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5156/">CVE-2016-5156</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5157</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5157" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5157" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5157" ref_url="https://www.suse.com/security/cve/CVE-2016-5157" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5157/">CVE-2016-5157</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5158</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5158" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5158" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5158" ref_url="https://www.suse.com/security/cve/CVE-2016-5158" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5158/">CVE-2016-5158</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165159" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5159</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5159" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5159" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5159" ref_url="https://www.suse.com/security/cve/CVE-2016-5159" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during opj_aligned_malloc calls in dwt.c and t1.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5159/">CVE-2016-5159</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5160</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5160" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5160" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5160" ref_url="https://www.suse.com/security/cve/CVE-2016-5160" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5162.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5160/">CVE-2016-5160</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5161</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5161" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5161" ref_url="https://www.suse.com/security/cve/CVE-2016-5161" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles custom properties, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site that leverages "type confusion" in the StylePropertySerializer class.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5161/">CVE-2016-5161</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5162</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5162" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5162" ref_url="https://www.suse.com/security/cve/CVE-2016-5162" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5160.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5162/">CVE-2016-5162</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5163</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5163" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5163" ref_url="https://www.suse.com/security/cve/CVE-2016-5163" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right (LTR) rendering of URLs, which allows remote attackers to spoof the address bar via crafted right-to-left (RTL) Unicode text, related to omnibox/SuggestionView.java and omnibox/UrlBar.java in Chrome for Android.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5163/">CVE-2016-5163</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5164</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5164" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5164" ref_url="https://www.suse.com/security/cve/CVE-2016-5164" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in WebKit/Source/platform/v8_inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML into the Developer Tools (aka DevTools) subsystem via a crafted web site, aka "Universal XSS (UXSS)."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5164/">CVE-2016-5164</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5165</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5165" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5165" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5165" ref_url="https://www.suse.com/security/cve/CVE-2016-5165" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the Developer Tools (aka DevTools) subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allows remote attackers to inject arbitrary web script or HTML via the settings parameter in a chrome-devtools-frontend.appspot.com URL's query string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5165/">CVE-2016-5165</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5166</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5166" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5166" ref_url="https://www.suse.com/security/cve/CVE-2016-5166" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and conduct SMB relay attacks via a crafted web page that is accessed with the "Save page as" menu choice.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5166/">CVE-2016-5166</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5170</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5170" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5170" ref_url="https://www.suse.com/security/cve/CVE-2016-5170" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00012.html" source="SUSE-SU"/>
    <description>
    WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not properly consider getter side effects during array key conversion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Indexed Database (aka IndexedDB) API calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5170/">CVE-2016-5170</cve>
	<bugzilla href="https://bugzilla.suse.com/998743">SUSE bug 998743</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5171</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5171" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5171" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5171" ref_url="https://www.suse.com/security/cve/CVE-2016-5171" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00012.html" source="SUSE-SU"/>
    <description>
    WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not prevent certain constructor calls, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5171/">CVE-2016-5171</cve>
	<bugzilla href="https://bugzilla.suse.com/998743">SUSE bug 998743</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5172</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5172" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5172" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5172" ref_url="https://www.suse.com/security/cve/CVE-2016-5172" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00012.html" source="SUSE-SU"/>
    <description>
    The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5172/">CVE-2016-5172</cve>
	<bugzilla href="https://bugzilla.suse.com/998743">SUSE bug 998743</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5173</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5173" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5173" ref_url="https://www.suse.com/security/cve/CVE-2016-5173" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00012.html" source="SUSE-SU"/>
    <description>
    The extensions subsystem in Google Chrome before 53.0.2785.113 does not properly restrict access to Object.prototype, which allows remote attackers to load unintended resources, and consequently trigger unintended JavaScript function calls and bypass the Same Origin Policy via an indirect interception attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-5173/">CVE-2016-5173</cve>
	<bugzilla href="https://bugzilla.suse.com/998743">SUSE bug 998743</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5174</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5174" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5174" ref_url="https://www.suse.com/security/cve/CVE-2016-5174" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00012.html" source="SUSE-SU"/>
    <description>
    browser/ui/cocoa/browser_window_controller_private.mm in Google Chrome before 53.0.2785.113 does not process fullscreen toggle requests during a fullscreen transition, which allows remote attackers to cause a denial of service (unsuppressed popup) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5174/">CVE-2016-5174</cve>
	<bugzilla href="https://bugzilla.suse.com/998743">SUSE bug 998743</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5175</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5175" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5175" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5175" ref_url="https://www.suse.com/security/cve/CVE-2016-5175" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00012.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5175/">CVE-2016-5175</cve>
	<bugzilla href="https://bugzilla.suse.com/998743">SUSE bug 998743</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5177</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5177" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5177" ref_url="https://www.suse.com/security/cve/CVE-2016-5177" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2429-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2432-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00001.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5177/">CVE-2016-5177</cve>
	<bugzilla href="https://bugzilla.suse.com/1002140">SUSE bug 1002140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5178</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5178" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5178" ref_url="https://www.suse.com/security/cve/CVE-2016-5178" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2429-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2432-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00001.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5178/">CVE-2016-5178</cve>
	<bugzilla href="https://bugzilla.suse.com/1002140">SUSE bug 1002140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5180</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5180" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5180" ref_url="https://www.suse.com/security/cve/CVE-2016-5180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3286-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002529.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002530.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2752-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3006-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0082-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00055.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5180/">CVE-2016-5180</cve>
	<bugzilla href="https://bugzilla.suse.com/1007728">SUSE bug 1007728</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628330" comment="libcares2-1.17.0-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153706" comment="libcares2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5181</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5181" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5181" ref_url="https://www.suse.com/security/cve/CVE-2016-5181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00041.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution of v8 microtasks while the DOM was in an inconsistent state, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5181/">CVE-2016-5181</cve>
	<bugzilla href="https://bugzilla.suse.com/1004465">SUSE bug 1004465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5182</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5182" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5182" ref_url="https://www.suse.com/security/cve/CVE-2016-5182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00041.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially exploit heap corruption via crafted HTML pages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5182/">CVE-2016-5182</cve>
	<bugzilla href="https://bugzilla.suse.com/1004465">SUSE bug 1004465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5183</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5183" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5183" ref_url="https://www.suse.com/security/cve/CVE-2016-5183" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00041.html" source="SUSE-SU"/>
    <description>
    A heap use after free in PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android allows a remote attacker to potentially exploit heap corruption via crafted PDF files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5183/">CVE-2016-5183</cve>
	<bugzilla href="https://bugzilla.suse.com/1004465">SUSE bug 1004465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5184</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5184" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5184" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5184" ref_url="https://www.suse.com/security/cve/CVE-2016-5184" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00041.html" source="SUSE-SU"/>
    <description>
    PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles in CFFL_FormFillter::KillFocusForAnnot, which allowed a remote attacker to potentially exploit heap corruption via crafted PDF files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5184/">CVE-2016-5184</cve>
	<bugzilla href="https://bugzilla.suse.com/1004465">SUSE bug 1004465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5185</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5185" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5185" ref_url="https://www.suse.com/security/cve/CVE-2016-5185" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00041.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly allowed reentrance of FrameView::updateLifecyclePhasesInternal(), which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5185/">CVE-2016-5185</cve>
	<bugzilla href="https://bugzilla.suse.com/1004465">SUSE bug 1004465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5186</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5186" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5186" ref_url="https://www.suse.com/security/cve/CVE-2016-5186" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00041.html" source="SUSE-SU"/>
    <description>
    Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a tab crash, which allowed a remote attacker to perform an out of bounds memory read via crafted PDF files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-5186/">CVE-2016-5186</cve>
	<bugzilla href="https://bugzilla.suse.com/1004465">SUSE bug 1004465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5187</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5187" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5187" ref_url="https://www.suse.com/security/cve/CVE-2016-5187" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00041.html" source="SUSE-SU"/>
    <description>
    Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via crafted HTML pages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5187/">CVE-2016-5187</cve>
	<bugzilla href="https://bugzilla.suse.com/1004465">SUSE bug 1004465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5188</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5188" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5188" ref_url="https://www.suse.com/security/cve/CVE-2016-5188" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00041.html" source="SUSE-SU"/>
    <description>
    Multiple issues in Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux allow a remote attacker to spoof various parts of browser UI via crafted HTML pages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5188/">CVE-2016-5188</cve>
	<bugzilla href="https://bugzilla.suse.com/1004465">SUSE bug 1004465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165189" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5189</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5189" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5189" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5189" ref_url="https://www.suse.com/security/cve/CVE-2016-5189" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00041.html" source="SUSE-SU"/>
    <description>
    Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob URLs with non-canonical origins, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via crafted HTML pages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5189/">CVE-2016-5189</cve>
	<bugzilla href="https://bugzilla.suse.com/1004465">SUSE bug 1004465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5190</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5190" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5190" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5190" ref_url="https://www.suse.com/security/cve/CVE-2016-5190" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00041.html" source="SUSE-SU"/>
    <description>
    Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles during shutdown, which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-5190/">CVE-2016-5190</cve>
	<bugzilla href="https://bugzilla.suse.com/1004465">SUSE bug 1004465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5191</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5191" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5191" ref_url="https://www.suse.com/security/cve/CVE-2016-5191" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00041.html" source="SUSE-SU"/>
    <description>
    Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation of supplied data, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages, as demonstrated by an interpretation conflict between userinfo and scheme in an http://javascript:payload@example.com URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5191/">CVE-2016-5191</cve>
	<bugzilla href="https://bugzilla.suse.com/1004465">SUSE bug 1004465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5192</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5192" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5192" ref_url="https://www.suse.com/security/cve/CVE-2016-5192" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00041.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attacker to bypass cross-origin restrictions via crafted HTML pages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5192/">CVE-2016-5192</cve>
	<bugzilla href="https://bugzilla.suse.com/1004465">SUSE bug 1004465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5193</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5193" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5193" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5193" ref_url="https://www.suse.com/security/cve/CVE-2016-5193" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00041.html" source="SUSE-SU"/>
    <description>
    Google Chrome prior to 54.0 for iOS had insufficient validation of URLs for windows open by DOM, which allowed a remote attacker to bypass restrictions on navigation to certain URL schemes via crafted HTML pages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5193/">CVE-2016-5193</cve>
	<bugzilla href="https://bugzilla.suse.com/1004465">SUSE bug 1004465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5198</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5198" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5198" ref_url="https://www.suse.com/security/cve/CVE-2016-5198" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00014.html" source="SUSE-SU"/>
    <description>
    V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5198/">CVE-2016-5198</cve>
	<bugzilla href="https://bugzilla.suse.com/1008274">SUSE bug 1008274</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5199</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5199" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5199" ref_url="https://www.suse.com/security/cve/CVE-2016-5199" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2792-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00120.html" source="SUSE-SU"/>
    <description>
    An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5199/">CVE-2016-5199</cve>
	<bugzilla href="https://bugzilla.suse.com/1009892">SUSE bug 1009892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5200</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5200" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5200" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5200" ref_url="https://www.suse.com/security/cve/CVE-2016-5200" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2792-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00029.html" source="SUSE-SU"/>
    <description>
    V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectly applied type rules, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5200/">CVE-2016-5200</cve>
	<bugzilla href="https://bugzilla.suse.com/1009893">SUSE bug 1009893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5201</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5201" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5201" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5201" ref_url="https://www.suse.com/security/cve/CVE-2016-5201" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2792-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00029.html" source="SUSE-SU"/>
    <description>
    A leak of privateClass in the extensions API in Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.2840.99 for Windows, and 54.0.2840.98 for Mac allowed a remote attacker to access privileged JavaScript code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5201/">CVE-2016-5201</cve>
	<bugzilla href="https://bugzilla.suse.com/1009894">SUSE bug 1009894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5202</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5202" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5202" ref_url="https://www.suse.com/security/cve/CVE-2016-5202" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2792-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00029.html" source="SUSE-SU"/>
    <description>
    browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase() call, which causes the erase operation to access data that that erase operation will destroy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2016-5202/">CVE-2016-5202</cve>
	<bugzilla href="https://bugzilla.suse.com/1009895">SUSE bug 1009895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5203</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5203" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5203" ref_url="https://www.suse.com/security/cve/CVE-2016-5203" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5203/">CVE-2016-5203</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5204</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5204" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5204" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5204" ref_url="https://www.suse.com/security/cve/CVE-2016-5204" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5204/">CVE-2016-5204</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5205</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5205" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5205" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5205" ref_url="https://www.suse.com/security/cve/CVE-2016-5205" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5205/">CVE-2016-5205</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5206</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5206" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5206" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5206" ref_url="https://www.suse.com/security/cve/CVE-2016-5206" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5206/">CVE-2016-5206</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5207</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5207" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5207" ref_url="https://www.suse.com/security/cve/CVE-2016-5207" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could occur during the removal of a full screen element, which allowed a remote attacker to achieve arbitrary code execution via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5207/">CVE-2016-5207</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5208</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5208" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5208" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5208" ref_url="https://www.suse.com/security/cve/CVE-2016-5208" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM tree during synchronous event handling, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5208/">CVE-2016-5208</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5209</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5209" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5209" ref_url="https://www.suse.com/security/cve/CVE-2016-5209" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5209/">CVE-2016-5209</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5210</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5210" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5210" ref_url="https://www.suse.com/security/cve/CVE-2016-5210" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5210/">CVE-2016-5210</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5211</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5211" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5211" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5211" ref_url="https://www.suse.com/security/cve/CVE-2016-5211" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5211/">CVE-2016-5211</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5212</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5212" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5212" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5212" ref_url="https://www.suse.com/security/cve/CVE-2016-5212" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5212/">CVE-2016-5212</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5213</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5213" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5213" ref_url="https://www.suse.com/security/cve/CVE-2016-5213" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5213/">CVE-2016-5213</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5214</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5214" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5214" ref_url="https://www.suse.com/security/cve/CVE-2016-5214" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent the downloaded file from receiving the Mark of the Web via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5214/">CVE-2016-5214</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5215</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5215" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5215" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5215" ref_url="https://www.suse.com/security/cve/CVE-2016-5215" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-5215/">CVE-2016-5215</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5216</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5216" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5216" ref_url="https://www.suse.com/security/cve/CVE-2016-5216" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-5216/">CVE-2016-5216</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5217</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5217" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5217" ref_url="https://www.suse.com/security/cve/CVE-2016-5217" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5217/">CVE-2016-5217</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5218</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5218" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5218" ref_url="https://www.suse.com/security/cve/CVE-2016-5218" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to temporarily spoof the contents of the Omnibox (URL bar) via a crafted HTML page containing PDF data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5218/">CVE-2016-5218</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5219</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5219" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5219" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5219" ref_url="https://www.suse.com/security/cve/CVE-2016-5219" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00112.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-5219/">CVE-2016-5219</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013274">SUSE bug 1013274</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165220" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5220</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5220" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5220" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5220" ref_url="https://www.suse.com/security/cve/CVE-2016-5220" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to read local files via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5220/">CVE-2016-5220</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5221</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5221" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5221" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5221" ref_url="https://www.suse.com/security/cve/CVE-2016-5221" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-5221/">CVE-2016-5221</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5222</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5222" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5222" ref_url="https://www.suse.com/security/cve/CVE-2016-5222" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5222/">CVE-2016-5222</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5223</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5223" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5223" ref_url="https://www.suse.com/security/cve/CVE-2016-5223" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption or DoS via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5223/">CVE-2016-5223</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165224" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5224</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5224" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5224" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5224" ref_url="https://www.suse.com/security/cve/CVE-2016-5224" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5224/">CVE-2016-5224</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5225</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5225" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5225" ref_url="https://www.suse.com/security/cve/CVE-2016-5225" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled form actions, which allowed a remote attacker to bypass Content Security Policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5225/">CVE-2016-5225</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5226</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5226" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5226" ref_url="https://www.suse.com/security/cve/CVE-2016-5226" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5226/">CVE-2016-5226</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5238</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5238" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5238" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5238" ref_url="https://www.suse.com/security/cve/CVE-2016-5238" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from the information transfer buffer in non-DMA mode.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5238/">CVE-2016-5238</cve>
	<bugzilla href="https://bugzilla.suse.com/982959">SUSE bug 982959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982960">SUSE bug 982960</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5250</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5250" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5250" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5250" ref_url="https://www.suse.com/security/cve/CVE-2016-5250" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0, Firefox ESR &lt; 45.4 and Thunderbird &lt; 45.4 allow remote attackers to obtain sensitive information about the previously retrieved page via Resource Timing API calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5250/">CVE-2016-5250</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5251</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5251" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5251" ref_url="https://www.suse.com/security/cve/CVE-2016-5251" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0 allows remote attackers to spoof the location bar via crafted characters in the media type of a data: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5251/">CVE-2016-5251</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5252</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5252" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5252" ref_url="https://www.suse.com/security/cve/CVE-2016-5252" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5252/">CVE-2016-5252</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165253" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5253</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5253" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5253" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5253" ref_url="https://www.suse.com/security/cve/CVE-2016-5253" source="SUSE CVE"/>
    <description>
    The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5253/">CVE-2016-5253</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5254</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5254" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5254" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5254" ref_url="https://www.suse.com/security/cve/CVE-2016-5254" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by leveraging keyboard access to use the Alt key during selection of top-level menu items.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5254/">CVE-2016-5254</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5255</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5255" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5255" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5255" ref_url="https://www.suse.com/security/cve/CVE-2016-5255" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox before 48.0 allows remote attackers to execute arbitrary code via crafted JavaScript that is mishandled during incremental garbage collection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5255/">CVE-2016-5255</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165256" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5256</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5256" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5256" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5256" ref_url="https://www.suse.com/security/cve/CVE-2016-5256" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5256/">CVE-2016-5256</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165257" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5257</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5257" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5257" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5257" ref_url="https://www.suse.com/security/cve/CVE-2016-5257" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4 and Thunderbird &lt; 45.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5257/">CVE-2016-5257</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5258</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5258" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5258" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5258" ref_url="https://www.suse.com/security/cve/CVE-2016-5258" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5258/">CVE-2016-5258</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165259" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5259</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5259" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5259" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5259" ref_url="https://www.suse.com/security/cve/CVE-2016-5259" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5259/">CVE-2016-5259</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165260" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5260</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5260" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5260" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5260" ref_url="https://www.suse.com/security/cve/CVE-2016-5260" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"' within a single Session Manager session, which might allow attackers to discover cleartext passwords by reading a session restoration file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5260/">CVE-2016-5260</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5261</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5261" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5261" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5261" ref_url="https://www.suse.com/security/cve/CVE-2016-5261" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox before 48.0 and Firefox ESR &lt; 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets that trigger incorrect buffer-resize operations during buffering.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5261/">CVE-2016-5261</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5262</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5262" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5262" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5262" ref_url="https://www.suse.com/security/cve/CVE-2016-5262" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5262/">CVE-2016-5262</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165263" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5263</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5263" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5263" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5263" ref_url="https://www.suse.com/security/cve/CVE-2016-5263" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web site that leverages "type confusion."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5263/">CVE-2016-5263</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165264" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5264</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5264" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5264" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5264" ref_url="https://www.suse.com/security/cve/CVE-2016-5264" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG element that is mishandled during effect application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5264/">CVE-2016-5264</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5265</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5265" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5265" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5265" ref_url="https://www.suse.com/security/cve/CVE-2016-5265" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS) attacks or read arbitrary files, by arranging for the presence of a crafted HTML document and a crafted shortcut file in the same local directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5265/">CVE-2016-5265</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5266</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5266" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5266" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5266" ref_url="https://www.suse.com/security/cve/CVE-2016-5266" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0 does not properly restrict drag-and-drop (aka dataTransfer) actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5266/">CVE-2016-5266</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5267</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5267" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5267" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5267" ref_url="https://www.suse.com/security/cve/CVE-2016-5267" source="SUSE CVE"/>
    <description>
    Mozilla Firefox before 48.0 on Android allows remote attackers to spoof the address bar via left-to-right characters in conjunction with a right-to-left character set.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5267/">CVE-2016-5267</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5268</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5268" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5268" ref_url="https://www.suse.com/security/cve/CVE-2016-5268" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0 does not properly set the LINKABLE and URI_SAFE_FOR_UNTRUSTED_CONTENT flags of about: URLs that are used for error pages, which makes it easier for remote attackers to conduct spoofing attacks via a crafted URL, as demonstrated by misleading text after an about:neterror?d= substring.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5268/">CVE-2016-5268</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5270</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5270" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5270" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5270" ref_url="https://www.suse.com/security/cve/CVE-2016-5270" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 allows remote attackers to cause a denial of service (boolean out-of-bounds write) or possibly have unspecified other impact via Unicode characters that are mishandled during text conversion.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5270/">CVE-2016-5270</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5271</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5271" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5271" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5271" ref_url="https://www.suse.com/security/cve/CVE-2016-5271" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    The PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via text runs in conjunction with a "display: contents" Cascading Style Sheets (CSS) property.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5271/">CVE-2016-5271</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5272</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5272" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5272" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5272" ref_url="https://www.suse.com/security/cve/CVE-2016-5272" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    The nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 does not properly perform a cast of an unspecified variable during handling of INPUT elements, which allows remote attackers to execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5272/">CVE-2016-5272</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5273</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5273" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5273" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5273" ref_url="https://www.suse.com/security/cve/CVE-2016-5273" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    The mozilla::a11y::HyperTextAccessible::GetChildOffset function in the accessibility implementation in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5273/">CVE-2016-5273</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5274</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5274" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5274" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5274" ref_url="https://www.suse.com/security/cve/CVE-2016-5274" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 allows remote attackers to execute arbitrary code by leveraging improper interaction between restyling and the Web Animations model implementation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5274/">CVE-2016-5274</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165275" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5275</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5275" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5275" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5275" ref_url="https://www.suse.com/security/cve/CVE-2016-5275" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code by leveraging improper interaction between empty filters and CANVAS element rendering.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5275/">CVE-2016-5275</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165276" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5276</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5276" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5276" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5276" ref_url="https://www.suse.com/security/cve/CVE-2016-5276" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an aria-owns attribute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5276/">CVE-2016-5276</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5277</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5277" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5277" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5277" ref_url="https://www.suse.com/security/cve/CVE-2016-5277" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging improper interaction between timeline destruction and the Web Animations model implementation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5277/">CVE-2016-5277</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165278" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5278</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5278" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5278" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5278" ref_url="https://www.suse.com/security/cve/CVE-2016-5278" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5278/">CVE-2016-5278</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165279" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5279</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5279" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5279" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5279" ref_url="https://www.suse.com/security/cve/CVE-2016-5279" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5279/">CVE-2016-5279</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165280" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5280</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5280" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5280" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5280" ref_url="https://www.suse.com/security/cve/CVE-2016-5280" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 allows remote attackers to execute arbitrary code via bidirectional text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5280/">CVE-2016-5280</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165281" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5281</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5281" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5281" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5281" ref_url="https://www.suse.com/security/cve/CVE-2016-5281" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 allows remote attackers to execute arbitrary code by leveraging improper interaction between JavaScript code and an SVG document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5281/">CVE-2016-5281</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165282" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5282</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5282" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5282" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5282" ref_url="https://www.suse.com/security/cve/CVE-2016-5282" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a jar: URL for a favicon resource.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5282/">CVE-2016-5282</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5283</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5283" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5283" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5283" ref_url="https://www.suse.com/security/cve/CVE-2016-5283" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 49.0 allows remote attackers to bypass the Same Origin Policy via a crafted fragment identifier in the SRC attribute of an IFRAME element, leading to insufficient restrictions on link-color information after a document is resized.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5283/">CVE-2016-5283</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165284" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5284</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5284" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5284" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5284" ref_url="https://www.suse.com/security/cve/CVE-2016-5284" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org signed by an arbitrary built-in Certification Authority.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5284/">CVE-2016-5284</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165287" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5287</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5287" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5287" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5287" ref_url="https://www.suse.com/security/cve/CVE-2016-5287" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2639-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2735-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00015.html" source="SUSE-SU"/>
    <description>
    A potentially exploitable use-after-free crash during actor destruction with service workers. This issue does not affect releases earlier than Firefox 49. This vulnerability affects Firefox &lt; 49.0.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5287/">CVE-2016-5287</cve>
	<bugzilla href="https://bugzilla.suse.com/1006475">SUSE bug 1006475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5288</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5288" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5288" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5288" ref_url="https://www.suse.com/security/cve/CVE-2016-5288" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2639-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2735-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox &lt; 49.0.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5288/">CVE-2016-5288</cve>
	<bugzilla href="https://bugzilla.suse.com/1006476">SUSE bug 1006476</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5289</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5289" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5289" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5289" ref_url="https://www.suse.com/security/cve/CVE-2016-5289" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 49. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5289/">CVE-2016-5289</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010426">SUSE bug 1010426</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5290</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5290" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5290" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5290" ref_url="https://www.suse.com/security/cve/CVE-2016-5290" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00012.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 45.5, Firefox ESR &lt; 45.5, and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5290/">CVE-2016-5290</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010427">SUSE bug 1010427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5291</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5291" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5291" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5291" ref_url="https://www.suse.com/security/cve/CVE-2016-5291" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00012.html" source="SUSE-SU"/>
    <description>
    A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. This vulnerability affects Thunderbird &lt; 45.5, Firefox ESR &lt; 45.5, and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5291/">CVE-2016-5291</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010410">SUSE bug 1010410</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165292" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5292</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5292" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5292" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5292" ref_url="https://www.suse.com/security/cve/CVE-2016-5292" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    During URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5292/">CVE-2016-5292</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010399">SUSE bug 1010399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165293" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5293</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5293" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5293" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5293" ref_url="https://www.suse.com/security/cve/CVE-2016-5293" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    When the Mozilla Updater is run, if the Updater's log file in the working directory points to a hardlink, data can be appended to an arbitrary local file. This vulnerability requires local system access. Note: this issue only affects Windows operating systems. This vulnerability affects Firefox ESR &lt; 45.5 and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5293/">CVE-2016-5293</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010400">SUSE bug 1010400</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5294</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5294" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5294" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5294" ref_url="https://www.suse.com/security/cve/CVE-2016-5294" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the update process. This vulnerability requires local system access. Note: this issue only affects Windows operating systems. This vulnerability affects Thunderbird &lt; 45.5, Firefox ESR &lt; 45.5, and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5294/">CVE-2016-5294</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010396">SUSE bug 1010396</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5295</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5295" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5295" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5295" ref_url="https://www.suse.com/security/cve/CVE-2016-5295" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke the Mozilla Updater to run malicious local files. This vulnerability requires local system access and is a variant of MFSA2013-44. Note: this issue only affects Windows operating systems. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5295/">CVE-2016-5295</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010411">SUSE bug 1010411</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5296</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5296" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5296" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5296" ref_url="https://www.suse.com/security/cve/CVE-2016-5296" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00012.html" source="SUSE-SU"/>
    <description>
    A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 45.5, Firefox ESR &lt; 45.5, and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5296/">CVE-2016-5296</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010395">SUSE bug 1010395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5297</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5297" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5297" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5297" ref_url="https://www.suse.com/security/cve/CVE-2016-5297" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00012.html" source="SUSE-SU"/>
    <description>
    An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues. This vulnerability affects Thunderbird &lt; 45.5, Firefox ESR &lt; 45.5, and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5297/">CVE-2016-5297</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010401">SUSE bug 1010401</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5298</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5298" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5298" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5298" ref_url="https://www.suse.com/security/cve/CVE-2016-5298" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    A mechanism where disruption of the loading of a new web page can cause the previous page's favicon and SSL indicator to not be reset when the new page is loaded. Note: this issue only affects Firefox for Android. Desktop Firefox is unaffected. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5298/">CVE-2016-5298</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010412">SUSE bug 1010412</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165299" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5299</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5299" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5299" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5299" ref_url="https://www.suse.com/security/cve/CVE-2016-5299" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    A previously installed malicious Android application with same signature-level permissions as Firefox can intercept AuthTokens meant for Firefox only. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5299/">CVE-2016-5299</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010413">SUSE bug 1010413</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5300</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5300" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5300" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5300" ref_url="https://www.suse.com/security/cve/CVE-2016-5300" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0483-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00071.html" source="SUSE-SU"/>
    <description>
    The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5300/">CVE-2016-5300</cve>
	<bugzilla href="https://bugzilla.suse.com/983216">SUSE bug 983216</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481942" comment="expat-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481944" comment="libexpat1-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481945" comment="libexpat1-32bit-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165314" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5314</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5314" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5314" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5314" ref_url="https://www.suse.com/security/cve/CVE-2016-5314" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1889-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer with rgb2ycbcr.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5314/">CVE-2016-5314</cve>
	<bugzilla href="https://bugzilla.suse.com/984831">SUSE bug 984831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987351">SUSE bug 987351</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5316</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5316" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5316" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5316" ref_url="https://www.suse.com/security/cve/CVE-2016-5316" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1889-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
    <description>
    Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5316/">CVE-2016-5316</cve>
	<bugzilla href="https://bugzilla.suse.com/984837">SUSE bug 984837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5317</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5317" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5317" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5317" ref_url="https://www.suse.com/security/cve/CVE-2016-5317" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1889-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5317/">CVE-2016-5317</cve>
	<bugzilla href="https://bugzilla.suse.com/984842">SUSE bug 984842</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165318" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5318</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5318" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5318" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5318" ref_url="https://www.suse.com/security/cve/CVE-2016-5318" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0073-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0097-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5318/">CVE-2016-5318</cve>
	<bugzilla href="https://bugzilla.suse.com/1007276">SUSE bug 1007276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1017690">SUSE bug 1017690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1040322">SUSE bug 1040322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960341">SUSE bug 960341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/974621">SUSE bug 974621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983436">SUSE bug 983436</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165320" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5320</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5320" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5320" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5320" ref_url="https://www.suse.com/security/cve/CVE-2016-5320" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1889-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-5314.  Reason: This candidate is a reservation duplicate of CVE-2016-5314.  Notes: All CVE users should reference CVE-2016-5314 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-5320/">CVE-2016-5320</cve>
	<bugzilla href="https://bugzilla.suse.com/1007284">SUSE bug 1007284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984808">SUSE bug 984808</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987351">SUSE bug 987351</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165321" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5321</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5321" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5321" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5321" ref_url="https://www.suse.com/security/cve/CVE-2016-5321" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service (invalid read and crash) via a crafted tiff image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5321/">CVE-2016-5321</cve>
	<bugzilla href="https://bugzilla.suse.com/984813">SUSE bug 984813</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165323" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5323</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5323" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5323" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5323" ref_url="https://www.suse.com/security/cve/CVE-2016-5323" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted Tiff image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5323/">CVE-2016-5323</cve>
	<bugzilla href="https://bugzilla.suse.com/984815">SUSE bug 984815</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165337" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5337</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5337" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5337" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5337" ref_url="https://www.suse.com/security/cve/CVE-2016-5337" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5337/">CVE-2016-5337</cve>
	<bugzilla href="https://bugzilla.suse.com/983961">SUSE bug 983961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983973">SUSE bug 983973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5338</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5338" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5338" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5338" ref_url="https://www.suse.com/security/cve/CVE-2016-5338" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest OS administrators to cause a denial of service (QEMU process crash) or execute arbitrary code on the QEMU host via vectors related to the information transfer buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5338/">CVE-2016-5338</cve>
	<bugzilla href="https://bugzilla.suse.com/983982">SUSE bug 983982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983984">SUSE bug 983984</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5387</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5387" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5387" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5387" ref_url="https://www.suse.com/security/cve/CVE-2016-5387" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002213.html" source="SUSE-SU"/>
		<reference ref_id="TID7017856" ref_url="https://www.suse.com/support/kb/doc/?id=7017856" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2115-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00084.html" source="SUSE-SU"/>
    <description>
    The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.  NOTE: the vendor states "This mitigation has been assigned the identifier CVE-2016-5387"; in other words, this is not a CVE ID for a vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5387/">CVE-2016-5387</cve>
	<bugzilla href="https://bugzilla.suse.com/988484">SUSE bug 988484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988486">SUSE bug 988486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988487">SUSE bug 988487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988488">SUSE bug 988488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988489">SUSE bug 988489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988491">SUSE bug 988491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988492">SUSE bug 988492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989125">SUSE bug 989125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989174">SUSE bug 989174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989684">SUSE bug 989684</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165403" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5403</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5403" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5403" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5403" ref_url="https://www.suse.com/security/cve/CVE-2016-5403" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5403/">CVE-2016-5403</cve>
	<bugzilla href="https://bugzilla.suse.com/990923">SUSE bug 990923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991080">SUSE bug 991080</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5407</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5407" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5407" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5407" ref_url="https://www.suse.com/security/cve/CVE-2016-5407" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002477.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2600-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3033-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00047.html" source="SUSE-SU"/>
    <description>
    The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5407/">CVE-2016-5407</cve>
	<bugzilla href="https://bugzilla.suse.com/1003017">SUSE bug 1003017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123148">SUSE bug 1123148</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480441" comment="libXv1-1.0.11-1.23 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151844" comment="libXv1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5410</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5410" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5410" ref_url="https://www.suse.com/security/cve/CVE-2016-5410" source="SUSE CVE"/>
    <description>
    firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) addEntry, (4) removeEntry, or (5) setEntries D-Bus API method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5410/">CVE-2016-5410</cve>
	<bugzilla href="https://bugzilla.suse.com/992772">SUSE bug 992772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628440" comment="firewall-macros-0.9.3-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177225" comment="firewall-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628441" comment="firewalld-0.9.3-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177226" comment="firewalld is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628442" comment="firewalld-lang-0.9.3-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177227" comment="firewalld-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628443" comment="python3-firewall-0.9.3-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177228" comment="python3-firewall is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5417</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5417" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5417" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5417" ref_url="https://www.suse.com/security/cve/CVE-2016-5417" source="SUSE CVE"/>
    <description>
    Memory leak in the __res_vinit function in the IPv6 name server management code in libresolv in GNU C Library (aka glibc or libc6) before 2.24 allows remote attackers to cause a denial of service (memory consumption) by leveraging partial initialization of internal resolver data structures.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5417/">CVE-2016-5417</cve>
	<bugzilla href="https://bugzilla.suse.com/991670">SUSE bug 991670</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5418</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5418" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5418" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5418" ref_url="https://www.suse.com/security/cve/CVE-2016-5418" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3005-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00030.html" source="SUSE-SU"/>
    <description>
    The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5418/">CVE-2016-5418</cve>
	<bugzilla href="https://bugzilla.suse.com/998677">SUSE bug 998677</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5440</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5440" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5440" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5440" ref_url="https://www.suse.com/security/cve/CVE-2016-5440" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2278-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5440/">CVE-2016-5440</cve>
	<bugzilla href="https://bugzilla.suse.com/989926">SUSE bug 989926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991616">SUSE bug 991616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5501</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5501" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5501" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5501" ref_url="https://www.suse.com/security/cve/CVE-2016-5501" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2623-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2935-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0270-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00136.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core, a different vulnerability than CVE-2016-5538.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5501/">CVE-2016-5501</cve>
	<bugzilla href="https://bugzilla.suse.com/1005621">SUSE bug 1005621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5538</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5538" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5538" ref_url="https://www.suse.com/security/cve/CVE-2016-5538" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2623-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2935-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0270-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00136.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core, a different vulnerability than CVE-2016-5501.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.7/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5538/">CVE-2016-5538</cve>
	<bugzilla href="https://bugzilla.suse.com/1005621">SUSE bug 1005621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5545</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5545" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5545" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5545" ref_url="https://www.suse.com/security/cve/CVE-2016-5545" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00004.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-5545/">CVE-2016-5545</cve>
	<bugzilla href="https://bugzilla.suse.com/1020856">SUSE bug 1020856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165584" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5584</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5584" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5584" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5584" ref_url="https://www.suse.com/security/cve/CVE-2016-5584" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2932-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5584/">CVE-2016-5584</cve>
	<bugzilla href="https://bugzilla.suse.com/1005558">SUSE bug 1005558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008318">SUSE bug 1008318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165605" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5605</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5605" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5605" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5605" ref_url="https://www.suse.com/security/cve/CVE-2016-5605" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2623-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2935-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0270-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00136.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component before 5.1.4 in Oracle Virtualization allows remote attackers to affect confidentiality and integrity via vectors related to VRDE.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5605/">CVE-2016-5605</cve>
	<bugzilla href="https://bugzilla.suse.com/1005621">SUSE bug 1005621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165608" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5608</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5608" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5608" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5608" ref_url="https://www.suse.com/security/cve/CVE-2016-5608" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2623-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2935-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0270-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00136.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors related to Core, a different vulnerability than CVE-2016-5613.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5608/">CVE-2016-5608</cve>
	<bugzilla href="https://bugzilla.suse.com/1005621">SUSE bug 1005621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165610" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5610</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5610" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5610" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5610" ref_url="https://www.suse.com/security/cve/CVE-2016-5610" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2623-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2935-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0270-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00136.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-5610/">CVE-2016-5610</cve>
	<bugzilla href="https://bugzilla.suse.com/1005621">SUSE bug 1005621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165611" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5611</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5611" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5611" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5611" ref_url="https://www.suse.com/security/cve/CVE-2016-5611" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2623-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2935-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0270-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00136.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality via vectors related to Core.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5611/">CVE-2016-5611</cve>
	<bugzilla href="https://bugzilla.suse.com/1005621">SUSE bug 1005621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5624</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5624" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5624" ref_url="https://www.suse.com/security/cve/CVE-2016-5624" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2932-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5624/">CVE-2016-5624</cve>
	<bugzilla href="https://bugzilla.suse.com/1005564">SUSE bug 1005564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008318">SUSE bug 1008318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165626" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5626</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5626" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5626" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5626" ref_url="https://www.suse.com/security/cve/CVE-2016-5626" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2932-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5626/">CVE-2016-5626</cve>
	<bugzilla href="https://bugzilla.suse.com/1005566">SUSE bug 1005566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008318">SUSE bug 1008318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5629</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5629" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5629" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5629" ref_url="https://www.suse.com/security/cve/CVE-2016-5629" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2932-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5629/">CVE-2016-5629</cve>
	<bugzilla href="https://bugzilla.suse.com/1005569">SUSE bug 1005569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008318">SUSE bug 1008318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5636</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5636" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5636" ref_url="https://www.suse.com/security/cve/CVE-2016-5636" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002407.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1885-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5636/">CVE-2016-5636</cve>
	<bugzilla href="https://bugzilla.suse.com/1065451">SUSE bug 1065451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106262">SUSE bug 1106262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/985177">SUSE bug 985177</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5652</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5652" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5652" ref_url="https://www.suse.com/security/cve/CVE-2016-5652" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TIFF document can lead to a heap-based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved TIFF file delivered by other means.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5652/">CVE-2016-5652</cve>
	<bugzilla href="https://bugzilla.suse.com/1007280">SUSE bug 1007280</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5699</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5699" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5699" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5699" ref_url="https://www.suse.com/security/cve/CVE-2016-5699" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002263.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002407.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1885-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    It was found that the Python's httplib library (used by urllib, urllib2 and others) did not properly check HTTPConnection.putheader() function arguments. An attacker could use this flaw to inject additional headers in a Python application that allowed user provided header names or values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5699/">CVE-2016-5699</cve>
	<bugzilla href="https://bugzilla.suse.com/1122729">SUSE bug 1122729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130840">SUSE bug 1130840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/985348">SUSE bug 985348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/985351">SUSE bug 985351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986630">SUSE bug 986630</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5735</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5735" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5735" ref_url="https://www.suse.com/security/cve/CVE-2016-5735" source="SUSE CVE"/>
    <description>
    Integer overflow in the rwpng_read_image24_libpng function in rwpng.c in pngquant 2.7.0 allows remote attackers to have unspecified impact via a crafted PNG file, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5735/">CVE-2016-5735</cve>
	<bugzilla href="https://bugzilla.suse.com/1173616">SUSE bug 1173616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482352" comment="libpng16-16-1.6.34-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482353" comment="libpng16-16-32bit-1.6.34-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165759" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5759</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5759" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5759" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5759" ref_url="https://www.suse.com/security/cve/CVE-2016-5759" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002337.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00083.html" source="SUSE-SU"/>
    <description>
    The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5759/">CVE-2016-5759</cve>
	<bugzilla href="https://bugzilla.suse.com/990200">SUSE bug 990200</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628528" comment="kdump-0.9.0-16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153744" comment="kdump is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5766</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5766" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5766" ref_url="https://www.suse.com/security/cve/CVE-2016-5766" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2013-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003246.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1761-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1922-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2337-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2366-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00016.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5766/">CVE-2016-5766</cve>
	<bugzilla href="https://bugzilla.suse.com/986386">SUSE bug 986386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5824</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5824" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5824" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5824" ref_url="https://www.suse.com/security/cve/CVE-2016-5824" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1989-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00069.html" source="SUSE-SU"/>
    <description>
    libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5824/">CVE-2016-5824</cve>
	<bugzilla href="https://bugzilla.suse.com/1015964">SUSE bug 1015964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122983">SUSE bug 1122983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986631">SUSE bug 986631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986639">SUSE bug 986639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986642">SUSE bug 986642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986658">SUSE bug 986658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684236" comment="libical-glib3-3.0.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695537" comment="libical-glib3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628746" comment="libical3-3.0.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695538" comment="libical3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5827</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5827" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5827" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5827" ref_url="https://www.suse.com/security/cve/CVE-2016-5827" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1989-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003605.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00108.html" source="SUSE-SU"/>
    <description>
    The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted string to the icalparser_parse_string function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5827/">CVE-2016-5827</cve>
	<bugzilla href="https://bugzilla.suse.com/986631">SUSE bug 986631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986639">SUSE bug 986639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986642">SUSE bug 986642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986658">SUSE bug 986658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684236" comment="libical-glib3-3.0.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695537" comment="libical-glib3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628746" comment="libical3-3.0.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695538" comment="libical3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5844</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5844" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5844" ref_url="https://www.suse.com/security/cve/CVE-2016-5844" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3005-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00030.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5844/">CVE-2016-5844</cve>
	<bugzilla href="https://bugzilla.suse.com/986566">SUSE bug 986566</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165875" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5875</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5875" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5875" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5875" ref_url="https://www.suse.com/security/cve/CVE-2016-5875" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1889-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-5314.  Reason: This candidate is a reservation duplicate of CVE-2016-5314.  Notes: All CVE users should reference CVE-2016-5314 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-5875/">CVE-2016-5875</cve>
	<bugzilla href="https://bugzilla.suse.com/1007284">SUSE bug 1007284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984809">SUSE bug 984809</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984831">SUSE bug 984831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987351">SUSE bug 987351</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6128</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6128" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6128" ref_url="https://www.suse.com/security/cve/CVE-2016-6128" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2460-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2071-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2117-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2363-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00004.html" source="SUSE-SU"/>
    <description>
    The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service (application crash) via an invalid color index.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6128/">CVE-2016-6128</cve>
	<bugzilla href="https://bugzilla.suse.com/987580">SUSE bug 987580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991710">SUSE bug 991710</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6132</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6132" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6132" ref_url="https://www.suse.com/security/cve/CVE-2016-6132" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002271.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2117-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2363-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html" source="SUSE-SU"/>
    <description>
    The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6132/">CVE-2016-6132</cve>
	<bugzilla href="https://bugzilla.suse.com/987577">SUSE bug 987577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991436">SUSE bug 991436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/995034">SUSE bug 995034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6170</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6170" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6170" ref_url="https://www.suse.com/security/cve/CVE-2016-6170" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0999-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002797.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1063-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00022.html" source="SUSE-SU"/>
    <description>
    ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6170/">CVE-2016-6170</cve>
	<bugzilla href="https://bugzilla.suse.com/1028603">SUSE bug 1028603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987866">SUSE bug 987866</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6207</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6207" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6207" ref_url="https://www.suse.com/security/cve/CVE-2016-6207" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2460-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2071-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2117-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2363-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6207/">CVE-2016-6207</cve>
	<bugzilla href="https://bugzilla.suse.com/991434">SUSE bug 991434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991622">SUSE bug 991622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6210</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6210" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6210" ref_url="https://www.suse.com/security/cve/CVE-2016-6210" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002265.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002338.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2339-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00068.html" source="SUSE-SU"/>
    <description>
    sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6210/">CVE-2016-6210</cve>
	<bugzilla href="https://bugzilla.suse.com/1001712">SUSE bug 1001712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105010">SUSE bug 1105010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138392">SUSE bug 1138392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989363">SUSE bug 989363</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628954" comment="openssh-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628955" comment="openssh-clients-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659235" comment="openssh-clients is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628956" comment="openssh-common-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659236" comment="openssh-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628958" comment="openssh-server-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659237" comment="openssh-server is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6214</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6214" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6214" ref_url="https://www.suse.com/security/cve/CVE-2016-6214" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002271.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2117-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2363-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html" source="SUSE-SU"/>
    <description>
    gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6214/">CVE-2016-6214</cve>
	<bugzilla href="https://bugzilla.suse.com/987577">SUSE bug 987577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991436">SUSE bug 991436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/995034">SUSE bug 995034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6223</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6223" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6223" ref_url="https://www.suse.com/security/cve/CVE-2016-6223" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00061.html" source="SUSE-SU"/>
    <description>
    The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6223/">CVE-2016-6223</cve>
	<bugzilla href="https://bugzilla.suse.com/990460">SUSE bug 990460</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6250</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6250" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6250" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6250" ref_url="https://www.suse.com/security/cve/CVE-2016-6250" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3005-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00030.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-6250/">CVE-2016-6250</cve>
	<bugzilla href="https://bugzilla.suse.com/989980">SUSE bug 989980</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6255</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6255" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6255" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6255" ref_url="https://www.suse.com/security/cve/CVE-2016-6255" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1485-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00006.html" source="SUSE-SU"/>
    <description>
    Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-6255/">CVE-2016-6255</cve>
	<bugzilla href="https://bugzilla.suse.com/989948">SUSE bug 989948</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694852" comment="libixml11-1.14.0-bp153.1.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695539" comment="libixml11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694853" comment="libupnp17-1.14.0-bp153.1.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695540" comment="libupnp17 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6258</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6258" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6258" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6258" ref_url="https://www.suse.com/security/cve/CVE-2016-6258" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6258/">CVE-2016-6258</cve>
	<bugzilla href="https://bugzilla.suse.com/1072198">SUSE bug 1072198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1072223">SUSE bug 1072223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988675">SUSE bug 988675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988692">SUSE bug 988692</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166259" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6259</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6259" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6259" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6259" ref_url="https://www.suse.com/security/cve/CVE-2016-6259" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6259/">CVE-2016-6259</cve>
	<bugzilla href="https://bugzilla.suse.com/988676">SUSE bug 988676</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988694">SUSE bug 988694</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6261</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6261" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6261" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6261" ref_url="https://www.suse.com/security/cve/CVE-2016-6261" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002269.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html" source="SUSE-SU"/>
    <description>
    The idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via 64 bytes of input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6261/">CVE-2016-6261</cve>
	<bugzilla href="https://bugzilla.suse.com/1118435">SUSE bug 1118435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173590">SUSE bug 1173590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990190">SUSE bug 990190</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482248" comment="libidn11-1.34-3.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152668" comment="libidn11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628747" comment="libidn2-0-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177212" comment="libidn2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628748" comment="libidn2-0-32bit-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177213" comment="libidn2-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694851" comment="libidn2-lang-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009273026" comment="libidn2-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6262</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6262" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6262" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6262" ref_url="https://www.suse.com/security/cve/CVE-2016-6262" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002269.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html" source="SUSE-SU"/>
    <description>
    idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6262/">CVE-2016-6262</cve>
	<bugzilla href="https://bugzilla.suse.com/1014473">SUSE bug 1014473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173590">SUSE bug 1173590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190777">SUSE bug 1190777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990189">SUSE bug 990189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482248" comment="libidn11-1.34-3.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152668" comment="libidn11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628747" comment="libidn2-0-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177212" comment="libidn2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628748" comment="libidn2-0-32bit-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177213" comment="libidn2-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694851" comment="libidn2-lang-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009273026" comment="libidn2-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166263" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6263</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6263" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6263" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6263" ref_url="https://www.suse.com/security/cve/CVE-2016-6263" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002269.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html" source="SUSE-SU"/>
    <description>
    The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted UTF-8 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6263/">CVE-2016-6263</cve>
	<bugzilla href="https://bugzilla.suse.com/1118435">SUSE bug 1118435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990191">SUSE bug 990191</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482248" comment="libidn11-1.34-3.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152668" comment="libidn11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628747" comment="libidn2-0-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177212" comment="libidn2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628748" comment="libidn2-0-32bit-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177213" comment="libidn2-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694851" comment="libidn2-lang-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009273026" comment="libidn2-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6301</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6301" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6301" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6301" ref_url="https://www.suse.com/security/cve/CVE-2016-6301" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6301/">CVE-2016-6301</cve>
	<bugzilla href="https://bugzilla.suse.com/991940">SUSE bug 991940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152555" comment="busybox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653584" comment="busybox-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6302</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6302" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6302" ref_url="https://www.suse.com/security/cve/CVE-2016-6302" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6302/">CVE-2016-6302</cve>
	<bugzilla href="https://bugzilla.suse.com/1004104">SUSE bug 1004104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994844">SUSE bug 994844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/995324">SUSE bug 995324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166303" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6303</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6303" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6303" ref_url="https://www.suse.com/security/cve/CVE-2016-6303" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6303/">CVE-2016-6303</cve>
	<bugzilla href="https://bugzilla.suse.com/1004104">SUSE bug 1004104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994844">SUSE bug 994844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/995377">SUSE bug 995377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6304</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6304" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6304" ref_url="https://www.suse.com/security/cve/CVE-2016-6304" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6304/">CVE-2016-6304</cve>
	<bugzilla href="https://bugzilla.suse.com/1001706">SUSE bug 1001706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1003811">SUSE bug 1003811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004104">SUSE bug 1004104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1005579">SUSE bug 1005579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021375">SUSE bug 1021375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999666">SUSE bug 999666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166306" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6306</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6306" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6306" ref_url="https://www.suse.com/security/cve/CVE-2016-6306" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-17"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6306/">CVE-2016-6306</cve>
	<bugzilla href="https://bugzilla.suse.com/1004104">SUSE bug 1004104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999668">SUSE bug 999668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6313</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6313" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6313" ref_url="https://www.suse.com/security/cve/CVE-2016-6313" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002281.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2208-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00108.html" source="SUSE-SU"/>
    <description>
    The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6313/">CVE-2016-6313</cve>
	<bugzilla href="https://bugzilla.suse.com/1123792">SUSE bug 1123792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994157">SUSE bug 994157</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482233" comment="libgcrypt20-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482234" comment="libgcrypt20-32bit-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166318" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6318</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6318" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6318" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6318" ref_url="https://www.suse.com/security/cve/CVE-2016-6318" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002248.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00122.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) or gain privileges via a long GECOS field, involving longbuffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6318/">CVE-2016-6318</cve>
	<bugzilla href="https://bugzilla.suse.com/1123113">SUSE bug 1123113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992966">SUSE bug 992966</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628370" comment="cracklib-2.9.7-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153761" comment="cracklib is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628373" comment="libcrack2-2.9.7-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153765" comment="libcrack2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628374" comment="libcrack2-32bit-2.9.7-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153766" comment="libcrack2-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166321" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6321</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6321" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6321" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6321" ref_url="https://www.suse.com/security/cve/CVE-2016-6321" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2895-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002417.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2874-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3003-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00028.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-6321/">CVE-2016-6321</cve>
	<bugzilla href="https://bugzilla.suse.com/1007188">SUSE bug 1007188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123796">SUSE bug 1123796</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629031" comment="tar-1.30-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151391" comment="tar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629032" comment="tar-lang-1.30-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151392" comment="tar-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629033" comment="tar-rmt-1.30-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177166" comment="tar-rmt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166323" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6323</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6323" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6323" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6323" ref_url="https://www.suse.com/security/cve/CVE-2016-6323" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2443-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00009.html" source="SUSE-SU"/>
    <description>
    The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6323/">CVE-2016-6323</cve>
	<bugzilla href="https://bugzilla.suse.com/994359">SUSE bug 994359</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166328" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6328</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6328" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6328" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6328" ref_url="https://www.suse.com/security/cve/CVE-2016-6328" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003625.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007105.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0211-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html" source="SUSE-SU"/>
    <description>
    A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata, even other applications' private data).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-6328/">CVE-2016-6328</cve>
	<bugzilla href="https://bugzilla.suse.com/1055857">SUSE bug 1055857</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629201" comment="libexif12-0.6.22-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6351</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6351" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6351" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6351" ref_url="https://www.suse.com/security/cve/CVE-2016-6351" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP/NCR53C9x controller emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or execute arbitrary code on the QEMU host via vectors involving DMA read into ESP command buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6351/">CVE-2016-6351</cve>
	<bugzilla href="https://bugzilla.suse.com/990835">SUSE bug 990835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990843">SUSE bug 990843</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6352</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6352" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6352" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6352" ref_url="https://www.suse.com/security/cve/CVE-2016-6352" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002333.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00040.html" source="SUSE-SU"/>
    <description>
    The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via crafted dimensions in an ICO file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6352/">CVE-2016-6352</cve>
	<bugzilla href="https://bugzilla.suse.com/1027024">SUSE bug 1027024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991450">SUSE bug 991450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628451" comment="gdk-pixbuf-lang-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628452" comment="gdk-pixbuf-query-loaders-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628453" comment="gdk-pixbuf-thumbnailer-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177170" comment="gdk-pixbuf-thumbnailer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628454" comment="libgdk_pixbuf-2_0-0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628455" comment="typelib-1_0-GdkPixbuf-2_0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6354</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6354" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6354" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6354" ref_url="https://www.suse.com/security/cve/CVE-2016-6354" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2397-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002925.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2167-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2182-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00112.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2450-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00001.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6354/">CVE-2016-6354</cve>
	<bugzilla href="https://bugzilla.suse.com/1026047">SUSE bug 1026047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990856">SUSE bug 990856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6489</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6489" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6489" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6489" ref_url="https://www.suse.com/security/cve/CVE-2016-6489" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002936.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1533-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00032.html" source="SUSE-SU"/>
    <description>
    The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6489/">CVE-2016-6489</cve>
	<bugzilla href="https://bugzilla.suse.com/991464">SUSE bug 991464</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628741" comment="libhogweed4-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177221" comment="libhogweed4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628742" comment="libhogweed4-32bit-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009242425" comment="libhogweed4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628744" comment="libnettle6-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177222" comment="libnettle6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628745" comment="libnettle6-32bit-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009242426" comment="libnettle6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6490</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6490" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6490" ref_url="https://www.suse.com/security/cve/CVE-2016-6490" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the descriptor buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6490/">CVE-2016-6490</cve>
	<bugzilla href="https://bugzilla.suse.com/991466">SUSE bug 991466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/993854">SUSE bug 993854</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6515</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6515" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6515" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6515" ref_url="https://www.suse.com/security/cve/CVE-2016-6515" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002265.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002338.html" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2339-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00068.html" source="SUSE-SU"/>
    <description>
    The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6515/">CVE-2016-6515</cve>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992533">SUSE bug 992533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628954" comment="openssh-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628955" comment="openssh-clients-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659235" comment="openssh-clients is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628956" comment="openssh-common-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659236" comment="openssh-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628958" comment="openssh-server-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659237" comment="openssh-server is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166662" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6662</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6662" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6662" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6662" ref_url="https://www.suse.com/security/cve/CVE-2016-6662" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
    <description>
    Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6662/">CVE-2016-6662</cve>
	<bugzilla href="https://bugzilla.suse.com/1001367">SUSE bug 1001367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1005580">SUSE bug 1005580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020873">SUSE bug 1020873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020884">SUSE bug 1020884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021755">SUSE bug 1021755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998309">SUSE bug 998309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6663</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6663" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6663" ref_url="https://www.suse.com/security/cve/CVE-2016-6663" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2932-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17 allows local users with certain permissions to gain privileges by leveraging use of my_copystat by REPAIR TABLE to repair a MyISAM table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6663/">CVE-2016-6663</cve>
	<bugzilla href="https://bugzilla.suse.com/1001367">SUSE bug 1001367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008253">SUSE bug 1008253</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008318">SUSE bug 1008318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021755">SUSE bug 1021755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998309">SUSE bug 998309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6664</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6664" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6664" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6664" ref_url="https://www.suse.com/security/cve/CVE-2016-6664" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
    <description>
    mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6664/">CVE-2016-6664</cve>
	<bugzilla href="https://bugzilla.suse.com/1008253">SUSE bug 1008253</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020873">SUSE bug 1020873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998309">SUSE bug 998309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6833</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6833" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6833" ref_url="https://www.suse.com/security/cve/CVE-2016-6833" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU instance crash) by leveraging failure to check if the device is active.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6833/">CVE-2016-6833</cve>
	<bugzilla href="https://bugzilla.suse.com/994774">SUSE bug 994774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994775">SUSE bug 994775</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6836</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6836" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6836" ref_url="https://www.suse.com/security/cve/CVE-2016-6836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcq_descr object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6836/">CVE-2016-6836</cve>
	<bugzilla href="https://bugzilla.suse.com/994760">SUSE bug 994760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994761">SUSE bug 994761</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6855</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6855" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6855" ref_url="https://www.suse.com/security/cve/CVE-2016-6855" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002405.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2242-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6855/">CVE-2016-6855</cve>
	<bugzilla href="https://bugzilla.suse.com/994819">SUSE bug 994819</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487201" comment="eog-3.34.2-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151978" comment="eog is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487203" comment="eog-lang-3.34.2-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151980" comment="eog-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166888" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6888</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6888" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6888" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6888" ref_url="https://www.suse.com/security/cve/CVE-2016-6888" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6888/">CVE-2016-6888</cve>
	<bugzilla href="https://bugzilla.suse.com/994771">SUSE bug 994771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994772">SUSE bug 994772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6905</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6905" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6905" ref_url="https://www.suse.com/security/cve/CVE-2016-6905" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002271.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2203-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2363-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html" source="SUSE-SU"/>
    <description>
    The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6905/">CVE-2016-6905</cve>
	<bugzilla href="https://bugzilla.suse.com/995034">SUSE bug 995034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166912" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6912</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6912" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6912" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6912" ref_url="https://www.suse.com/security/cve/CVE-2016-6912" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002645.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0548-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00101.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6912/">CVE-2016-6912</cve>
	<bugzilla href="https://bugzilla.suse.com/1022284">SUSE bug 1022284</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7032</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7032" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7032" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7032" ref_url="https://www.suse.com/security/cve/CVE-2016-7032" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002420.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2878-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2983-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3004-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00029.html" source="SUSE-SU"/>
    <description>
    sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7032/">CVE-2016-7032</cve>
	<bugzilla href="https://bugzilla.suse.com/1007501">SUSE bug 1007501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007766">SUSE bug 1007766</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011975">SUSE bug 1011975</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011976">SUSE bug 1011976</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629025" comment="sudo-1.9.5p2-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629027" comment="sudo-plugin-python-1.9.5p2-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695524" comment="sudo-plugin-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7052</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7052" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7052" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7052" ref_url="https://www.suse.com/security/cve/CVE-2016-7052" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7052/">CVE-2016-7052</cve>
	<bugzilla href="https://bugzilla.suse.com/1001148">SUSE bug 1001148</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7055</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7055" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7055" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7055" ref_url="https://www.suse.com/security/cve/CVE-2016-7055" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0431-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0481-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0941-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is because the subroutine in question is not used in operations with the private key itself and an input of the attacker's direct choice. Otherwise the bug can manifest itself as transient authentication and key negotiation failures or reproducible erroneous outcome of public-key operations with specially crafted input. Among EC algorithms only Brainpool P-512 curves are affected and one presumably can attack ECDH key negotiation. Impact was not analyzed in detail, because pre-requisites for attack are considered unlikely. Namely multiple clients have to choose the curve in question and the server has to share the private key among them, neither of which is default behaviour. Even then only clients that chose the curve will be affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7055/">CVE-2016-7055</cve>
	<bugzilla href="https://bugzilla.suse.com/1009528">SUSE bug 1009528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021641">SUSE bug 1021641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7056</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7056" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7056" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7056" ref_url="https://www.suse.com/security/cve/CVE-2016-7056" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0409-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0487-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1211-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    A timing attack flaw was found in OpenSSL that could allow a malicious user with local access to recover ECDSA P-256 private keys.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7056/">CVE-2016-7056</cve>
	<bugzilla href="https://bugzilla.suse.com/1005878">SUSE bug 1005878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1019334">SUSE bug 1019334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148697">SUSE bug 1148697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7076</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7076" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7076" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7076" ref_url="https://www.suse.com/security/cve/CVE-2016-7076" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002420.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2878-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2983-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3004-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00029.html" source="SUSE-SU"/>
    <description>
    sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to execute arbitrary commands with elevated privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7076/">CVE-2016-7076</cve>
	<bugzilla href="https://bugzilla.suse.com/1007501">SUSE bug 1007501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011975">SUSE bug 1011975</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011976">SUSE bug 1011976</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629025" comment="sudo-1.9.5p2-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629027" comment="sudo-plugin-python-1.9.5p2-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695524" comment="sudo-plugin-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7092</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7092" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7092" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7092" ref_url="https://www.suse.com/security/cve/CVE-2016-7092" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7092/">CVE-2016-7092</cve>
	<bugzilla href="https://bugzilla.suse.com/995785">SUSE bug 995785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7093</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7093" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7093" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7093" ref_url="https://www.suse.com/security/cve/CVE-2016-7093" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7093/">CVE-2016-7093</cve>
	<bugzilla href="https://bugzilla.suse.com/995789">SUSE bug 995789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7094</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7094" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7094" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7094" ref_url="https://www.suse.com/security/cve/CVE-2016-7094" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7094/">CVE-2016-7094</cve>
	<bugzilla href="https://bugzilla.suse.com/995792">SUSE bug 995792</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7116</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7116" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7116" ref_url="https://www.suse.com/security/cve/CVE-2016-7116" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to access host files outside the export path via a .. (dot dot) in an unspecified string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7116/">CVE-2016-7116</cve>
	<bugzilla href="https://bugzilla.suse.com/996441">SUSE bug 996441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7155</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7155" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7155" ref_url="https://www.suse.com/security/cve/CVE-2016-7155" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or infinite loop, and QEMU process crash) via a crafted page count for descriptor rings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7155/">CVE-2016-7155</cve>
	<bugzilla href="https://bugzilla.suse.com/997858">SUSE bug 997858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7156</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7156" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7156" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7156" ref_url="https://www.suse.com/security/cve/CVE-2016-7156" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging an incorrect cast.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7156/">CVE-2016-7156</cve>
	<bugzilla href="https://bugzilla.suse.com/997859">SUSE bug 997859</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7157</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7157" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7157" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7157" ref_url="https://www.suse.com/security/cve/CVE-2016-7157" source="SUSE CVE"/>
    <description>
    The (1) mptsas_config_manufacturing_1 and (2) mptsas_config_ioc_0 functions in hw/scsi/mptconfig.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via vectors involving MPTSAS_CONFIG_PACK.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7157/">CVE-2016-7157</cve>
	<bugzilla href="https://bugzilla.suse.com/997860">SUSE bug 997860</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7161</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7161" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7161" ref_url="https://www.suse.com/security/cve/CVE-2016-7161" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7161/">CVE-2016-7161</cve>
	<bugzilla href="https://bugzilla.suse.com/1001151">SUSE bug 1001151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1001152">SUSE bug 1001152</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7163</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7163" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7163" ref_url="https://www.suse.com/security/cve/CVE-2016-7163" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2144-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003133.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2186-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00082.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7163/">CVE-2016-7163</cve>
	<bugzilla href="https://bugzilla.suse.com/1007739">SUSE bug 1007739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007744">SUSE bug 1007744</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/997857">SUSE bug 997857</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7167</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7167" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7167" ref_url="https://www.suse.com/security/cve/CVE-2016-7167" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7167/">CVE-2016-7167</cve>
	<bugzilla href="https://bugzilla.suse.com/998760">SUSE bug 998760</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7170</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7170" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7170" ref_url="https://www.suse.com/security/cve/CVE-2016-7170" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to cursor.mask[] and cursor.image[] array sizes when processing a DEFINE_CURSOR svga command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7170/">CVE-2016-7170</cve>
	<bugzilla href="https://bugzilla.suse.com/998516">SUSE bug 998516</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7421</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7421" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7421" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7421" ref_url="https://www.suse.com/security/cve/CVE-2016-7421" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
    <description>
    The pvscsi_ring_pop_req_descr function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit process IO loop to the ring size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7421/">CVE-2016-7421</cve>
	<bugzilla href="https://bugzilla.suse.com/999661">SUSE bug 999661</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7422</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7422" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7422" ref_url="https://www.suse.com/security/cve/CVE-2016-7422" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    CVE-2016-7422 Qemu: virtio: null pointer dereference in virtqueu_map_desc
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7422/">CVE-2016-7422</cve>
	<bugzilla href="https://bugzilla.suse.com/1000346">SUSE bug 1000346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7423</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7423" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7423" ref_url="https://www.suse.com/security/cve/CVE-2016-7423" source="SUSE CVE"/>
    <description>
    The mptsas_process_scsi_io_request function in QEMU (aka Quick Emulator), when built with LSI SAS1068 Host Bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors involving MPTSASRequest objects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7423/">CVE-2016-7423</cve>
	<bugzilla href="https://bugzilla.suse.com/1000397">SUSE bug 1000397</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7440</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7440" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7440" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7440" ref_url="https://www.suse.com/security/cve/CVE-2016-7440" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2932-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html" source="SUSE-SU"/>
    <description>
    The C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover AES keys by leveraging cache-bank timing differences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7440/">CVE-2016-7440</cve>
	<bugzilla href="https://bugzilla.suse.com/1005581">SUSE bug 1005581</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008318">SUSE bug 1008318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7445</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7445" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7445" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7445" ref_url="https://www.suse.com/security/cve/CVE-2016-7445" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2424-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00109.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2568-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00104.html" source="SUSE-SU"/>
    <description>
    convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors involving the variable s.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7445/">CVE-2016-7445</cve>
	<bugzilla href="https://bugzilla.suse.com/1007739">SUSE bug 1007739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007744">SUSE bug 1007744</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015662">SUSE bug 1015662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999817">SUSE bug 999817</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7466</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7466" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7466" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7466" ref_url="https://www.suse.com/security/cve/CVE-2016-7466" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    A memory-leak flaw was found in the Quick Emulator(QEMU) built with USB xHCI controller emulation support. The flaw could occur while doing a USB-device unplug operation. Unplugging the device repeatedly resulted in leaking host memory, which affected other services on the host. A privileged user inside the guest could exploit this flaw to cause a denial of service on the host or potentially crash the host's QEMU process instance.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7466/">CVE-2016-7466</cve>
	<bugzilla href="https://bugzilla.suse.com/1000345">SUSE bug 1000345</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7567</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7567" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7567" ref_url="https://www.suse.com/security/cve/CVE-2016-7567" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003598.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2712-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00005.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7567/">CVE-2016-7567</cve>
	<bugzilla href="https://bugzilla.suse.com/1001600">SUSE bug 1001600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074356">SUSE bug 1074356</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628951" comment="openslp-2.0.0-6.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151507" comment="openslp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628952" comment="openslp-32bit-2.0.0-6.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153678" comment="openslp-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7586</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7586" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7586" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7586" ref_url="https://www.suse.com/security/cve/CVE-2016-7586" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7586/">CVE-2016-7586</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7587</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7587" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7587" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7587" ref_url="https://www.suse.com/security/cve/CVE-2016-7587" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7587/">CVE-2016-7587</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167589" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7589</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7589" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7589" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7589" ref_url="https://www.suse.com/security/cve/CVE-2016-7589" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7589/">CVE-2016-7589</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7592</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7592" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7592" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7592" ref_url="https://www.suse.com/security/cve/CVE-2016-7592" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component, which allows remote attackers to obtain sensitive information via crafted JavaScript prompts on a web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7592/">CVE-2016-7592</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7598</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7598" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7598" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7598" ref_url="https://www.suse.com/security/cve/CVE-2016-7598" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7598/">CVE-2016-7598</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7599</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7599" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7599" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7599" ref_url="https://www.suse.com/security/cve/CVE-2016-7599" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site that uses HTTP redirects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7599/">CVE-2016-7599</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167610" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7610</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7610" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7610" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7610" ref_url="https://www.suse.com/security/cve/CVE-2016-7610" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7610/">CVE-2016-7610</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7623</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7623" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7623" ref_url="https://www.suse.com/security/cve/CVE-2016-7623" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a blob URL on a web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7623/">CVE-2016-7623</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7632</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7632" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7632" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7632" ref_url="https://www.suse.com/security/cve/CVE-2016-7632" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7632/">CVE-2016-7632</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7635</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7635" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7635" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7635" ref_url="https://www.suse.com/security/cve/CVE-2016-7635" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7635/">CVE-2016-7635</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7639</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7639" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7639" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7639" ref_url="https://www.suse.com/security/cve/CVE-2016-7639" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7639/">CVE-2016-7639</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7641</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7641" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7641" ref_url="https://www.suse.com/security/cve/CVE-2016-7641" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7641/">CVE-2016-7641</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7645</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7645" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7645" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7645" ref_url="https://www.suse.com/security/cve/CVE-2016-7645" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7645/">CVE-2016-7645</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7652</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7652" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7652" ref_url="https://www.suse.com/security/cve/CVE-2016-7652" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7652/">CVE-2016-7652</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7654</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7654" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7654" ref_url="https://www.suse.com/security/cve/CVE-2016-7654" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7654/">CVE-2016-7654</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167656" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7656</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7656" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7656" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7656" ref_url="https://www.suse.com/security/cve/CVE-2016-7656" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7656/">CVE-2016-7656</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7777</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7777" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7777" ref_url="https://www.suse.com/security/cve/CVE-2016-7777" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-7777/">CVE-2016-7777</cve>
	<bugzilla href="https://bugzilla.suse.com/1000106">SUSE bug 1000106</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7907</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7907" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7907" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7907" ref_url="https://www.suse.com/security/cve/CVE-2016-7907" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7907/">CVE-2016-7907</cve>
	<bugzilla href="https://bugzilla.suse.com/1002549">SUSE bug 1002549</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7908</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7908" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7908" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7908" ref_url="https://www.suse.com/security/cve/CVE-2016-7908" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7908/">CVE-2016-7908</cve>
	<bugzilla href="https://bugzilla.suse.com/1002550">SUSE bug 1002550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1003030">SUSE bug 1003030</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167909" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7909</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7909" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7909" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7909" ref_url="https://www.suse.com/security/cve/CVE-2016-7909" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7909/">CVE-2016-7909</cve>
	<bugzilla href="https://bugzilla.suse.com/1002557">SUSE bug 1002557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1003032">SUSE bug 1003032</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7947</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7947" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7947" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7947" ref_url="https://www.suse.com/security/cve/CVE-2016-7947" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002495.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2600-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3034-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00048.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7947/">CVE-2016-7947</cve>
	<bugzilla href="https://bugzilla.suse.com/1003000">SUSE bug 1003000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159415">SUSE bug 1159415</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480431" comment="libXrandr2-1.5.1-2.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151836" comment="libXrandr2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167948" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7948</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7948" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7948" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7948" ref_url="https://www.suse.com/security/cve/CVE-2016-7948" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002495.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2600-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3034-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00048.html" source="SUSE-SU"/>
    <description>
    X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7948/">CVE-2016-7948</cve>
	<bugzilla href="https://bugzilla.suse.com/1003000">SUSE bug 1003000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159415">SUSE bug 1159415</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480431" comment="libXrandr2-1.5.1-2.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151836" comment="libXrandr2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7966</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7966" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7966" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7966" ref_url="https://www.suse.com/security/cve/CVE-2016-7966" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2558-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2559-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00065.html" source="SUSE-SU"/>
    <description>
    Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sign (=) or a space into the injected HTML, which greatly reduces the available HTML functionality. Although it is possible to include an HTML comment indicator to hide content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-7966/">CVE-2016-7966</cve>
	<bugzilla href="https://bugzilla.suse.com/1002977">SUSE bug 1002977</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694774" comment="kcoreaddons-5.76.0-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153836" comment="kcoreaddons is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694775" comment="kcoreaddons-lang-5.76.0-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153839" comment="kcoreaddons-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694776" comment="libKF5CoreAddons5-5.76.0-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153840" comment="libKF5CoreAddons5 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7969</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7969" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7969" ref_url="https://www.suse.com/security/cve/CVE-2016-7969" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002475.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3087-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00068.html" source="SUSE-SU"/>
    <description>
    The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, related to "0/3 line wrapping equalization."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7969/">CVE-2016-7969</cve>
	<bugzilla href="https://bugzilla.suse.com/1002982">SUSE bug 1002982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629194" comment="libass9-0.14.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177230" comment="libass9 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7970</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7970" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7970" ref_url="https://www.suse.com/security/cve/CVE-2016-7970" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002475.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the calc_coeff function in libass/ass_blur.c in libass before 0.13.4 allows remote attackers to cause a denial of service via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7970/">CVE-2016-7970</cve>
	<bugzilla href="https://bugzilla.suse.com/1002982">SUSE bug 1002982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629194" comment="libass9-0.14.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177230" comment="libass9 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7972</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7972" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7972" ref_url="https://www.suse.com/security/cve/CVE-2016-7972" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002475.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3087-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00068.html" source="SUSE-SU"/>
    <description>
    The check_allocations function in libass/ass_shaper.c in libass before 0.13.4 allows remote attackers to cause a denial of service (memory allocation failure) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7972/">CVE-2016-7972</cve>
	<bugzilla href="https://bugzilla.suse.com/1002982">SUSE bug 1002982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629194" comment="libass9-0.14.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177230" comment="libass9 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7976</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7976" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7976" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7976" ref_url="https://www.suse.com/security/cve/CVE-2016-7976" source="SUSE CVE"/>
    <description>
    The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7976/">CVE-2016-7976</cve>
	<bugzilla href="https://bugzilla.suse.com/1001951">SUSE bug 1001951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004237">SUSE bug 1004237</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7977</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7977" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7977" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7977" ref_url="https://www.suse.com/security/cve/CVE-2016-7977" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2493-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00019.html" source="SUSE-SU"/>
    <description>
    Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7977/">CVE-2016-7977</cve>
	<bugzilla href="https://bugzilla.suse.com/1001951">SUSE bug 1001951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004237">SUSE bug 1004237</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095610">SUSE bug 1095610</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7978</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7978" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7978" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7978" ref_url="https://www.suse.com/security/cve/CVE-2016-7978" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2492-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2574-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2648-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00062.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7978/">CVE-2016-7978</cve>
	<bugzilla href="https://bugzilla.suse.com/1001951">SUSE bug 1001951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004237">SUSE bug 1004237</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7979</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7979" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7979" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7979" ref_url="https://www.suse.com/security/cve/CVE-2016-7979" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2492-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2493-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2574-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2648-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00062.html" source="SUSE-SU"/>
    <description>
    Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7979/">CVE-2016-7979</cve>
	<bugzilla href="https://bugzilla.suse.com/1001951">SUSE bug 1001951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004237">SUSE bug 1004237</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7994</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7994" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7994" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7994" ref_url="https://www.suse.com/security/cve/CVE-2016-7994" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    Memory leak in the virtio_gpu_resource_create_2d function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_CREATE_2D commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7994/">CVE-2016-7994</cve>
	<bugzilla href="https://bugzilla.suse.com/1003613">SUSE bug 1003613</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7995</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7995" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7995" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7995" ref_url="https://www.suse.com/security/cve/CVE-2016-7995" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Memory leak in the ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large number of crafted buffer page select (PG) indexes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7995/">CVE-2016-7995</cve>
	<bugzilla href="https://bugzilla.suse.com/1003612">SUSE bug 1003612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1003870">SUSE bug 1003870</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8283</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8283" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8283" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8283" ref_url="https://www.suse.com/security/cve/CVE-2016-8283" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2932-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8283/">CVE-2016-8283</cve>
	<bugzilla href="https://bugzilla.suse.com/1005582">SUSE bug 1005582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008318">SUSE bug 1008318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168332" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8332</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8332" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8332" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8332" ref_url="https://www.suse.com/security/cve/CVE-2016-8332" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00082.html" source="SUSE-SU"/>
    <description>
    A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap write resulting in heap corruption leading to arbitrary code execution. For a successful attack, the target user needs to open a malicious jpeg2000 file. The jpeg2000 image file format is mostly used for embedding images inside PDF documents and the OpenJpeg library is used by a number of popular PDF renderers making PDF documents a likely attack vector.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8332/">CVE-2016-8332</cve>
	<bugzilla href="https://bugzilla.suse.com/1002414">SUSE bug 1002414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007739">SUSE bug 1007739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007744">SUSE bug 1007744</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015662">SUSE bug 1015662</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8568</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8568" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8568" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8568" ref_url="https://www.suse.com/security/cve/CVE-2016-8568" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2969-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002435.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3097-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0184-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00103.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0195-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0208-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00114.html" source="SUSE-SU"/>
    <description>
    The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8568/">CVE-2016-8568</cve>
	<bugzilla href="https://bugzilla.suse.com/1003810">SUSE bug 1003810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1019036">SUSE bug 1019036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1019037">SUSE bug 1019037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8569</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8569" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8569" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8569" ref_url="https://www.suse.com/security/cve/CVE-2016-8569" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2969-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002435.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3097-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0184-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00103.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0195-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0208-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00114.html" source="SUSE-SU"/>
    <description>
    The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file command with a crafted object file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8569/">CVE-2016-8569</cve>
	<bugzilla href="https://bugzilla.suse.com/1003810">SUSE bug 1003810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1019036">SUSE bug 1019036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1019037">SUSE bug 1019037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8576</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8576" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8576" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8576" ref_url="https://www.suse.com/security/cve/CVE-2016-8576" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    CVE-2016-8576 Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8576/">CVE-2016-8576</cve>
	<bugzilla href="https://bugzilla.suse.com/1003878">SUSE bug 1003878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004016">SUSE bug 1004016</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8577</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8577" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8577" ref_url="https://www.suse.com/security/cve/CVE-2016-8577" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    Memory leak in the v9fs_read function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via vectors related to an I/O read operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8577/">CVE-2016-8577</cve>
	<bugzilla href="https://bugzilla.suse.com/1003893">SUSE bug 1003893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004021">SUSE bug 1004021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8578</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8578" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8578" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8578" ref_url="https://www.suse.com/security/cve/CVE-2016-8578" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    The v9fs_iov_vunmarshal function in fsdev/9p-iov-marshal.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) by sending an empty string parameter to a 9P operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8578/">CVE-2016-8578</cve>
	<bugzilla href="https://bugzilla.suse.com/1003894">SUSE bug 1003894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004023">SUSE bug 1004023</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8602</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8602" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8602" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8602" ref_url="https://www.suse.com/security/cve/CVE-2016-8602" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2654-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002392.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2648-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2710-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00003.html" source="SUSE-SU"/>
    <description>
    The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8602/">CVE-2016-8602</cve>
	<bugzilla href="https://bugzilla.suse.com/1001951">SUSE bug 1001951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004237">SUSE bug 1004237</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036453">SUSE bug 1036453</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168610" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8610</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8610" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8610" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8610" ref_url="https://www.suse.com/security/cve/CVE-2016-8610" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002676.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004873.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3864-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3964-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183964-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3994-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004924.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005586.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0487-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4104-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00026.html" source="SUSE-SU"/>
    <description>
    A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8610/">CVE-2016-8610</cve>
	<bugzilla href="https://bugzilla.suse.com/1005878">SUSE bug 1005878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1005879">SUSE bug 1005879</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120592">SUSE bug 1120592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148697">SUSE bug 1148697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982575">SUSE bug 982575</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628489" comment="gnutls-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628491" comment="libgnutls30-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177128" comment="libgnutls30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628492" comment="libgnutls30-32bit-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009235745" comment="libgnutls30-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8615</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8615" ref_url="https://www.suse.com/security/cve/CVE-2016-8615" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-8615/">CVE-2016-8615</cve>
	<bugzilla href="https://bugzilla.suse.com/1005633">SUSE bug 1005633</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8616</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8616" ref_url="https://www.suse.com/security/cve/CVE-2016-8616" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons of user name and password with the existing connections. This means that if an unused connection with proper credentials exists for a protocol that has connection-scoped credentials, an attacker can cause that connection to be reused if s/he knows the case-insensitive version of the correct password.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-8616/">CVE-2016-8616</cve>
	<bugzilla href="https://bugzilla.suse.com/1005634">SUSE bug 1005634</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168617" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8617</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8617" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8617" ref_url="https://www.suse.com/security/cve/CVE-2016-8617" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME`.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8617/">CVE-2016-8617</cve>
	<bugzilla href="https://bugzilla.suse.com/1005635">SUSE bug 1005635</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8618</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8618" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8618" ref_url="https://www.suse.com/security/cve/CVE-2016-8618" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit `size_t` variables.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-8618/">CVE-2016-8618</cve>
	<bugzilla href="https://bugzilla.suse.com/1005637">SUSE bug 1005637</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8619</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8619" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8619" ref_url="https://www.suse.com/security/cve/CVE-2016-8619" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8619/">CVE-2016-8619</cve>
	<bugzilla href="https://bugzilla.suse.com/1005638">SUSE bug 1005638</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8620</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8620" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8620" ref_url="https://www.suse.com/security/cve/CVE-2016-8620" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8620/">CVE-2016-8620</cve>
	<bugzilla href="https://bugzilla.suse.com/1005640">SUSE bug 1005640</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8621</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8621" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8621" ref_url="https://www.suse.com/security/cve/CVE-2016-8621" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-8621/">CVE-2016-8621</cve>
	<bugzilla href="https://bugzilla.suse.com/1005642">SUSE bug 1005642</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8622</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8622" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8622" ref_url="https://www.suse.com/security/cve/CVE-2016-8622" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get either just truncated or both truncated and turned negative. That could then lead to libcurl writing outside of its heap based buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8622/">CVE-2016-8622</cve>
	<bugzilla href="https://bugzilla.suse.com/1005643">SUSE bug 1005643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8623</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8623" ref_url="https://www.suse.com/security/cve/CVE-2016-8623" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other threads to trigger a use-after-free leading to information disclosure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-8623/">CVE-2016-8623</cve>
	<bugzilla href="https://bugzilla.suse.com/1005645">SUSE bug 1005645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8624</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8624" ref_url="https://www.suse.com/security/cve/CVE-2016-8624" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, and could instead be tricked into connecting to a different host. This may have security implications if you for example use an URL parser that follows the RFC to check for allowed domains before using curl to request them.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-8624/">CVE-2016-8624</cve>
	<bugzilla href="https://bugzilla.suse.com/1005646">SUSE bug 1005646</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8625</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8625" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8625" ref_url="https://www.suse.com/security/cve/CVE-2016-8625" source="SUSE CVE"/>
    <description>
    curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-8625/">CVE-2016-8625</cve>
	<bugzilla href="https://bugzilla.suse.com/1005649">SUSE bug 1005649</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8637</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8637" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8637" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8637" ref_url="https://www.suse.com/security/cve/CVE-2016-8637" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0641-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0951-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003286.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0708-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00047.html" source="SUSE-SU"/>
    <description>
    A local information disclosure issue was found in dracut before 045 when generating initramfs images with world-readable permissions when 'early cpio' is used, such as when including microcode updates. Local attacker can use this to obtain sensitive information from these files, such as encryption keys or credentials.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8637/">CVE-2016-8637</cve>
	<bugzilla href="https://bugzilla.suse.com/1008340">SUSE bug 1008340</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694734" comment="dracut-049.1+suse.188.gbf445638-3.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151760" comment="dracut is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8654</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8654" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8654" ref_url="https://www.suse.com/security/cve/CVE-2016-8654" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0101-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" source="SUSE-SU"/>
    <description>
    A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8654/">CVE-2016-8654</cve>
	<bugzilla href="https://bugzilla.suse.com/1012530">SUSE bug 1012530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8659</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8659" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8659" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8659" ref_url="https://www.suse.com/security/cve/CVE-2016-8659" source="SUSE CVE"/>
    <description>
    Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8659/">CVE-2016-8659</cve>
	<bugzilla href="https://bugzilla.suse.com/984817">SUSE bug 984817</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629101" comment="flatpak-1.10.2-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171006" comment="flatpak is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629104" comment="libflatpak0-1.10.2-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171009" comment="libflatpak0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629105" comment="system-user-flatpak-1.10.2-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009350838" comment="system-user-flatpak is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8667</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8667" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8667" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8667" ref_url="https://www.suse.com/security/cve/CVE-2016-8667" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via a large interval timer reload value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8667/">CVE-2016-8667</cve>
	<bugzilla href="https://bugzilla.suse.com/1004702">SUSE bug 1004702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1005004">SUSE bug 1005004</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8668</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8668" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8668" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8668" ref_url="https://www.suse.com/security/cve/CVE-2016-8668" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    The rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging failure to limit DMA buffer size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8668/">CVE-2016-8668</cve>
	<bugzilla href="https://bugzilla.suse.com/1004706">SUSE bug 1004706</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8669</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8669" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8669" ref_url="https://www.suse.com/security/cve/CVE-2016-8669" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    CVE-2016-8669 Qemu: char: divide by zero error in serial_update_parameters
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8669/">CVE-2016-8669</cve>
	<bugzilla href="https://bugzilla.suse.com/1004707">SUSE bug 1004707</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1005005">SUSE bug 1005005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8685</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8685" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8685" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8685" ref_url="https://www.suse.com/security/cve/CVE-2016-8685" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0648-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00015.html" source="SUSE-SU"/>
    <description>
    The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (invalid memory access and crash) via a crafted BMP image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8685/">CVE-2016-8685</cve>
	<bugzilla href="https://bugzilla.suse.com/1005026">SUSE bug 1005026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1005027">SUSE bug 1005027</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486490" comment="libpotrace0-1.15-3.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151954" comment="libpotrace0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8686</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8686" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8686" ref_url="https://www.suse.com/security/cve/CVE-2016-8686" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0648-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00015.html" source="SUSE-SU"/>
    <description>
    The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8686/">CVE-2016-8686</cve>
	<bugzilla href="https://bugzilla.suse.com/1005026">SUSE bug 1005026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1005027">SUSE bug 1005027</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486490" comment="libpotrace0-1.15-3.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151954" comment="libpotrace0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8687</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8687" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8687" ref_url="https://www.suse.com/security/cve/CVE-2016-8687" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002421.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006190.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3005-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00030.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the safe_fprintf function in tar/util.c in libarchive 3.2.1 allows remote attackers to cause a denial of service via a crafted non-printable multibyte character in a filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8687/">CVE-2016-8687</cve>
	<bugzilla href="https://bugzilla.suse.com/1005070">SUSE bug 1005070</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8688</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8688" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8688" ref_url="https://www.suse.com/security/cve/CVE-2016-8688" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3005-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00030.html" source="SUSE-SU"/>
    <description>
    The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service (crash) via a crafted file, which triggers an invalid read in the (1) detect_form or (2) bid_entry function in libarchive/archive_read_support_format_mtree.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8688/">CVE-2016-8688</cve>
	<bugzilla href="https://bugzilla.suse.com/1005076">SUSE bug 1005076</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8689</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8689" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8689" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8689" ref_url="https://www.suse.com/security/cve/CVE-2016-8689" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3005-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00030.html" source="SUSE-SU"/>
    <description>
    The read_Header function in archive_read_support_format_7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service (out-of-bounds read) via multiple EmptyStream attributes in a header in a 7zip archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8689/">CVE-2016-8689</cve>
	<bugzilla href="https://bugzilla.suse.com/1005072">SUSE bug 1005072</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8690</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8690" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8690" ref_url="https://www.suse.com/security/cve/CVE-2016-8690" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8690/">CVE-2016-8690</cve>
	<bugzilla href="https://bugzilla.suse.com/1005084">SUSE bug 1005084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007009">SUSE bug 1007009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8691</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8691" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8691" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8691" ref_url="https://www.suse.com/security/cve/CVE-2016-8691" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8691/">CVE-2016-8691</cve>
	<bugzilla href="https://bugzilla.suse.com/1005090">SUSE bug 1005090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8692</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8692" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8692" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8692" ref_url="https://www.suse.com/security/cve/CVE-2016-8692" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP image to the imginfo command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8692/">CVE-2016-8692</cve>
	<bugzilla href="https://bugzilla.suse.com/1005090">SUSE bug 1005090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8693</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8693" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8693" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8693" ref_url="https://www.suse.com/security/cve/CVE-2016-8693" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8693/">CVE-2016-8693</cve>
	<bugzilla href="https://bugzilla.suse.com/1005242">SUSE bug 1005242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8740</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8740" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8740" ref_url="https://www.suse.com/security/cve/CVE-2016-8740" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002567.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0297-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00149.html" source="SUSE-SU"/>
    <description>
    The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows remote attackers to cause a denial of service (memory consumption) via crafted CONTINUATION frames in an HTTP/2 request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8740/">CVE-2016-8740</cve>
	<bugzilla href="https://bugzilla.suse.com/1013648">SUSE bug 1013648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8743</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8743" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8743" ref_url="https://www.suse.com/security/cve/CVE-2016-8743" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004509.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2815-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004718.html" source="SUSE-SU"/>
		<reference ref_id="TID7018735" ref_url="https://www.suse.com/support/kb/doc/?id=7018735" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0897-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0903-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2856-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00076.html" source="SUSE-SU"/>
    <description>
    Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-8743/">CVE-2016-8743</cve>
	<bugzilla href="https://bugzilla.suse.com/1016715">SUSE bug 1016715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033513">SUSE bug 1033513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086774">SUSE bug 1086774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104826">SUSE bug 1104826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930944">SUSE bug 930944</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8858</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8858" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8858" ref_url="https://www.suse.com/security/cve/CVE-2016-8858" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002677.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002972.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00178.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0674-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00032.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests.  NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8858/">CVE-2016-8858</cve>
	<bugzilla href="https://bugzilla.suse.com/1005480">SUSE bug 1005480</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628954" comment="openssh-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628955" comment="openssh-clients-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659235" comment="openssh-clients is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628956" comment="openssh-common-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659236" comment="openssh-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628958" comment="openssh-server-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659237" comment="openssh-server is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8863</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8863" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8863" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8863" ref_url="https://www.suse.com/security/cve/CVE-2016-8863" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1485-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00006.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a valid URI followed by an invalid one in the CALLBACK header of an SUBSCRIBE request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8863/">CVE-2016-8863</cve>
	<bugzilla href="https://bugzilla.suse.com/1006256">SUSE bug 1006256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694852" comment="libixml11-1.14.0-bp153.1.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695539" comment="libixml11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694853" comment="libupnp17-1.14.0-bp153.1.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695540" comment="libupnp17 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8864</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8864" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8864" ref_url="https://www.suse.com/security/cve/CVE-2016-8864" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2697-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2697-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2706-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="TID7018224" ref_url="https://www.suse.com/support/kb/doc/?id=7018224" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2739-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00017.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8864/">CVE-2016-8864</cve>
	<bugzilla href="https://bugzilla.suse.com/1007829">SUSE bug 1007829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018700">SUSE bug 1018700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018701">SUSE bug 1018701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018702">SUSE bug 1018702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020526">SUSE bug 1020526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024130">SUSE bug 1024130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033466">SUSE bug 1033466</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168880" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8880</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8880" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8880" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8880" ref_url="https://www.suse.com/security/cve/CVE-2016-8880" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4516. Reason: This candidate is a duplicate of CVE-2011-4516. Notes: All CVE users should reference CVE-2011-4516 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-8880/">CVE-2016-8880</cve>
	<bugzilla href="https://bugzilla.suse.com/1006591">SUSE bug 1006591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168881" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8881</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8881" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8881" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8881" ref_url="https://www.suse.com/security/cve/CVE-2016-8881" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4517. Reason: This candidate is a duplicate of CVE-2011-4517. Notes: All CVE users should reference CVE-2011-4517 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-8881/">CVE-2016-8881</cve>
	<bugzilla href="https://bugzilla.suse.com/1006593">SUSE bug 1006593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168882" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8882</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8882" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8882" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8882" ref_url="https://www.suse.com/security/cve/CVE-2016-8882" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8882/">CVE-2016-8882</cve>
	<bugzilla href="https://bugzilla.suse.com/1006597">SUSE bug 1006597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168883" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8883</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8883" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8883" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8883" ref_url="https://www.suse.com/security/cve/CVE-2016-8883" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8883/">CVE-2016-8883</cve>
	<bugzilla href="https://bugzilla.suse.com/1006598">SUSE bug 1006598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8884</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8884" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8884" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8884" ref_url="https://www.suse.com/security/cve/CVE-2016-8884" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8884/">CVE-2016-8884</cve>
	<bugzilla href="https://bugzilla.suse.com/1005084">SUSE bug 1005084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007009">SUSE bug 1007009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8885</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8885" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8885" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8885" ref_url="https://www.suse.com/security/cve/CVE-2016-8885" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8885/">CVE-2016-8885</cve>
	<bugzilla href="https://bugzilla.suse.com/1005084">SUSE bug 1005084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007009">SUSE bug 1007009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168886" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8886</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8886" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8886" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8886" ref_url="https://www.suse.com/security/cve/CVE-2016-8886" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8886/">CVE-2016-8886</cve>
	<bugzilla href="https://bugzilla.suse.com/1006599">SUSE bug 1006599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168887" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8887</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8887" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8887" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8887" ref_url="https://www.suse.com/security/cve/CVE-2016-8887" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8887/">CVE-2016-8887</cve>
	<bugzilla href="https://bugzilla.suse.com/1006836">SUSE bug 1006836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1006839">SUSE bug 1006839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168888" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8888</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8888" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8888" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8888" ref_url="https://www.suse.com/security/cve/CVE-2016-8888" source="SUSE CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2016-8888/">CVE-2016-8888</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482450" comment="libwebp7-1.0.3-1.62 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695541" comment="libwebp7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482451" comment="libwebpdemux2-1.0.3-1.62 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623322" comment="libwebpdemux2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487581" comment="libwebpmux3-1.0.3-1.62 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695542" comment="libwebpmux3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168909" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8909</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8909" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8909" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8909" ref_url="https://www.suse.com/security/cve/CVE-2016-8909" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    CVE-2016-8909 Qemu: audio: intel-hda: infinite loop in processing dma buffer stream
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8909/">CVE-2016-8909</cve>
	<bugzilla href="https://bugzilla.suse.com/1006536">SUSE bug 1006536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007160">SUSE bug 1007160</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168910" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8910</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8910" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8910" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8910" ref_url="https://www.suse.com/security/cve/CVE-2016-8910" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    CVE-2016-8910 Qemu: net: rtl8139: infinite loop while transmit in C+ mode
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8910/">CVE-2016-8910</cve>
	<bugzilla href="https://bugzilla.suse.com/1006538">SUSE bug 1006538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007157">SUSE bug 1007157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024178">SUSE bug 1024178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9011</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9011" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9011" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9011" ref_url="https://www.suse.com/security/cve/CVE-2016-9011" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1516-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010962.html" source="SUSE-SU"/>
    <description>
    The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9011/">CVE-2016-9011</cve>
	<bugzilla href="https://bugzilla.suse.com/1006739">SUSE bug 1006739</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679693" comment="libwmf-0_2-7-0.2.12-150000.4.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152632" comment="libwmf-0_2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679694" comment="libwmf-0_2-7-32bit-0.2.12-150000.4.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009682762" comment="libwmf-0_2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679695" comment="libwmf-devel-0.2.12-150000.4.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009682763" comment="libwmf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679696" comment="libwmf-gnome-0.2.12-150000.4.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009682764" comment="libwmf-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679697" comment="libwmf-gnome-32bit-0.2.12-150000.4.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009682765" comment="libwmf-gnome-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679698" comment="libwmf-tools-0.2.12-150000.4.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152633" comment="libwmf-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169015" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9015</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9015" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9015" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9015" ref_url="https://www.suse.com/security/cve/CVE-2016-9015" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0159-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates. This places users of the library with those configurations at risk of man-in-the-middle and information leakage attacks. This vulnerability affects users using versions 1.17 and 1.18 of the urllib3 library, who are using the optional PyOpenSSL support for TLS instead of the regular standard library TLS backend, and who are using OpenSSL 1.1.0 via PyOpenSSL. This is an extremely uncommon configuration, so the security impact of this vulnerability is low.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9015/">CVE-2016-9015</cve>
	<bugzilla href="https://bugzilla.suse.com/1023502">SUSE bug 1023502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024540">SUSE bug 1024540</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629005" comment="python3-urllib3-1.25.10-2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177231" comment="python3-urllib3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169061" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9061</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9061" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9061" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9061" ref_url="https://www.suse.com/security/cve/CVE-2016-9061" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    A previously installed malicious Android application which defines a specific signature-level permissions used by Firefox can access API keys meant for Firefox only. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9061/">CVE-2016-9061</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010418">SUSE bug 1010418</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9062</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9062" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9062" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9062" ref_url="https://www.suse.com/security/cve/CVE-2016-9062" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    Private browsing mode leaves metadata information, such as URLs, for sites visited in "browser.db" and "browser.db-wal" files within the Firefox profile after the mode is exited. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9062/">CVE-2016-9062</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010419">SUSE bug 1010419</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9063</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9063" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9063" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9063" ref_url="https://www.suse.com/security/cve/CVE-2016-9063" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003169.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2375-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00004.html" source="SUSE-SU"/>
    <description>
    An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9063/">CVE-2016-9063</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010424">SUSE bug 1010424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047240">SUSE bug 1047240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123115">SUSE bug 1123115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481942" comment="expat-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481944" comment="libexpat1-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481945" comment="libexpat1-32bit-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9064</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9064" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9064" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9064" ref_url="https://www.suse.com/security/cve/CVE-2016-9064" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    Add-on updates failed to verify that the add-on ID inside the signed package matched the ID of the add-on being updated. An attacker who could perform a man-in-the-middle attack on the user's connection to the update server and defeat the certificate pinning protection could provide a malicious signed add-on instead of a valid update. This vulnerability affects Firefox ESR &lt; 45.5 and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9064/">CVE-2016-9064</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010402">SUSE bug 1010402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9065</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9065" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9065" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9065" ref_url="https://www.suse.com/security/cve/CVE-2016-9065" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    The location bar in Firefox for Android can be spoofed by forcing a user into fullscreen mode, blocking its exiting, and creating of a fake location bar without any user notification. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9065/">CVE-2016-9065</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010403">SUSE bug 1010403</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9066</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9066" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9066" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9066" ref_url="https://www.suse.com/security/cve/CVE-2016-9066" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00012.html" source="SUSE-SU"/>
    <description>
    A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data. This vulnerability affects Thunderbird &lt; 45.5, Firefox ESR &lt; 45.5, and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9066/">CVE-2016-9066</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010404">SUSE bug 1010404</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9067</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9067" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9067" ref_url="https://www.suse.com/security/cve/CVE-2016-9067" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    Two use-after-free errors during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9067/">CVE-2016-9067</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010405">SUSE bug 1010405</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9068</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9068" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9068" ref_url="https://www.suse.com/security/cve/CVE-2016-9068" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    A use-after-free during web animations when working with timelines resulting in a potentially exploitable crash. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9068/">CVE-2016-9068</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010406">SUSE bug 1010406</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9069</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9069" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9069" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9069" ref_url="https://www.suse.com/security/cve/CVE-2016-9069" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    A use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9069/">CVE-2016-9069</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010405">SUSE bug 1010405</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9070</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9070" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9070" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9070" ref_url="https://www.suse.com/security/cve/CVE-2016-9070" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    A maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged chrome window and engage in limited JavaScript operations violating cross-origin protections. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9070/">CVE-2016-9070</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010420">SUSE bug 1010420</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9071</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9071" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9071" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9071" ref_url="https://www.suse.com/security/cve/CVE-2016-9071" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    Content Security Policy combined with HTTP to HTTPS redirection can be used by malicious server to verify whether a known site is within a user's browser history. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9071/">CVE-2016-9071</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010425">SUSE bug 1010425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9072</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9072" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9072" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9072" ref_url="https://www.suse.com/security/cve/CVE-2016-9072" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    When a new Firefox profile is created on 64-bit Windows installations, the sandbox for 64-bit NPAPI plugins is not enabled by default. Note: This issue only affects 64-bit Windows. 32-bit Windows and other operating systems are unaffected. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9072/">CVE-2016-9072</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010407">SUSE bug 1010407</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9073</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9073" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9073" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9073" ref_url="https://www.suse.com/security/cve/CVE-2016-9073" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    WebExtensions can bypass security checks to load privileged URLs and potentially escape the WebExtension sandbox. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9073/">CVE-2016-9073</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010421">SUSE bug 1010421</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9074</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9074" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9074" ref_url="https://www.suse.com/security/cve/CVE-2016-9074" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services (NSS) 3.26.1. This vulnerability affects Thunderbird &lt; 45.5, Firefox ESR &lt; 45.5, and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9074/">CVE-2016-9074</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010422">SUSE bug 1010422</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9075</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9075" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9075" ref_url="https://www.suse.com/security/cve/CVE-2016-9075" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    An issue where WebExtensions can use the mozAddonManager API to elevate privilege due to privileged pages being allowed in the permissions list. This allows a malicious extension to then install additional extensions without explicit user permission. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9075/">CVE-2016-9075</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010408">SUSE bug 1010408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9076</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9076" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9076" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9076" ref_url="https://www.suse.com/security/cve/CVE-2016-9076" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    An issue where a "&lt;select&gt;" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. This attack requires e10s to be enabled in order to function. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9076/">CVE-2016-9076</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010423">SUSE bug 1010423</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9077</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9077" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9077" ref_url="https://www.suse.com/security/cve/CVE-2016-9077" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    Canvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin. The rendering by the filter is variable depending on the input pixel, allowing for timing attacks when the images are loaded from third party locations. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9077/">CVE-2016-9077</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010409">SUSE bug 1010409</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9078</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9078" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9078" ref_url="https://www.suse.com/security/cve/CVE-2016-9078" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    Redirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the "data:" URL in some circumstances. This can result in same-origin violations against a domain if it loads resources from malicious sites. Cross-origin setting of cookies has been demonstrated without the ability to read them. Note: This issue only affects Firefox 49 and 50. This vulnerability affects Firefox &lt; 50.0.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9078/">CVE-2016-9078</cve>
	<bugzilla href="https://bugzilla.suse.com/1012807">SUSE bug 1012807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9079</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9079" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9079" ref_url="https://www.suse.com/security/cve/CVE-2016-9079" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00012.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox &lt; 50.0.2, Firefox ESR &lt; 45.5.1, and Thunderbird &lt; 45.5.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9079/">CVE-2016-9079</cve>
	<bugzilla href="https://bugzilla.suse.com/1012964">SUSE bug 1012964</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9080</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9080" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9080" ref_url="https://www.suse.com/security/cve/CVE-2016-9080" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 50.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 50.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9080/">CVE-2016-9080</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169082" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9082</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9082" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9082" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9082" ref_url="https://www.suse.com/security/cve/CVE-2016-9082" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002978.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004095.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer dereference) via a large svg file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9082/">CVE-2016-9082</cve>
	<bugzilla href="https://bugzilla.suse.com/1007255">SUSE bug 1007255</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481781" comment="libcairo-gobject2-1.16.0-1.55 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158152" comment="libcairo-gobject2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481783" comment="libcairo2-1.16.0-1.55 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158156" comment="libcairo2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169085" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9085</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9085" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9085" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9085" ref_url="https://www.suse.com/security/cve/CVE-2016-9085" source="SUSE CVE"/>
    <description>
    Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9085/">CVE-2016-9085</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482450" comment="libwebp7-1.0.3-1.62 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695541" comment="libwebp7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482451" comment="libwebpdemux2-1.0.3-1.62 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623322" comment="libwebpdemux2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487581" comment="libwebpmux3-1.0.3-1.62 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695542" comment="libwebpmux3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9101</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9101" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9101" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9101" ref_url="https://www.suse.com/security/cve/CVE-2016-9101" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Memory leak in hw/net/eepro100.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by repeatedly unplugging an i8255x (PRO100) NIC device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9101/">CVE-2016-9101</cve>
	<bugzilla href="https://bugzilla.suse.com/1007391">SUSE bug 1007391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013668">SUSE bug 1013668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024181">SUSE bug 1024181</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169102" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9102</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9102" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9102" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9102" ref_url="https://www.suse.com/security/cve/CVE-2016-9102" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Memory leak in the v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) via a large number of Txattrcreate messages with the same fid number.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9102/">CVE-2016-9102</cve>
	<bugzilla href="https://bugzilla.suse.com/1007450">SUSE bug 1007450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014256">SUSE bug 1014256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9103</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9103" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9103" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9103" ref_url="https://www.suse.com/security/cve/CVE-2016-9103" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
    <description>
    The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory information by reading xattribute values before writing to them.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9103/">CVE-2016-9103</cve>
	<bugzilla href="https://bugzilla.suse.com/1007454">SUSE bug 1007454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014259">SUSE bug 1014259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9104</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9104" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9104" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9104" ref_url="https://www.suse.com/security/cve/CVE-2016-9104" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via a crafted offset, which triggers an out-of-bounds access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9104/">CVE-2016-9104</cve>
	<bugzilla href="https://bugzilla.suse.com/1007493">SUSE bug 1007493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014297">SUSE bug 1014297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1034990">SUSE bug 1034990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9105</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9105" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9105" ref_url="https://www.suse.com/security/cve/CVE-2016-9105" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    Memory leak in the v9fs_link function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via vectors involving a reference to the source fid object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9105/">CVE-2016-9105</cve>
	<bugzilla href="https://bugzilla.suse.com/1007494">SUSE bug 1007494</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014279">SUSE bug 1014279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9106</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9106" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9106" ref_url="https://www.suse.com/security/cve/CVE-2016-9106" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    Memory leak in the v9fs_write function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) by leveraging failure to free an IO vector.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9106/">CVE-2016-9106</cve>
	<bugzilla href="https://bugzilla.suse.com/1007495">SUSE bug 1007495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014299">SUSE bug 1014299</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9131</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9131" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9131" ref_url="https://www.suse.com/security/cve/CVE-2016-9131" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0193-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00031.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9131/">CVE-2016-9131</cve>
	<bugzilla href="https://bugzilla.suse.com/1018699">SUSE bug 1018699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018700">SUSE bug 1018700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018701">SUSE bug 1018701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018702">SUSE bug 1018702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033466">SUSE bug 1033466</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9147</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9147" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9147" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9147" ref_url="https://www.suse.com/security/cve/CVE-2016-9147" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0193-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00031.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among the DNSSEC-related RRsets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9147/">CVE-2016-9147</cve>
	<bugzilla href="https://bugzilla.suse.com/1018699">SUSE bug 1018699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018700">SUSE bug 1018700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018701">SUSE bug 1018701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018702">SUSE bug 1018702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033466">SUSE bug 1033466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081545">SUSE bug 1081545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9180</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9180" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9180" ref_url="https://www.suse.com/security/cve/CVE-2016-9180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007244.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2173-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008410.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00033.html" source="SUSE-SU"/>
    <description>
    perl-XML-Twig: The option to `expand_external_ents`, documented as controlling external entity expansion in XML::Twig does not work. External entities are always expanded, regardless of the option's setting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9180/">CVE-2016-9180</cve>
	<bugzilla href="https://bugzilla.suse.com/1008644">SUSE bug 1008644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628974" comment="perl-XML-Twig-3.52-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009289040" comment="perl-XML-Twig is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9262</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9262" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9262" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9262" ref_url="https://www.suse.com/security/cve/CVE-2016-9262" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9262/">CVE-2016-9262</cve>
	<bugzilla href="https://bugzilla.suse.com/1009994">SUSE bug 1009994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9273</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9273" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9273" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9273" ref_url="https://www.suse.com/security/cve/CVE-2016-9273" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004880.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9273/">CVE-2016-9273</cve>
	<bugzilla href="https://bugzilla.suse.com/1010163">SUSE bug 1010163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1017693">SUSE bug 1017693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150480">SUSE bug 1150480</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9296</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9296" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9296" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9296" ref_url="https://www.suse.com/security/cve/CVE-2016-9296" source="SUSE CVE"/>
    <description>
    A null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null pointer check for the variable folders.PackPositions in function CInArchive::ReadAndDecodePackedStreams in CPP/7zip/Archive/7z/7zIn.cpp, as used in the 7z.so library and in 7z applications, will cause a crash and a denial of service when decoding malformed 7z files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9296/">CVE-2016-9296</cve>
	<bugzilla href="https://bugzilla.suse.com/1012574">SUSE bug 1012574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694907" comment="p7zip-16.02-14.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152637" comment="p7zip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694908" comment="p7zip-full-16.02-14.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474268" comment="p7zip-full is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9297</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9297" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9297" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9297" ref_url="https://www.suse.com/security/cve/CVE-2016-9297" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII tag values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9297/">CVE-2016-9297</cve>
	<bugzilla href="https://bugzilla.suse.com/1010161">SUSE bug 1010161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011103">SUSE bug 1011103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9317</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9317" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9317" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9317" ref_url="https://www.suse.com/security/cve/CVE-2016-9317" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0459-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002640.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002645.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0548-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00101.html" source="SUSE-SU"/>
    <description>
    The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system hang) via an oversized image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9317/">CVE-2016-9317</cve>
	<bugzilla href="https://bugzilla.suse.com/1022283">SUSE bug 1022283</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9377</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9377" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9377" ref_url="https://www.suse.com/security/cve/CVE-2016-9377" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging IDT entry miscalculation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9377/">CVE-2016-9377</cve>
	<bugzilla href="https://bugzilla.suse.com/1009108">SUSE bug 1009108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9378</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9378" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9378" ref_url="https://www.suse.com/security/cve/CVE-2016-9378" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging an incorrect choice for software interrupt delivery.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9378/">CVE-2016-9378</cve>
	<bugzilla href="https://bugzilla.suse.com/1009108">SUSE bug 1009108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9379</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9379" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9379" ref_url="https://www.suse.com/security/cve/CVE-2016-9379" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes and S-expressions in the bootloader configuration file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.9/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9379/">CVE-2016-9379</cve>
	<bugzilla href="https://bugzilla.suse.com/1009111">SUSE bug 1009111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9380</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9380" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9380" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9380" ref_url="https://www.suse.com/security/cve/CVE-2016-9380" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9380/">CVE-2016-9380</cve>
	<bugzilla href="https://bugzilla.suse.com/1009111">SUSE bug 1009111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9381</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9381" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9381" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9381" ref_url="https://www.suse.com/security/cve/CVE-2016-9381" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9381/">CVE-2016-9381</cve>
	<bugzilla href="https://bugzilla.suse.com/1009109">SUSE bug 1009109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9382</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9382" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9382" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9382" ref_url="https://www.suse.com/security/cve/CVE-2016-9382" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service (guest OS crash) by leveraging a guest operating system that uses hardware task switching and allows a new task to start in VM86 mode.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9382/">CVE-2016-9382</cve>
	<bugzilla href="https://bugzilla.suse.com/1009103">SUSE bug 1009103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9383</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9383" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9383" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9383" ref_url="https://www.suse.com/security/cve/CVE-2016-9383" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    Xen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary memory and consequently obtain sensitive information, cause a denial of service (host crash), or execute arbitrary code on the host by leveraging broken emulation of bit test instructions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9383/">CVE-2016-9383</cve>
	<bugzilla href="https://bugzilla.suse.com/1009107">SUSE bug 1009107</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9384</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9384" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9384" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9384" ref_url="https://www.suse.com/security/cve/CVE-2016-9384" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
    <description>
    Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9384/">CVE-2016-9384</cve>
	<bugzilla href="https://bugzilla.suse.com/1009105">SUSE bug 1009105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9385</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9385" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9385" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9385" ref_url="https://www.suse.com/security/cve/CVE-2016-9385" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrators to cause a denial of service (host crash) by leveraging lack of canonical address checks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9385/">CVE-2016-9385</cve>
	<bugzilla href="https://bugzilla.suse.com/1009104">SUSE bug 1009104</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9386</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9386" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9386" ref_url="https://www.suse.com/security/cve/CVE-2016-9386" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9386/">CVE-2016-9386</cve>
	<bugzilla href="https://bugzilla.suse.com/1009100">SUSE bug 1009100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9387</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9387" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9387" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9387" ref_url="https://www.suse.com/security/cve/CVE-2016-9387" source="SUSE CVE"/>
    <description>
    Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-9387/">CVE-2016-9387</cve>
	<bugzilla href="https://bugzilla.suse.com/1010960">SUSE bug 1010960</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9388</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9388" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9388" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9388" ref_url="https://www.suse.com/security/cve/CVE-2016-9388" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9388/">CVE-2016-9388</cve>
	<bugzilla href="https://bugzilla.suse.com/1010975">SUSE bug 1010975</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9389</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9389" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9389" ref_url="https://www.suse.com/security/cve/CVE-2016-9389" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9389/">CVE-2016-9389</cve>
	<bugzilla href="https://bugzilla.suse.com/1010968">SUSE bug 1010968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9390</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9390" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9390" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9390" ref_url="https://www.suse.com/security/cve/CVE-2016-9390" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9390/">CVE-2016-9390</cve>
	<bugzilla href="https://bugzilla.suse.com/1010774">SUSE bug 1010774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9391</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9391" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9391" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9391" ref_url="https://www.suse.com/security/cve/CVE-2016-9391" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9391/">CVE-2016-9391</cve>
	<bugzilla href="https://bugzilla.suse.com/1010782">SUSE bug 1010782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9392</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9392" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9392" ref_url="https://www.suse.com/security/cve/CVE-2016-9392" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9392/">CVE-2016-9392</cve>
	<bugzilla href="https://bugzilla.suse.com/1010757">SUSE bug 1010757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9393</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9393" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9393" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9393" ref_url="https://www.suse.com/security/cve/CVE-2016-9393" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9393/">CVE-2016-9393</cve>
	<bugzilla href="https://bugzilla.suse.com/1010757">SUSE bug 1010757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010766">SUSE bug 1010766</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169394" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9394</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9394" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9394" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9394" ref_url="https://www.suse.com/security/cve/CVE-2016-9394" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9394/">CVE-2016-9394</cve>
	<bugzilla href="https://bugzilla.suse.com/1010756">SUSE bug 1010756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010757">SUSE bug 1010757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9395</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9395" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9395" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9395" ref_url="https://www.suse.com/security/cve/CVE-2016-9395" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0101-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" source="SUSE-SU"/>
    <description>
    The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9395/">CVE-2016-9395</cve>
	<bugzilla href="https://bugzilla.suse.com/1010977">SUSE bug 1010977</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9396</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9396" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9396" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9396" ref_url="https://www.suse.com/security/cve/CVE-2016-9396" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005977.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1315-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00004.html" source="SUSE-SU"/>
    <description>
    The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9396/">CVE-2016-9396</cve>
	<bugzilla href="https://bugzilla.suse.com/1010783">SUSE bug 1010783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021871">SUSE bug 1021871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082397">SUSE bug 1082397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169398" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9398</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9398" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9398" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9398" ref_url="https://www.suse.com/security/cve/CVE-2016-9398" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0101-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9398/">CVE-2016-9398</cve>
	<bugzilla href="https://bugzilla.suse.com/1010979">SUSE bug 1010979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9399</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9399" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9399" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9399" ref_url="https://www.suse.com/security/cve/CVE-2016-9399" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9399/">CVE-2016-9399</cve>
	<bugzilla href="https://bugzilla.suse.com/1010980">SUSE bug 1010980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9401</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9401" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9401" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9401" ref_url="https://www.suse.com/security/cve/CVE-2016-9401" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002891.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002896.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1402-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00082.html" source="SUSE-SU"/>
    <description>
    popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9401/">CVE-2016-9401</cve>
	<bugzilla href="https://bugzilla.suse.com/1010845">SUSE bug 1010845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123788">SUSE bug 1123788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159416">SUSE bug 1159416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628304" comment="bash-4.4-17.83 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152102" comment="bash is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628306" comment="bash-doc-4.4-17.83 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152103" comment="bash-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628307" comment="bash-lang-4.4-17.83 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152104" comment="bash-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628308" comment="libreadline7-7.0-17.83 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177200" comment="libreadline7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628311" comment="readline-doc-7.0-17.83 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152109" comment="readline-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9434</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9434" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9434" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9434" ref_url="https://www.suse.com/security/cve/CVE-2016-9434" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9434/">CVE-2016-9434</cve>
	<bugzilla href="https://bugzilla.suse.com/1011283">SUSE bug 1011283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9435</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9435" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9435" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9435" ref_url="https://www.suse.com/security/cve/CVE-2016-9435" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to &lt;dd&gt; tags.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9435/">CVE-2016-9435</cve>
	<bugzilla href="https://bugzilla.suse.com/1011284">SUSE bug 1011284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9436</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9436" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9436" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9436" ref_url="https://www.suse.com/security/cve/CVE-2016-9436" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a &lt;i&gt; tag.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9436/">CVE-2016-9436</cve>
	<bugzilla href="https://bugzilla.suse.com/1011285">SUSE bug 1011285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9437</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9437" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9437" ref_url="https://www.suse.com/security/cve/CVE-2016-9437" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) and possibly memory corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9437/">CVE-2016-9437</cve>
	<bugzilla href="https://bugzilla.suse.com/1011286">SUSE bug 1011286</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9438</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9438" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9438" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9438" ref_url="https://www.suse.com/security/cve/CVE-2016-9438" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9438/">CVE-2016-9438</cve>
	<bugzilla href="https://bugzilla.suse.com/1011287">SUSE bug 1011287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9439</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9439" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9439" ref_url="https://www.suse.com/security/cve/CVE-2016-9439" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9439/">CVE-2016-9439</cve>
	<bugzilla href="https://bugzilla.suse.com/1011288">SUSE bug 1011288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9440</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9440" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9440" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9440" ref_url="https://www.suse.com/security/cve/CVE-2016-9440" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9440/">CVE-2016-9440</cve>
	<bugzilla href="https://bugzilla.suse.com/1011289">SUSE bug 1011289</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9441</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9441" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9441" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9441" ref_url="https://www.suse.com/security/cve/CVE-2016-9441" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9441/">CVE-2016-9441</cve>
	<bugzilla href="https://bugzilla.suse.com/1011290">SUSE bug 1011290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9442</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9442" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9442" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9442" ref_url="https://www.suse.com/security/cve/CVE-2016-9442" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause memory corruption in certain conditions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9442/">CVE-2016-9442</cve>
	<bugzilla href="https://bugzilla.suse.com/1011291">SUSE bug 1011291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169443" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9443</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9443" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9443" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9443" ref_url="https://www.suse.com/security/cve/CVE-2016-9443" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9443/">CVE-2016-9443</cve>
	<bugzilla href="https://bugzilla.suse.com/1011292">SUSE bug 1011292</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9444</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9444" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9444" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9444" ref_url="https://www.suse.com/security/cve/CVE-2016-9444" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0193-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00031.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9444/">CVE-2016-9444</cve>
	<bugzilla href="https://bugzilla.suse.com/1018699">SUSE bug 1018699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018700">SUSE bug 1018700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018701">SUSE bug 1018701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018702">SUSE bug 1018702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033466">SUSE bug 1033466</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9448</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9448" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9448" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9448" ref_url="https://www.suse.com/security/cve/CVE-2016-9448" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII to values that access 0-byte arrays.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9297.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9448/">CVE-2016-9448</cve>
	<bugzilla href="https://bugzilla.suse.com/1010161">SUSE bug 1010161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011103">SUSE bug 1011103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169453" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9453</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9453" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9453" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9453" ref_url="https://www.suse.com/security/cve/CVE-2016-9453" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIFFTAG_JPEGTABLES of length one.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9453/">CVE-2016-9453</cve>
	<bugzilla href="https://bugzilla.suse.com/1007280">SUSE bug 1007280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011107">SUSE bug 1011107</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9538</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9538" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9538" ref_url="https://www.suse.com/security/cve/CVE-2016-9538" source="SUSE CVE"/>
    <description>
    tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9538/">CVE-2016-9538</cve>
	<bugzilla href="https://bugzilla.suse.com/1004519">SUSE bug 1004519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011841">SUSE bug 1011841</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169557" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9557</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9557" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9557" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9557" ref_url="https://www.suse.com/security/cve/CVE-2016-9557" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
    <description>
    Integer overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9557/">CVE-2016-9557</cve>
	<bugzilla href="https://bugzilla.suse.com/1010786">SUSE bug 1010786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011829">SUSE bug 1011829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9560</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9560" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9560" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9560" ref_url="https://www.suse.com/security/cve/CVE-2016-9560" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0101-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9560/">CVE-2016-9560</cve>
	<bugzilla href="https://bugzilla.suse.com/1011830">SUSE bug 1011830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9577</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9577" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9577" ref_url="https://www.suse.com/security/cve/CVE-2016-9577" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0421-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00015.html" source="SUSE-SU"/>
    <description>
    A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or possible code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9577/">CVE-2016-9577</cve>
	<bugzilla href="https://bugzilla.suse.com/1023078">SUSE bug 1023078</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629866" comment="libspice-server1-0.14.3-1.48 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9578</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9578" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9578" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9578" ref_url="https://www.suse.com/security/cve/CVE-2016-9578" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0421-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00015.html" source="SUSE-SU"/>
    <description>
    A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9578/">CVE-2016-9578</cve>
	<bugzilla href="https://bugzilla.suse.com/1023078">SUSE bug 1023078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1023079">SUSE bug 1023079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629866" comment="libspice-server1-0.14.3-1.48 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9583</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9583" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9583" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9583" ref_url="https://www.suse.com/security/cve/CVE-2016-9583" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002789.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1034-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00061.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9583/">CVE-2016-9583</cve>
	<bugzilla href="https://bugzilla.suse.com/1015400">SUSE bug 1015400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169584" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9584</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9584" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9584" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9584" ref_url="https://www.suse.com/security/cve/CVE-2016-9584" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1989-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003605.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00108.html" source="SUSE-SU"/>
    <description>
    libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9584/">CVE-2016-9584</cve>
	<bugzilla href="https://bugzilla.suse.com/1015964">SUSE bug 1015964</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684236" comment="libical-glib3-3.0.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695537" comment="libical-glib3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628746" comment="libical3-3.0.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695538" comment="libical3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9586</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9586" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9586" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9586" ref_url="https://www.suse.com/security/cve/CVE-2016-9586" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1042-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002808.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002809.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1105-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00094.html" source="SUSE-SU"/>
    <description>
    curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9586/">CVE-2016-9586</cve>
	<bugzilla href="https://bugzilla.suse.com/1015332">SUSE bug 1015332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9591</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9591" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9591" ref_url="https://www.suse.com/security/cve/CVE-2016-9591" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0101-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" source="SUSE-SU"/>
    <description>
    JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9591/">CVE-2016-9591</cve>
	<bugzilla href="https://bugzilla.suse.com/1015993">SUSE bug 1015993</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9594</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9594" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9594" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9594" ref_url="https://www.suse.com/security/cve/CVE-2016-9594" source="SUSE CVE"/>
    <description>
    curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value.  Having a weak or virtually non-existent random value makes the operations that use it vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9594/">CVE-2016-9594</cve>
	<bugzilla href="https://bugzilla.suse.com/1016738">SUSE bug 1016738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1017161">SUSE bug 1017161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042181">SUSE bug 1042181</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9600</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9600" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9600" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9600" ref_url="https://www.suse.com/security/cve/CVE-2016-9600" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002789.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1034-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00061.html" source="SUSE-SU"/>
    <description>
    JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-08"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9600/">CVE-2016-9600</cve>
	<bugzilla href="https://bugzilla.suse.com/1018088">SUSE bug 1018088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9602</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9602" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9602" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9602" ref_url="https://www.suse.com/security/cve/CVE-2016-9602" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9602/">CVE-2016-9602</cve>
	<bugzilla href="https://bugzilla.suse.com/1020427">SUSE bug 1020427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9621</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9621" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9621" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9621" ref_url="https://www.suse.com/security/cve/CVE-2016-9621" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-9429.  Reason: This candidate is a reservation duplicate of CVE-2016-9429.  Notes: All CVE users should reference CVE-2016-9429 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-9621/">CVE-2016-9621</cve>
	<bugzilla href="https://bugzilla.suse.com/1011278">SUSE bug 1011278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012020">SUSE bug 1012020</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9622</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9622" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9622" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9622" ref_url="https://www.suse.com/security/cve/CVE-2016-9622" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9622/">CVE-2016-9622</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012021">SUSE bug 1012021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9623</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9623" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9623" ref_url="https://www.suse.com/security/cve/CVE-2016-9623" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9623/">CVE-2016-9623</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012022">SUSE bug 1012022</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9624</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9624" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9624" ref_url="https://www.suse.com/security/cve/CVE-2016-9624" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9624/">CVE-2016-9624</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012023">SUSE bug 1012023</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9625</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9625" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9625" ref_url="https://www.suse.com/security/cve/CVE-2016-9625" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9625/">CVE-2016-9625</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012024">SUSE bug 1012024</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169626" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9626</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9626" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9626" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9626" ref_url="https://www.suse.com/security/cve/CVE-2016-9626" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9626/">CVE-2016-9626</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012025">SUSE bug 1012025</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9627</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9627" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9627" ref_url="https://www.suse.com/security/cve/CVE-2016-9627" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (heap buffer overflow and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9627/">CVE-2016-9627</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012026">SUSE bug 1012026</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169628" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9628</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9628" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9628" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9628" ref_url="https://www.suse.com/security/cve/CVE-2016-9628" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9628/">CVE-2016-9628</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012027">SUSE bug 1012027</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9629</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9629" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9629" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9629" ref_url="https://www.suse.com/security/cve/CVE-2016-9629" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9629/">CVE-2016-9629</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012028">SUSE bug 1012028</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9630</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9630" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9630" ref_url="https://www.suse.com/security/cve/CVE-2016-9630" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (global buffer overflow and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9630/">CVE-2016-9630</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012029">SUSE bug 1012029</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169631" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9631</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9631" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9631" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9631" ref_url="https://www.suse.com/security/cve/CVE-2016-9631" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9631/">CVE-2016-9631</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012030">SUSE bug 1012030</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9632</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9632" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9632" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9632" ref_url="https://www.suse.com/security/cve/CVE-2016-9632" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (global buffer overflow and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9632/">CVE-2016-9632</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012031">SUSE bug 1012031</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9633</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9633" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9633" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9633" ref_url="https://www.suse.com/security/cve/CVE-2016-9633" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (infinite loop and resource consumption) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9633/">CVE-2016-9633</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012032">SUSE bug 1012032</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9637</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9637" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9637" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9637" ref_url="https://www.suse.com/security/cve/CVE-2016-9637" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest OS administrators to gain qemu process privileges via vectors involving an out-of-range ioport access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9637/">CVE-2016-9637</cve>
	<bugzilla href="https://bugzilla.suse.com/1011652">SUSE bug 1011652</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9650</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9650" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9650" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9650" ref_url="https://www.suse.com/security/cve/CVE-2016-9650" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled iframes, which allowed a remote attacker to bypass a no-referrer policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-9650/">CVE-2016-9650</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9651</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9651" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9651" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9651" ref_url="https://www.suse.com/security/cve/CVE-2016-9651" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9651/">CVE-2016-9651</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9652</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9652" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9652" ref_url="https://www.suse.com/security/cve/CVE-2016-9652" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9652/">CVE-2016-9652</cve>
	<bugzilla href="https://bugzilla.suse.com/1013236">SUSE bug 1013236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9776</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9776" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9776" ref_url="https://www.suse.com/security/cve/CVE-2016-9776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9776/">CVE-2016-9776</cve>
	<bugzilla href="https://bugzilla.suse.com/1013285">SUSE bug 1013285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013657">SUSE bug 1013657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024182">SUSE bug 1024182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9778</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9778" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9778" ref_url="https://www.suse.com/security/cve/CVE-2016-9778" source="SUSE CVE"/>
    <description>
    An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature to cover a zone for which it is also providing authoritative service. A vulnerable server could be intentionally stopped by an attacker if it was using a configuration that met the criteria for the vulnerability and if the attacker could cause it to accept a query that possessed the required attributes. Please note: This vulnerability affects the "nxdomain-redirect" feature, which is one of two methods of handling NXDOMAIN redirection, and is only available in certain versions of BIND. Redirection using zones of type "redirect" is not affected by this vulnerability. Affects BIND 9.9.8-S1 -&gt; 9.9.8-S3, 9.9.9-S1 -&gt; 9.9.9-S6, 9.11.0-9.11.0-P1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9778/">CVE-2016-9778</cve>
	<bugzilla href="https://bugzilla.suse.com/1018699">SUSE bug 1018699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018703">SUSE bug 1018703</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9797</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9797" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9797" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9797" ref_url="https://www.suse.com/security/cve/CVE-2016-9797" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1353-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00069.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, a buffer over-read was observed in "l2cap_dump" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9797/">CVE-2016-9797</cve>
	<bugzilla href="https://bugzilla.suse.com/1013708">SUSE bug 1013708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013712">SUSE bug 1013712</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628327" comment="bluez-5.55-1.57 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165944" comment="bluez is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628328" comment="libbluetooth3-5.55-1.57 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165954" comment="libbluetooth3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9798</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9798" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9798" ref_url="https://www.suse.com/security/cve/CVE-2016-9798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1353-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2585-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2588-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00072.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, a use-after-free was identified in "conf_opt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9798/">CVE-2016-9798</cve>
	<bugzilla href="https://bugzilla.suse.com/1013708">SUSE bug 1013708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013712">SUSE bug 1013712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013732">SUSE bug 1013732</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628327" comment="bluez-5.55-1.57 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165944" comment="bluez is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628328" comment="libbluetooth3-5.55-1.57 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165954" comment="libbluetooth3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9800</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9800" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9800" ref_url="https://www.suse.com/security/cve/CVE-2016-9800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005161.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00064.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, a buffer overflow was observed in "pin_code_reply_dump" function in "tools/parser/hci.c" source file. The issue exists because "pin" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "pin_code_reply_cp *cp" parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9800/">CVE-2016-9800</cve>
	<bugzilla href="https://bugzilla.suse.com/1013721">SUSE bug 1013721</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628327" comment="bluez-5.55-1.57 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165944" comment="bluez is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628328" comment="libbluetooth3-5.55-1.57 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165954" comment="libbluetooth3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9801</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9801" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9801" ref_url="https://www.suse.com/security/cve/CVE-2016-9801" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005161.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00064.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, a buffer overflow was observed in "set_ext_ctrl" function in "tools/parser/l2cap.c" source file when processing corrupted dump file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9801/">CVE-2016-9801</cve>
	<bugzilla href="https://bugzilla.suse.com/1013732">SUSE bug 1013732</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628327" comment="bluez-5.55-1.57 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165944" comment="bluez is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628328" comment="libbluetooth3-5.55-1.57 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165954" comment="libbluetooth3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9802</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9802" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9802" ref_url="https://www.suse.com/security/cve/CVE-2016-9802" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1353-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00069.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9802/">CVE-2016-9802</cve>
	<bugzilla href="https://bugzilla.suse.com/1013893">SUSE bug 1013893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015173">SUSE bug 1015173</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628327" comment="bluez-5.55-1.57 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165944" comment="bluez is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628328" comment="libbluetooth3-5.55-1.57 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165954" comment="libbluetooth3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9804</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9804" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9804" ref_url="https://www.suse.com/security/cve/CVE-2016-9804" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005161.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, a buffer overflow was observed in "commands_dump" function in "tools/parser/csr.c" source file. The issue exists because "commands" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "frm-&gt;ptr" parameter. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9804/">CVE-2016-9804</cve>
	<bugzilla href="https://bugzilla.suse.com/1013877">SUSE bug 1013877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628327" comment="bluez-5.55-1.57 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165944" comment="bluez is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628328" comment="libbluetooth3-5.55-1.57 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165954" comment="libbluetooth3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9843</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9843" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9843" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9843" ref_url="https://www.suse.com/security/cve/CVE-2016-9843" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002506.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002540.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004805.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3972-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183972-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005775.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3202-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0077-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0080-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3478-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9843/">CVE-2016-9843</cve>
	<bugzilla href="https://bugzilla.suse.com/1003580">SUSE bug 1003580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013882">SUSE bug 1013882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038505">SUSE bug 1038505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120866">SUSE bug 1120866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123150">SUSE bug 1123150</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628794" comment="libminizip1-1.2.11-3.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154284" comment="libminizip1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628795" comment="libz1-1.2.11-3.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153971" comment="libz1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628796" comment="libz1-32bit-1.2.11-3.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153972" comment="libz1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9844</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9844" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9844" ref_url="https://www.suse.com/security/cve/CVE-2016-9844" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00013.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the zi_short function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via a large compression method value in the central directory file header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9844/">CVE-2016-9844</cve>
	<bugzilla href="https://bugzilla.suse.com/1013992">SUSE bug 1013992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159417">SUSE bug 1159417</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152223" comment="unzip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694925" comment="unzip-doc-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152224" comment="unzip-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9845</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9845" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9845" ref_url="https://www.suse.com/security/cve/CVE-2016-9845" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET_INFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9845/">CVE-2016-9845</cve>
	<bugzilla href="https://bugzilla.suse.com/1013767">SUSE bug 1013767</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9846</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9846" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9846" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9846" ref_url="https://www.suse.com/security/cve/CVE-2016-9846" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It could occur while updating the cursor data in update_cursor_data_virgl. A guest user/process could use this flaw to leak host memory bytes, resulting in DoS for a host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9846/">CVE-2016-9846</cve>
	<bugzilla href="https://bugzilla.suse.com/1013764">SUSE bug 1013764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169893" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9893</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9893" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9893" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9893" ref_url="https://www.suse.com/security/cve/CVE-2016-9893" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00013.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 50.1, Firefox ESR &lt; 45.6, and Thunderbird &lt; 45.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9893/">CVE-2016-9893</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169894" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9894</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9894" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9894" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9894" ref_url="https://www.suse.com/security/cve/CVE-2016-9894" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
    <description>
    A buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. Later writers will overflow the buffer, resulting in a potentially exploitable crash. This vulnerability affects Firefox &lt; 50.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9894/">CVE-2016-9894</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9895</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9895" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9895" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9895" ref_url="https://www.suse.com/security/cve/CVE-2016-9895" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00013.html" source="SUSE-SU"/>
    <description>
    Event handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP) that disallowed inline JavaScript. This vulnerability affects Firefox &lt; 50.1, Firefox ESR &lt; 45.6, and Thunderbird &lt; 45.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-9895/">CVE-2016-9895</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9896</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9896" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9896" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9896" ref_url="https://www.suse.com/security/cve/CVE-2016-9896" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
    <description>
    Use-after-free while manipulating the "navigator" object within WebVR. Note: WebVR is not currently enabled by default. This vulnerability affects Firefox &lt; 50.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9896/">CVE-2016-9896</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169897" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9897</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9897" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9897" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9897" ref_url="https://www.suse.com/security/cve/CVE-2016-9897" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00013.html" source="SUSE-SU"/>
    <description>
    Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a varying array within libGLES. This vulnerability affects Firefox &lt; 50.1, Firefox ESR &lt; 45.6, and Thunderbird &lt; 45.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9897/">CVE-2016-9897</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9898</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9898" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9898" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9898" ref_url="https://www.suse.com/security/cve/CVE-2016-9898" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00013.html" source="SUSE-SU"/>
    <description>
    Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. This vulnerability affects Firefox &lt; 50.1, Firefox ESR &lt; 45.6, and Thunderbird &lt; 45.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9898/">CVE-2016-9898</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9899</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9899" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9899" ref_url="https://www.suse.com/security/cve/CVE-2016-9899" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00013.html" source="SUSE-SU"/>
    <description>
    Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox &lt; 50.1, Firefox ESR &lt; 45.6, and Thunderbird &lt; 45.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9899/">CVE-2016-9899</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9900</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9900" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9900" ref_url="https://www.suse.com/security/cve/CVE-2016-9900" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00013.html" source="SUSE-SU"/>
    <description>
    External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. This could allow for cross-domain data leakage. This vulnerability affects Firefox &lt; 50.1, Firefox ESR &lt; 45.6, and Thunderbird &lt; 45.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9900/">CVE-2016-9900</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169901" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9901</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9901" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9901" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9901" ref_url="https://www.suse.com/security/cve/CVE-2016-9901" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
    <description>
    HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:pocket-saved" (unprivileged) page, giving it access to Pocket's messaging API through HTML injection. This vulnerability affects Firefox ESR &lt; 45.6 and Firefox &lt; 50.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9901/">CVE-2016-9901</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169902" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9902</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9902" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9902" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9902" ref_url="https://www.suse.com/security/cve/CVE-2016-9902" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
    <description>
    The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. This allows content from other origins to fire events and inject content and commands into the Pocket context. Note: this issue does not affect users with e10s enabled. This vulnerability affects Firefox ESR &lt; 45.6 and Firefox &lt; 50.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9902/">CVE-2016-9902</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169903" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9903</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9903" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9903" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9903" ref_url="https://www.suse.com/security/cve/CVE-2016-9903" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
    <description>
    Mozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability. If an additional vulnerability allowed this resource to be loaded as a document it could allow injecting content and script into an add-on's context. This vulnerability affects Firefox &lt; 50.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-9903/">CVE-2016-9903</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169904" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9904</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9904" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9904" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9904" ref_url="https://www.suse.com/security/cve/CVE-2016-9904" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00013.html" source="SUSE-SU"/>
    <description>
    An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zone in specific contexts. This could be used to leak information, such as usernames embedded in JavaScript code, across websites. This vulnerability affects Firefox &lt; 50.1, Firefox ESR &lt; 45.6, and Thunderbird &lt; 45.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9904/">CVE-2016-9904</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9905</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9905" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9905" ref_url="https://www.suse.com/security/cve/CVE-2016-9905" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00013.html" source="SUSE-SU"/>
    <description>
    A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR &lt; 45.6 and Thunderbird &lt; 45.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9905/">CVE-2016-9905</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9907</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9907" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9907" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9907" ref_url="https://www.suse.com/security/cve/CVE-2016-9907" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    CVE-2016-9907 Qemu: usb: redirector: memory leakage when destroying redirector
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9907/">CVE-2016-9907</cve>
	<bugzilla href="https://bugzilla.suse.com/1014109">SUSE bug 1014109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014490">SUSE bug 1014490</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9908</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9908" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9908" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9908" ref_url="https://www.suse.com/security/cve/CVE-2016-9908" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET' command. A guest user/process could use this flaw to leak contents of the host memory bytes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9908/">CVE-2016-9908</cve>
	<bugzilla href="https://bugzilla.suse.com/1014514">SUSE bug 1014514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169911" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9911</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9911" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9911" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9911" ref_url="https://www.suse.com/security/cve/CVE-2016-9911" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    CVE-2016-9911 Qemu: usb: ehci: memory leakage in ehci_init_transfer
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9911/">CVE-2016-9911</cve>
	<bugzilla href="https://bugzilla.suse.com/1014111">SUSE bug 1014111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014507">SUSE bug 1014507</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169912" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9912</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9912" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9912" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9912" ref_url="https://www.suse.com/security/cve/CVE-2016-9912" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It could occur while destroying gpu resource object in 'virtio_gpu_resource_destroy'. A guest user/process could use this flaw to leak host memory bytes, resulting in DoS for a host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9912/">CVE-2016-9912</cve>
	<bugzilla href="https://bugzilla.suse.com/1014112">SUSE bug 1014112</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9913</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9913" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9913" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9913" ref_url="https://www.suse.com/security/cve/CVE-2016-9913" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Memory leak in the v9fs_device_unrealize_common function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) via vectors involving the order of resource cleanup.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9913/">CVE-2016-9913</cve>
	<bugzilla href="https://bugzilla.suse.com/1014110">SUSE bug 1014110</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014311">SUSE bug 1014311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169917" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9917</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9917" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9917" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9917" ref_url="https://www.suse.com/security/cve/CVE-2016-9917" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1353-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00069.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, a buffer overflow was observed in "read_n" function in "tools/hcidump.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9917/">CVE-2016-9917</cve>
	<bugzilla href="https://bugzilla.suse.com/1015171">SUSE bug 1015171</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628327" comment="bluez-5.55-1.57 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165944" comment="bluez is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628328" comment="libbluetooth3-5.55-1.57 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165954" comment="libbluetooth3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169918" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9918</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9918" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9918" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9918" ref_url="https://www.suse.com/security/cve/CVE-2016-9918" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005494.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1198-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00054.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, an out-of-bounds read was identified in "packet_hexdump" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-9918/">CVE-2016-9918</cve>
	<bugzilla href="https://bugzilla.suse.com/1013893">SUSE bug 1013893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015173">SUSE bug 1015173</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628327" comment="bluez-5.55-1.57 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165944" comment="bluez is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628328" comment="libbluetooth3-5.55-1.57 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165954" comment="libbluetooth3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169921" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9921</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9921" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9921" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9921" ref_url="https://www.suse.com/security/cve/CVE-2016-9921" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0571-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    CVE-2016-9921 CVE-2016-9922 Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9921/">CVE-2016-9921</cve>
	<bugzilla href="https://bugzilla.suse.com/1014702">SUSE bug 1014702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015169">SUSE bug 1015169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9922</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9922" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9922" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9922" ref_url="https://www.suse.com/security/cve/CVE-2016-9922" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0571-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    CVE-2016-9921 CVE-2016-9922 Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9922/">CVE-2016-9922</cve>
	<bugzilla href="https://bugzilla.suse.com/1014702">SUSE bug 1014702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015169">SUSE bug 1015169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169923" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9923</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9923" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9923" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9923" ref_url="https://www.suse.com/security/cve/CVE-2016-9923" source="SUSE CVE"/>
    <description>
    Quick Emulator (Qemu) built with the 'chardev' backend support is vulnerable to a use after free issue. It could occur while hotplug and unplugging the device in the guest. A guest user/process could use this flaw to crash a Qemu process on the host resulting in DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9923/">CVE-2016-9923</cve>
	<bugzilla href="https://bugzilla.suse.com/1014703">SUSE bug 1014703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015145">SUSE bug 1015145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015148">SUSE bug 1015148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015154">SUSE bug 1015154</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169932" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9932</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9932" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9932" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9932" ref_url="https://www.suse.com/security/cve/CVE-2016-9932" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3221-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9932/">CVE-2016-9932</cve>
	<bugzilla href="https://bugzilla.suse.com/1012651">SUSE bug 1012651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016340">SUSE bug 1016340</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9939</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9939" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9939" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9939" ref_url="https://www.suse.com/security/cve/CVE-2016-9939" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009547.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3301-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OT7AMKZYZG3NMSSJK4GVQCGFPLIGSKD5/" source="SUSE-SU"/>
    <description>
    Crypto++ (aka cryptopp and libcrypto++) 5.6.4 contained a bug in its ASN.1 BER decoding routine. The library will allocate a memory block based on the length field of the ASN.1 object. If there is not enough content octets in the ASN.1 object, then the function will fail and the memory block will be zeroed even if its unused. There is a noticeable delay during the wipe for a large allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9939/">CVE-2016-9939</cve>
	<bugzilla href="https://bugzilla.suse.com/1015243">SUSE bug 1015243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633461" comment="libcryptopp-devel-5.6.5-1.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009262572" comment="libcryptopp-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633462" comment="libcryptopp5_6_5-5.6.5-1.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009262574" comment="libcryptopp5_6_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633656" comment="libcryptopp5_6_5-32bit-5.6.5-1.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009262576" comment="libcryptopp5_6_5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9957</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9957" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9957" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9957" ref_url="https://www.suse.com/security/cve/CVE-2016-9957" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in game-music-emu before 0.6.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9957/">CVE-2016-9957</cve>
	<bugzilla href="https://bugzilla.suse.com/1015941">SUSE bug 1015941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482785" comment="libgme0-0.6.2-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153980" comment="libgme0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9958</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9958" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9958" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9958" ref_url="https://www.suse.com/security/cve/CVE-2016-9958" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html" source="SUSE-SU"/>
    <description>
    game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9958/">CVE-2016-9958</cve>
	<bugzilla href="https://bugzilla.suse.com/1015941">SUSE bug 1015941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482785" comment="libgme0-0.6.2-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153980" comment="libgme0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9959</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9959" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9959" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9959" ref_url="https://www.suse.com/security/cve/CVE-2016-9959" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html" source="SUSE-SU"/>
    <description>
    game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9959/">CVE-2016-9959</cve>
	<bugzilla href="https://bugzilla.suse.com/1015941">SUSE bug 1015941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482785" comment="libgme0-0.6.2-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153980" comment="libgme0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9960</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9960" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9960" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9960" ref_url="https://www.suse.com/security/cve/CVE-2016-9960" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html" source="SUSE-SU"/>
    <description>
    game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9960/">CVE-2016-9960</cve>
	<bugzilla href="https://bugzilla.suse.com/1015941">SUSE bug 1015941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482785" comment="libgme0-0.6.2-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153980" comment="libgme0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9961</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9961" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9961" ref_url="https://www.suse.com/security/cve/CVE-2016-9961" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html" source="SUSE-SU"/>
    <description>
    game-music-emu before 0.6.1 mishandles unspecified integer values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9961/">CVE-2016-9961</cve>
	<bugzilla href="https://bugzilla.suse.com/1015941">SUSE bug 1015941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482785" comment="libgme0-0.6.2-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153980" comment="libgme0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20170379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-0379</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-0379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0379" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-0379" ref_url="https://www.suse.com/security/cve/CVE-2017-0379" source="SUSE CVE"/>
    <description>
    Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-0379/">CVE-2017-0379</cve>
	<bugzilla href="https://bugzilla.suse.com/1055837">SUSE bug 1055837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482233" comment="libgcrypt20-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482234" comment="libgcrypt20-32bit-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20170381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-0381</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-0381" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0381" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-0381" ref_url="https://www.suse.com/security/cve/CVE-2017-0381" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00031.html" source="SUSE-SU"/>
    <description>
    An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31607432.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-0381/">CVE-2017-0381</cve>
	<bugzilla href="https://bugzilla.suse.com/1020102">SUSE bug 1020102</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628819" comment="libopus0-1.3.1-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153984" comment="libopus0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20170641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-0641</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-0641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0641" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-0641" ref_url="https://www.suse.com/security/cve/CVE-2017-0641" source="SUSE CVE"/>
    <description>
    A remote denial of service vulnerability in libvpx in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34360591.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-0641/">CVE-2017-0641</cve>
	<bugzilla href="https://bugzilla.suse.com/1056539">SUSE bug 1056539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482448" comment="libvpx4-1.6.1-6.6.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177224" comment="libvpx4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20170663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-0663</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-0663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0663" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-0663" ref_url="https://www.suse.com/security/cve/CVE-2017-0663" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1746-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00000.html" source="SUSE-SU"/>
    <description>
    A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-0663/">CVE-2017-0663</cve>
	<bugzilla href="https://bugzilla.suse.com/1044337">SUSE bug 1044337</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000050</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000050" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000050" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000050" ref_url="https://www.suse.com/security/cve/CVE-2017-1000050" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000050/">CVE-2017-1000050</cve>
	<bugzilla href="https://bugzilla.suse.com/1047958">SUSE bug 1047958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000083</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000083" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000083" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000083" ref_url="https://www.suse.com/security/cve/CVE-2017-1000083" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00090.html" source="SUSE-SU"/>
    <description>
    backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000083/">CVE-2017-1000083</cve>
	<bugzilla href="https://bugzilla.suse.com/1046856">SUSE bug 1046856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487204" comment="evince-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151448" comment="evince is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487206" comment="evince-lang-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151449" comment="evince-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487209" comment="evince-plugin-pdfdocument-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154095" comment="evince-plugin-pdfdocument is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487213" comment="libevdocument3-4-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151450" comment="libevdocument3-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487214" comment="libevview3-3-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151451" comment="libevview3-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487215" comment="nautilus-evince-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151452" comment="nautilus-evince is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487216" comment="typelib-1_0-EvinceDocument-3_0-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151453" comment="typelib-1_0-EvinceDocument-3_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487217" comment="typelib-1_0-EvinceView-3_0-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151454" comment="typelib-1_0-EvinceView-3_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000099</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000099" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000099" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000099" ref_url="https://www.suse.com/security/cve/CVE-2017-1000099" source="SUSE CVE"/>
    <description>
    When asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data about the file using HTTP-like headers. The code doing this would send the wrong buffer to the user (stdout or the application's provide callback), which could lead to other private data from the heap to get inadvertently displayed. The wrong buffer was an uninitialized memory area allocated on the heap and if it turned out to not contain any zero byte, it would continue and display the data following that buffer in memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000099/">CVE-2017-1000099</cve>
	<bugzilla href="https://bugzilla.suse.com/1051645">SUSE bug 1051645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000100" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000100</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000100" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000100" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000100" ref_url="https://www.suse.com/security/cve/CVE-2017-1000100" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00080.html" source="SUSE-SU"/>
    <description>
    When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The endto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn't restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. Limit curl's redirect protocols with --proto-redir and libcurl's with CURLOPT_REDIR_PROTOCOLS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000100/">CVE-2017-1000100</cve>
	<bugzilla href="https://bugzilla.suse.com/1051644">SUSE bug 1051644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000101</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000101" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000101" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000101" ref_url="https://www.suse.com/security/cve/CVE-2017-1000101" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00080.html" source="SUSE-SU"/>
    <description>
    curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a carefully crafted, or just wrongly written, URL. The URL is stored in a heap based buffer, so it could then be made to wrongly read something else instead of crashing. An example of a URL that triggers the flaw would be `http://ur%20[0-60000000000000000000`.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000101/">CVE-2017-1000101</cve>
	<bugzilla href="https://bugzilla.suse.com/1051643">SUSE bug 1051643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000121</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000121" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000121" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000121" ref_url="https://www.suse.com/security/cve/CVE-2017-1000121" source="SUSE CVE"/>
    <description>
    The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow in the UI process. This vulnerability does not affect Apple products.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000121/">CVE-2017-1000121</cve>
	<bugzilla href="https://bugzilla.suse.com/1078996">SUSE bug 1078996</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000122" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000122</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000122" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000122" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000122" ref_url="https://www.suse.com/security/cve/CVE-2017-1000122" source="SUSE CVE"/>
    <description>
    The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromised secondary process to cause a denial of service (release assertion) of the UI process. This vulnerability does not affect Apple products.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000122/">CVE-2017-1000122</cve>
	<bugzilla href="https://bugzilla.suse.com/1078994">SUSE bug 1078994</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000126" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000126" ref_url="https://www.suse.com/security/cve/CVE-2017-1000126" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006676.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html" source="SUSE-SU"/>
    <description>
    exiv2 0.26 contains a Stack out of bounds read in webp parser
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000126/">CVE-2017-1000126</cve>
	<bugzilla href="https://bugzilla.suse.com/1068873">SUSE bug 1068873</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000158</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000158" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000158" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000158" ref_url="https://www.suse.com/security/cve/CVE-2017-1000158" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0768-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20180768-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00098.html" source="SUSE-SU"/>
    <description>
    CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000158/">CVE-2017-1000158</cve>
	<bugzilla href="https://bugzilla.suse.com/1068664">SUSE bug 1068664</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000249</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000249" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000249" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000249" ref_url="https://www.suse.com/security/cve/CVE-2017-1000249" source="SUSE CVE"/>
    <description>
    An issue in file() was introduced in commit 9611f31313a93aa036389c5f3b15eea53510d4d1 (Oct 2016) lets an attacker overwrite a fixed 20 bytes stack buffer with a specially crafted .notes section in an ELF binary. This was fixed in commit 35c94dc6acc418f1ad7f6241a6680e5327495793 (Aug 2017).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000249/">CVE-2017-1000249</cve>
	<bugzilla href="https://bugzilla.suse.com/1056838">SUSE bug 1056838</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628435" comment="file-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151700" comment="file is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628437" comment="file-magic-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151702" comment="file-magic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628438" comment="libmagic1-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151703" comment="libmagic1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628439" comment="libmagic1-32bit-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151704" comment="libmagic1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000251</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000251" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000251" ref_url="https://www.suse.com/security/cve/CVE-2017-1000251" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2548-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2772-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2773-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2779-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2782-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2783-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2784-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2787-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2790-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2792-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2794-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2796-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2797-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2798-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2803-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2804-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2805-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2806-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2809-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2816-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="TID000019028" ref_url="https://www.suse.com/support/kb/doc/?id=000019028" source="SUSE-SU"/>
		<reference ref_id="TID7021383" ref_url="https://www.suse.com/support/kb/doc/?id=7021383" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2495-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00057.html" source="SUSE-SU"/>
    <description>
    The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000251/">CVE-2017-1000251</cve>
	<bugzilla href="https://bugzilla.suse.com/1057389">SUSE bug 1057389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057950">SUSE bug 1057950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070535">SUSE bug 1070535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1072162">SUSE bug 1072162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120758">SUSE bug 1120758</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000254</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000254" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000254" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000254" ref_url="https://www.suse.com/security/cve/CVE-2017-1000254" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003464.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003630.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2880-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00098.html" source="SUSE-SU"/>
    <description>
    libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000254/">CVE-2017-1000254</cve>
	<bugzilla href="https://bugzilla.suse.com/1061876">SUSE bug 1061876</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000256" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000256</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000256" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000256" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000256" ref_url="https://www.suse.com/security/cve/CVE-2017-1000256" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003354.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2878-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00096.html" source="SUSE-SU"/>
    <description>
    libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a failure to validate SSL/TLS certificates by default.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000256/">CVE-2017-1000256</cve>
	<bugzilla href="https://bugzilla.suse.com/1062563">SUSE bug 1062563</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000257" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000257</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000257" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000257" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000257" ref_url="https://www.suse.com/security/cve/CVE-2017-1000257" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003359.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2880-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00098.html" source="SUSE-SU"/>
    <description>
    An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl's deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000257/">CVE-2017-1000257</cve>
	<bugzilla href="https://bugzilla.suse.com/1063824">SUSE bug 1063824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000366" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000366</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000366" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000366" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000366" ref_url="https://www.suse.com/security/cve/CVE-2017-1000366" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1611-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1614-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="TID7020973" ref_url="https://www.suse.com/support/kb/doc/?id=7020973" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1629-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00024.html" source="SUSE-SU"/>
    <description>
    glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000366/">CVE-2017-1000366</cve>
	<bugzilla href="https://bugzilla.suse.com/1037551">SUSE bug 1037551</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039357">SUSE bug 1039357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071319">SUSE bug 1071319</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000367" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000367</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000367" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000367" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000367" ref_url="https://www.suse.com/security/cve/CVE-2017-1000367" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00079.html" source="SUSE-SU"/>
    <description>
    Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000367/">CVE-2017-1000367</cve>
	<bugzilla href="https://bugzilla.suse.com/1007501">SUSE bug 1007501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039361">SUSE bug 1039361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042146">SUSE bug 1042146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077345">SUSE bug 1077345</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629025" comment="sudo-1.9.5p2-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629027" comment="sudo-plugin-python-1.9.5p2-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695524" comment="sudo-plugin-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000368" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000368</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000368" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000368" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000368" ref_url="https://www.suse.com/security/cve/CVE-2017-1000368" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="TID7021027" ref_url="https://www.suse.com/support/kb/doc/?id=7021027" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1697-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00034.html" source="SUSE-SU"/>
    <description>
    Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_process_ttyname() function resulting in information disclosure and command execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000368/">CVE-2017-1000368</cve>
	<bugzilla href="https://bugzilla.suse.com/1039361">SUSE bug 1039361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042146">SUSE bug 1042146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1045986">SUSE bug 1045986</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629025" comment="sudo-1.9.5p2-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629027" comment="sudo-plugin-python-1.9.5p2-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695524" comment="sudo-plugin-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000381</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000381" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000381" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000381" ref_url="https://www.suse.com/security/cve/CVE-2017-1000381" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1857-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2179-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00061.html" source="SUSE-SU"/>
    <description>
    The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000381/">CVE-2017-1000381</cve>
	<bugzilla href="https://bugzilla.suse.com/1044946">SUSE bug 1044946</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628330" comment="libcares2-1.17.0-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153706" comment="libcares2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000382</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000382" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000382" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000382" ref_url="https://www.suse.com/security/cve/CVE-2017-1000382" source="SUSE CVE"/>
    <description>
    VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000382/">CVE-2017-1000382</cve>
	<bugzilla href="https://bugzilla.suse.com/1065958">SUSE bug 1065958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070955">SUSE bug 1070955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629044" comment="vim-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151193" comment="vim is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629045" comment="vim-data-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151194" comment="vim-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629046" comment="vim-data-common-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177135" comment="vim-data-common is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000408</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000408" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000408" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000408" ref_url="https://www.suse.com/security/cve/CVE-2017-1000408" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00040.html" source="SUSE-SU"/>
    <description>
    A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000408/">CVE-2017-1000408</cve>
	<bugzilla href="https://bugzilla.suse.com/1039357">SUSE bug 1039357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071319">SUSE bug 1071319</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000409" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000409</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000409" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000409" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000409" ref_url="https://www.suse.com/security/cve/CVE-2017-1000409" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00040.html" source="SUSE-SU"/>
    <description>
    A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000409/">CVE-2017-1000409</cve>
	<bugzilla href="https://bugzilla.suse.com/1071319">SUSE bug 1071319</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10268</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10268" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10268" ref_url="https://www.suse.com/security/cve/CVE-2017-10268" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0384-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003712.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0400-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00029.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-10268/">CVE-2017-10268</cve>
	<bugzilla href="https://bugzilla.suse.com/1064101">SUSE bug 1064101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064119">SUSE bug 1064119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076505">SUSE bug 1076505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10286</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10286" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10286" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10286" ref_url="https://www.suse.com/security/cve/CVE-2017-10286" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00076.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10286/">CVE-2017-10286</cve>
	<bugzilla href="https://bugzilla.suse.com/1064107">SUSE bug 1064107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064119">SUSE bug 1064119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710320" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10320</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10320" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10320" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10320" ref_url="https://www.suse.com/security/cve/CVE-2017-10320" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10320/">CVE-2017-10320</cve>
	<bugzilla href="https://bugzilla.suse.com/1064113">SUSE bug 1064113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064119">SUSE bug 1064119</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10365</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10365" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10365" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10365" ref_url="https://www.suse.com/security/cve/CVE-2017-10365" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 3.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.8/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-10365/">CVE-2017-10365</cve>
	<bugzilla href="https://bugzilla.suse.com/1064114">SUSE bug 1064114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064119">SUSE bug 1064119</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10378</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10378" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10378" ref_url="https://www.suse.com/security/cve/CVE-2017-10378" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0384-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003712.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0400-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00029.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.11 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10378/">CVE-2017-10378</cve>
	<bugzilla href="https://bugzilla.suse.com/1064115">SUSE bug 1064115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064119">SUSE bug 1064119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076505">SUSE bug 1076505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10379</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10379" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10379" ref_url="https://www.suse.com/security/cve/CVE-2017-10379" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00076.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10379/">CVE-2017-10379</cve>
	<bugzilla href="https://bugzilla.suse.com/1064116">SUSE bug 1064116</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064119">SUSE bug 1064119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10384</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10384" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10384" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10384" ref_url="https://www.suse.com/security/cve/CVE-2017-10384" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00076.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.57 and earlier 5.6.37 and earlier 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10384/">CVE-2017-10384</cve>
	<bugzilla href="https://bugzilla.suse.com/1064117">SUSE bug 1064117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064119">SUSE bug 1064119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10392</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10392" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10392" ref_url="https://www.suse.com/security/cve/CVE-2017-10392" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2975-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00026.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-10392/">CVE-2017-10392</cve>
	<bugzilla href="https://bugzilla.suse.com/1064200">SUSE bug 1064200</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10407</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10407" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10407" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10407" ref_url="https://www.suse.com/security/cve/CVE-2017-10407" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2975-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00026.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-10407/">CVE-2017-10407</cve>
	<bugzilla href="https://bugzilla.suse.com/1064200">SUSE bug 1064200</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10408</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10408" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10408" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10408" ref_url="https://www.suse.com/security/cve/CVE-2017-10408" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2975-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00026.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-10408/">CVE-2017-10408</cve>
	<bugzilla href="https://bugzilla.suse.com/1064200">SUSE bug 1064200</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710428" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10428</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10428" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10428" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10428" ref_url="https://www.suse.com/security/cve/CVE-2017-10428" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2975-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00026.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 5.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-10428/">CVE-2017-10428</cve>
	<bugzilla href="https://bugzilla.suse.com/1064200">SUSE bug 1064200</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10664</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10664" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10664" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10664" ref_url="https://www.suse.com/security/cve/CVE-2017-10664" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2416-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
    <description>
    qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-10664/">CVE-2017-10664</cve>
	<bugzilla href="https://bugzilla.suse.com/1046636">SUSE bug 1046636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046637">SUSE bug 1046637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10683</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10683" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10683" ref_url="https://www.suse.com/security/cve/CVE-2017-10683" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2682-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00028.html" source="SUSE-SU"/>
    <description>
    In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c. A crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10683/">CVE-2017-10683</cve>
	<bugzilla href="https://bugzilla.suse.com/1046766">SUSE bug 1046766</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628802" comment="libmpg123-0-1.26.4-1.15 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161293" comment="libmpg123-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694859" comment="mpg123-openal-1.26.4-1.15 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161295" comment="mpg123-openal is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629210" comment="mpg123-pulse-1.26.4-1.15 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161296" comment="mpg123-pulse is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10699</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10699" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10699" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10699" ref_url="https://www.suse.com/security/cve/CVE-2017-10699" source="SUSE CVE"/>
    <description>
    avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy() with a wrong size, leading to a denial of service (application crash) or possibly code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10699/">CVE-2017-10699</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10806</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10806" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10806" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10806" ref_url="https://www.suse.com/security/cve/CVE-2017-10806" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2416-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU process crash) via vectors related to logging debug messages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10806/">CVE-2017-10806</cve>
	<bugzilla href="https://bugzilla.suse.com/1047674">SUSE bug 1047674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047675">SUSE bug 1047675</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10971</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10971" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10971" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10971" ref_url="https://www.suse.com/security/cve/CVE-2017-10971" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1850-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1859-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1860-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1885-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00025.html" source="SUSE-SU"/>
    <description>
    In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10971/">CVE-2017-10971</cve>
	<bugzilla href="https://bugzilla.suse.com/1035283">SUSE bug 1035283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047730">SUSE bug 1047730</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629053" comment="xorg-x11-server-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629054" comment="xorg-x11-server-extra-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684245" comment="xorg-x11-server-wayland-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177168" comment="xorg-x11-server-wayland is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10972</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10972" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10972" ref_url="https://www.suse.com/security/cve/CVE-2017-10972" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1850-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1859-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1860-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1885-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00025.html" source="SUSE-SU"/>
    <description>
    Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-10972/">CVE-2017-10972</cve>
	<bugzilla href="https://bugzilla.suse.com/1035283">SUSE bug 1035283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047730">SUSE bug 1047730</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629053" comment="xorg-x11-server-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629054" comment="xorg-x11-server-extra-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684245" comment="xorg-x11-server-wayland-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177168" comment="xorg-x11-server-wayland is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11103</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11103" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11103" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11103" ref_url="https://www.suse.com/security/cve/CVE-2017-11103" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2237-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="TID7021155" ref_url="https://www.suse.com/support/kb/doc/?id=7021155" source="SUSE-SU"/>
		<reference ref_id="TID7022454" ref_url="https://www.suse.com/support/kb/doc/?id=7022454" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00077.html" source="SUSE-SU"/>
    <description>
    Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11103/">CVE-2017-11103</cve>
	<bugzilla href="https://bugzilla.suse.com/1048278">SUSE bug 1048278</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11126" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11126" ref_url="https://www.suse.com/security/cve/CVE-2017-11126" source="SUSE CVE"/>
    <description>
    The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file that is mishandled in the code for the "block_type != 2" case, a similar issue to CVE-2017-9870.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11126/">CVE-2017-11126</cve>
	<bugzilla href="https://bugzilla.suse.com/1046766">SUSE bug 1046766</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082393">SUSE bug 1082393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628802" comment="libmpg123-0-1.26.4-1.15 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161293" comment="libmpg123-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694859" comment="mpg123-openal-1.26.4-1.15 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161295" comment="mpg123-openal is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629210" comment="mpg123-pulse-1.26.4-1.15 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161296" comment="mpg123-pulse is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11215</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11215" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11215" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11215" ref_url="https://www.suse.com/security/cve/CVE-2017-11215" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11215/">CVE-2017-11215</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11225</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11225" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11225" ref_url="https://www.suse.com/security/cve/CVE-2017-11225" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11225/">CVE-2017-11225</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11311</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11311" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11311" ref_url="https://www.suse.com/security/cve/CVE-2017-11311" source="SUSE CVE"/>
    <description>
    soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same sample slot for two samples.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11311/">CVE-2017-11311</cve>
	<bugzilla href="https://bugzilla.suse.com/1048666">SUSE bug 1048666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487555" comment="libopenmpt0-0.3.19-2.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230504" comment="libopenmpt0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711334" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11334</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11334" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11334" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11334" ref_url="https://www.suse.com/security/cve/CVE-2017-11334" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2416-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
    <description>
    The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11334/">CVE-2017-11334</cve>
	<bugzilla href="https://bugzilla.suse.com/1048902">SUSE bug 1048902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1048920">SUSE bug 1048920</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711337" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11337</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11337" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11337" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11337" ref_url="https://www.suse.com/security/cve/CVE-2017-11337" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11337/">CVE-2017-11337</cve>
	<bugzilla href="https://bugzilla.suse.com/1048883">SUSE bug 1048883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11338</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11338" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11338" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11338" ref_url="https://www.suse.com/security/cve/CVE-2017-11338" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11338/">CVE-2017-11338</cve>
	<bugzilla href="https://bugzilla.suse.com/1048883">SUSE bug 1048883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711339" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11339</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11339" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11339" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11339" ref_url="https://www.suse.com/security/cve/CVE-2017-11339" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11339/">CVE-2017-11339</cve>
	<bugzilla href="https://bugzilla.suse.com/1048883">SUSE bug 1048883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711340" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11340</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11340" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11340" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11340" ref_url="https://www.suse.com/security/cve/CVE-2017-11340" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11340/">CVE-2017-11340</cve>
	<bugzilla href="https://bugzilla.suse.com/1048883">SUSE bug 1048883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711368" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11368</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11368" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11368" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11368" ref_url="https://www.suse.com/security/cve/CVE-2017-11368" source="SUSE CVE"/>
    <description>
    In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11368/">CVE-2017-11368</cve>
	<bugzilla href="https://bugzilla.suse.com/1049819">SUSE bug 1049819</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11399</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11399" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11399" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11399" ref_url="https://www.suse.com/security/cve/CVE-2017-11399" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access and application crash) or possibly have unspecified other impact via a crafted APE file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11399/">CVE-2017-11399</cve>
	<bugzilla href="https://bugzilla.suse.com/1049095">SUSE bug 1049095</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11423</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11423" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11423" ref_url="https://www.suse.com/security/cve/CVE-2017-11423" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0809-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0863-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00062.html" source="SUSE-SU"/>
    <description>
    The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted CAB file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11423/">CVE-2017-11423</cve>
	<bugzilla href="https://bugzilla.suse.com/1049423">SUSE bug 1049423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083915">SUSE bug 1083915</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482310" comment="libmspack0-0.6-3.8.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151459" comment="libmspack0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11434</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11434" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11434" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11434" ref_url="https://www.suse.com/security/cve/CVE-2017-11434" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2416-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
    <description>
    The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11434/">CVE-2017-11434</cve>
	<bugzilla href="https://bugzilla.suse.com/1049381">SUSE bug 1049381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049578">SUSE bug 1049578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11462</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11462" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11462" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11462" ref_url="https://www.suse.com/security/cve/CVE-2017-11462" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2659-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003277.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003861.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2712-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00041.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-11462/">CVE-2017-11462</cve>
	<bugzilla href="https://bugzilla.suse.com/1056995">SUSE bug 1056995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122468">SUSE bug 1122468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11464</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11464" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11464" ref_url="https://www.suse.com/security/cve/CVE-2017-11464" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2149-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00042.html" source="SUSE-SU"/>
    <description>
    A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11464/">CVE-2017-11464</cve>
	<bugzilla href="https://bugzilla.suse.com/1049607">SUSE bug 1049607</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628457" comment="gdk-pixbuf-loader-rsvg-2.46.5-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151634" comment="gdk-pixbuf-loader-rsvg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628458" comment="librsvg-2-2-2.46.5-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151635" comment="librsvg-2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694738" comment="librsvg-lang-2.46.5-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009353379" comment="librsvg-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694739" comment="rsvg-thumbnailer-2.46.5-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161885" comment="rsvg-thumbnailer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629215" comment="typelib-1_0-Rsvg-2_0-2.46.5-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151637" comment="typelib-1_0-Rsvg-2_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11553</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11553" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11553" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11553" ref_url="https://www.suse.com/security/cve/CVE-2017-11553" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is an illegal address access in the extend_alias_table function in localealias.c of Exiv2 0.26. A crafted input will lead to remote denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11553/">CVE-2017-11553</cve>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103870">SUSE bug 1103870</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11591</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11591" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11591" ref_url="https://www.suse.com/security/cve/CVE-2017-11591" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013143.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2818-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11591/">CVE-2017-11591</cve>
	<bugzilla href="https://bugzilla.suse.com/1050257">SUSE bug 1050257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725422" comment="exiv2-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725423" comment="exiv2-lang-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495609" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725424" comment="libexiv2-26-32bit-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725375" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725425" comment="libexiv2-doc-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11592</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11592" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11592" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11592" ref_url="https://www.suse.com/security/cve/CVE-2017-11592" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is a Mismatched Memory Management Routines vulnerability in the Exiv2::FileIo::seek function of Exiv2 0.26 that will lead to a remote denial of service attack (heap memory corruption) via crafted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11592/">CVE-2017-11592</cve>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103872">SUSE bug 1103872</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11613</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11613" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11613" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11613" ref_url="https://www.suse.com/security/cve/CVE-2017-11613" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004247.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004759.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004784.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3371-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00056.html" source="SUSE-SU"/>
    <description>
    In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a denial of service attack. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If we set the value of td_imagelength close to the amount of system memory, it will hang the system or trigger the OOM killer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11613/">CVE-2017-11613</cve>
	<bugzilla href="https://bugzilla.suse.com/1082332">SUSE bug 1082332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106853">SUSE bug 1106853</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11624</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11624" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11624" ref_url="https://www.suse.com/security/cve/CVE-2017-11624" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3066-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004714.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0469-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00056.html" source="SUSE-SU"/>
    <description>
    A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc after two consecutive calls to QPDFObjectHandle::parseInternal, aka an "infinite loop."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11624/">CVE-2017-11624</cve>
	<bugzilla href="https://bugzilla.suse.com/1050581">SUSE bug 1050581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482383" comment="libqpdf26-9.0.2-1.36 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695543" comment="libqpdf26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11625</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11625" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11625" ref_url="https://www.suse.com/security/cve/CVE-2017-11625" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3066-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004714.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0469-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00056.html" source="SUSE-SU"/>
    <description>
    A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDF::resolveObjectsInStream function in QPDF.cc, aka an "infinite loop."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11625/">CVE-2017-11625</cve>
	<bugzilla href="https://bugzilla.suse.com/1050579">SUSE bug 1050579</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482383" comment="libqpdf26-9.0.2-1.36 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695543" comment="libqpdf26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711626" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11626</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11626" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11626" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11626" ref_url="https://www.suse.com/security/cve/CVE-2017-11626" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3066-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004714.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0469-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00056.html" source="SUSE-SU"/>
    <description>
    A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc after four consecutive calls to QPDFObjectHandle::parseInternal, aka an "infinite loop."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11626/">CVE-2017-11626</cve>
	<bugzilla href="https://bugzilla.suse.com/1050578">SUSE bug 1050578</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482383" comment="libqpdf26-9.0.2-1.36 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695543" comment="libqpdf26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11627</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11627" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11627" ref_url="https://www.suse.com/security/cve/CVE-2017-11627" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3066-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004714.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0469-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00056.html" source="SUSE-SU"/>
    <description>
    A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the PointerHolder function in PointerHolder.hh, aka an "infinite loop."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11627/">CVE-2017-11627</cve>
	<bugzilla href="https://bugzilla.suse.com/1050577">SUSE bug 1050577</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482383" comment="libqpdf26-9.0.2-1.36 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695543" comment="libqpdf26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11665</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11665" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11665" ref_url="https://www.suse.com/security/cve/CVE-2017-11665" source="SUSE CVE"/>
    <description>
    The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service (Segmentation Violation and application crash) via a crafted stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11665/">CVE-2017-11665</cve>
	<bugzilla href="https://bugzilla.suse.com/1082335">SUSE bug 1082335</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11683</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11683" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11683" ref_url="https://www.suse.com/security/cve/CVE-2017-11683" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004960.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2818-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11683/">CVE-2017-11683</cve>
	<bugzilla href="https://bugzilla.suse.com/1051188">SUSE bug 1051188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12067</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12067" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12067" ref_url="https://www.suse.com/security/cve/CVE-2017-12067" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2184-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00077.html" source="SUSE-SU"/>
    <description>
    Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12067/">CVE-2017-12067</cve>
	<bugzilla href="https://bugzilla.suse.com/1051634">SUSE bug 1051634</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486490" comment="libpotrace0-1.15-3.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151954" comment="libpotrace0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12132</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12132" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12132" ref_url="https://www.suse.com/security/cve/CVE-2017-12132" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004372.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00039.html" source="SUSE-SU"/>
    <description>
    The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-12132/">CVE-2017-12132</cve>
	<bugzilla href="https://bugzilla.suse.com/1051791">SUSE bug 1051791</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12133</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12133" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12133" ref_url="https://www.suse.com/security/cve/CVE-2017-12133" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0874-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003870.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0668-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00037.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) before 2.26 allows remote attackers to have unspecified impact via vectors related to error path.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12133/">CVE-2017-12133</cve>
	<bugzilla href="https://bugzilla.suse.com/1081556">SUSE bug 1081556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980854">SUSE bug 980854</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12135</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12135" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12135" ref_url="https://www.suse.com/security/cve/CVE-2017-12135" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00022.html" source="SUSE-SU"/>
    <description>
    Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-12135/">CVE-2017-12135</cve>
	<bugzilla href="https://bugzilla.suse.com/1051787">SUSE bug 1051787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169392">SUSE bug 1169392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12136</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12136" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12136" ref_url="https://www.suse.com/security/cve/CVE-2017-12136" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00022.html" source="SUSE-SU"/>
    <description>
    Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain privileges on the host via vectors involving maptrack free list handling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12136/">CVE-2017-12136</cve>
	<bugzilla href="https://bugzilla.suse.com/1051789">SUSE bug 1051789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12137</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12137" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12137" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12137" ref_url="https://www.suse.com/security/cve/CVE-2017-12137" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00022.html" source="SUSE-SU"/>
    <description>
    arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12137/">CVE-2017-12137</cve>
	<bugzilla href="https://bugzilla.suse.com/1051788">SUSE bug 1051788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12150</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12150" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12150" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12150" ref_url="https://www.suse.com/security/cve/CVE-2017-12150" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003291.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003292.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2726-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003390.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003453.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2706-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2713-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3143-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00095.html" source="SUSE-SU"/>
    <description>
    It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-30"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-12150/">CVE-2017-12150</cve>
	<bugzilla href="https://bugzilla.suse.com/1058622">SUSE bug 1058622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712151" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12151</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12151" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12151" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12151" ref_url="https://www.suse.com/security/cve/CVE-2017-12151" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003291.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2726-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003390.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003453.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2706-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2713-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3143-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00095.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-12151/">CVE-2017-12151</cve>
	<bugzilla href="https://bugzilla.suse.com/1058565">SUSE bug 1058565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12153</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12153" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12153" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12153" ref_url="https://www.suse.com/security/cve/CVE-2017-12153" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2739-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2741-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00019.html" source="SUSE-SU"/>
    <description>
    A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12153/">CVE-2017-12153</cve>
	<bugzilla href="https://bugzilla.suse.com/1058410">SUSE bug 1058410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058624">SUSE bug 1058624</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12163</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12163" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12163" ref_url="https://www.suse.com/security/cve/CVE-2017-12163" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003291.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003292.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2726-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003390.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003453.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2706-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2713-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3143-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00095.html" source="SUSE-SU"/>
    <description>
    An information leak flaw was found in the way SMB1 protocol was implemented by Samba. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12163/">CVE-2017-12163</cve>
	<bugzilla href="https://bugzilla.suse.com/1058410">SUSE bug 1058410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058624">SUSE bug 1058624</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12164</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12164" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12164" ref_url="https://www.suse.com/security/cve/CVE-2017-12164" source="SUSE CVE"/>
    <description>
    A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12164/">CVE-2017-12164</cve>
	<bugzilla href="https://bugzilla.suse.com/1058136">SUSE bug 1058136</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180206">SUSE bug 1180206</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694740" comment="gdm-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151581" comment="gdm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694741" comment="gdm-lang-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151582" comment="gdm-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694742" comment="gdmflexiserver-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151583" comment="gdmflexiserver is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694743" comment="libgdm1-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151584" comment="libgdm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694744" comment="typelib-1_0-Gdm-1_0-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151585" comment="typelib-1_0-Gdm-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12166</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12166" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12166" ref_url="https://www.suse.com/security/cve/CVE-2017-12166" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2838-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2839-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00082.html" source="SUSE-SU"/>
    <description>
    OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly resulting in code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="10/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12166/">CVE-2017-12166</cve>
	<bugzilla href="https://bugzilla.suse.com/1060877">SUSE bug 1060877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694906" comment="openvpn-2.4.3-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152221" comment="openvpn is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12176</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12176" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12176" ref_url="https://www.suse.com/security/cve/CVE-2017-12176" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2823-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00074.html" source="SUSE-SU"/>
    <description>
    xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12176/">CVE-2017-12176</cve>
	<bugzilla href="https://bugzilla.suse.com/1063041">SUSE bug 1063041</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629053" comment="xorg-x11-server-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629054" comment="xorg-x11-server-extra-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684245" comment="xorg-x11-server-wayland-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177168" comment="xorg-x11-server-wayland is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12187</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12187" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12187" ref_url="https://www.suse.com/security/cve/CVE-2017-12187" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2823-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00074.html" source="SUSE-SU"/>
    <description>
    xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12187/">CVE-2017-12187</cve>
	<bugzilla href="https://bugzilla.suse.com/1063034">SUSE bug 1063034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629053" comment="xorg-x11-server-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629054" comment="xorg-x11-server-extra-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684245" comment="xorg-x11-server-wayland-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177168" comment="xorg-x11-server-wayland is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12448</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12448" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12448" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12448" ref_url="https://www.suse.com/security/cve/CVE-2017-12448" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and possibly achieve code execution via a crafted nested archive file. This issue occurs because incorrect functions are called during an attempt to release memory. The issue can be addressed by better input validation in the bfd_generic_archive_p function in bfd/archive.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12448/">CVE-2017-12448</cve>
	<bugzilla href="https://bugzilla.suse.com/1052518">SUSE bug 1052518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059785">SUSE bug 1059785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12450</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12450" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12450" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12450" ref_url="https://www.suse.com/security/cve/CVE-2017-12450" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted vms alpha file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12450/">CVE-2017-12450</cve>
	<bugzilla href="https://bugzilla.suse.com/1052514">SUSE bug 1052514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059785">SUSE bug 1059785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712452" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12452</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12452" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12452" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12452" ref_url="https://www.suse.com/security/cve/CVE-2017-12452" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted mach-o file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12452/">CVE-2017-12452</cve>
	<bugzilla href="https://bugzilla.suse.com/1052511">SUSE bug 1052511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059785">SUSE bug 1059785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712453" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12453</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12453" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12453" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12453" ref_url="https://www.suse.com/security/cve/CVE-2017-12453" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12453/">CVE-2017-12453</cve>
	<bugzilla href="https://bugzilla.suse.com/1052509">SUSE bug 1052509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059785">SUSE bug 1059785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12454</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12454" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12454" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12454" ref_url="https://www.suse.com/security/cve/CVE-2017-12454" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12454/">CVE-2017-12454</cve>
	<bugzilla href="https://bugzilla.suse.com/1052507">SUSE bug 1052507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059785">SUSE bug 1059785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12456</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12456" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12456" ref_url="https://www.suse.com/security/cve/CVE-2017-12456" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted binary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12456/">CVE-2017-12456</cve>
	<bugzilla href="https://bugzilla.suse.com/1052503">SUSE bug 1052503</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059785">SUSE bug 1059785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12562</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12562" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12562" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12562" ref_url="https://www.suse.com/security/cve/CVE-2017-12562" source="SUSE CVE"/>
    <description>
    Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12562/">CVE-2017-12562</cve>
	<bugzilla href="https://bugzilla.suse.com/1052476">SUSE bug 1052476</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712595" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12595</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12595" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12595" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12595" ref_url="https://www.suse.com/security/cve/CVE-2017-12595" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3066-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004714.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0469-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00056.html" source="SUSE-SU"/>
    <description>
    The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service (stack consumption and segmentation fault) or possibly have unspecified other impact via a PDF document with a deep data structure, as demonstrated by a crash in QPDFObjectHandle::parseInternal in libqpdf/QPDFObjectHandle.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12595/">CVE-2017-12595</cve>
	<bugzilla href="https://bugzilla.suse.com/1055960">SUSE bug 1055960</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482383" comment="libqpdf26-9.0.2-1.36 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695543" comment="libqpdf26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12596</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12596" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12596" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12596" ref_url="https://www.suse.com/security/cve/CVE-2017-12596" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003772.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003774.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0619-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00013.html" source="SUSE-SU"/>
    <description>
    In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12596/">CVE-2017-12596</cve>
	<bugzilla href="https://bugzilla.suse.com/1052522">SUSE bug 1052522</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12618</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12618" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12618" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12618" ref_url="https://www.suse.com/security/cve/CVE-2017-12618" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003492.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003689.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3325-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00051.html" source="SUSE-SU"/>
    <description>
    Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and cause a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.3/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12618/">CVE-2017-12618</cve>
	<bugzilla href="https://bugzilla.suse.com/1064990">SUSE bug 1064990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628284" comment="libapr-util1-1.6.1-16.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151171" comment="libapr-util1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12627</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12627" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12627" ref_url="https://www.suse.com/security/cve/CVE-2017-12627" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005349.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2225-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007262.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1283-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00099.html" source="SUSE-SU"/>
    <description>
    In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain conditions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12627/">CVE-2017-12627</cve>
	<bugzilla href="https://bugzilla.suse.com/1083630">SUSE bug 1083630</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628923" comment="libxerces-c-3_2-3.2.3-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695536" comment="libxerces-c-3_2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12652</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12652" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12652" ref_url="https://www.suse.com/security/cve/CVE-2017-12652" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3060-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006673.html" source="SUSE-SU"/>
    <description>
    libpng before 1.6.32 does not properly check the length of chunks against the user limit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12652/">CVE-2017-12652</cve>
	<bugzilla href="https://bugzilla.suse.com/1141493">SUSE bug 1141493</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482352" comment="libpng16-16-1.6.34-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482353" comment="libpng16-16-32bit-1.6.34-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12678</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12678" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12678" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12678" ref_url="https://www.suse.com/security/cve/CVE-2017-12678" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2185-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00076.html" source="SUSE-SU"/>
    <description>
    In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12678/">CVE-2017-12678</cve>
	<bugzilla href="https://bugzilla.suse.com/1052699">SUSE bug 1052699</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628891" comment="libtag1-1.11.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151716" comment="libtag1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629217" comment="libtag_c0-1.11.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151717" comment="libtag_c0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12799</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12799" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12799" ref_url="https://www.suse.com/security/cve/CVE-2017-12799" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12799/">CVE-2017-12799</cve>
	<bugzilla href="https://bugzilla.suse.com/1053347">SUSE bug 1053347</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12837</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12837" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12837" ref_url="https://www.suse.com/security/cve/CVE-2017-12837" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00083.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\N{}' escape and the case-insensitive modifier.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12837/">CVE-2017-12837</cve>
	<bugzilla href="https://bugzilla.suse.com/1057724">SUSE bug 1057724</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628966" comment="perl-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628967" comment="perl-base-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628968" comment="perl-base-32bit-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153231" comment="perl-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628969" comment="perl-core-DB_File-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695544" comment="perl-core-DB_File is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12852</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12852" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12852" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12852" ref_url="https://www.suse.com/security/cve/CVE-2017-12852" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3954-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/026133.html" source="SUSE-SU"/>
    <description>
    The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12852/">CVE-2017-12852</cve>
	<bugzilla href="https://bugzilla.suse.com/1053963">SUSE bug 1053963</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628989" comment="python3-numpy-1.17.3-7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245328" comment="python3-numpy is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12858</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12858" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12858" ref_url="https://www.suse.com/security/cve/CVE-2017-12858" source="SUSE CVE"/>
    <description>
    Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12858/">CVE-2017-12858</cve>
	<bugzilla href="https://bugzilla.suse.com/1055377">SUSE bug 1055377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184178">SUSE bug 1184178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480831" comment="libzip5-1.5.1-1.9 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177169" comment="libzip5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712883" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12883</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12883" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12883" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12883" ref_url="https://www.suse.com/security/cve/CVE-2017-12883" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00083.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expression with an invalid '\N{U+...}' escape.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12883/">CVE-2017-12883</cve>
	<bugzilla href="https://bugzilla.suse.com/1057721">SUSE bug 1057721</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628966" comment="perl-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628967" comment="perl-base-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628968" comment="perl-base-32bit-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153231" comment="perl-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628969" comment="perl-core-DB_File-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695544" comment="perl-core-DB_File is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12944</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12944" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12944" ref_url="https://www.suse.com/security/cve/CVE-2017-12944" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00061.html" source="SUSE-SU"/>
    <description>
    The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attackers to cause a denial of service (allocation failure and application crash) in the TIFFFetchStripThing function in tif_dirread.c during a tiff2pdf invocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12944/">CVE-2017-12944</cve>
	<bugzilla href="https://bugzilla.suse.com/1003874">SUSE bug 1003874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054594">SUSE bug 1054594</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12955</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12955" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12955" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12955" ref_url="https://www.suse.com/security/cve/CVE-2017-12955" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12955/">CVE-2017-12955</cve>
	<bugzilla href="https://bugzilla.suse.com/1054593">SUSE bug 1054593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12956</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12956" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12956" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12956" ref_url="https://www.suse.com/security/cve/CVE-2017-12956" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12956/">CVE-2017-12956</cve>
	<bugzilla href="https://bugzilla.suse.com/1054592">SUSE bug 1054592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12957</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12957" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12957" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12957" ref_url="https://www.suse.com/security/cve/CVE-2017-12957" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12957/">CVE-2017-12957</cve>
	<bugzilla href="https://bugzilla.suse.com/1054590">SUSE bug 1054590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12982</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12982" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12982" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12982" ref_url="https://www.suse.com/security/cve/CVE-2017-12982" source="SUSE CVE"/>
    <description>
    The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service (memory allocation failure) in the opj_image_create function in lib/openjp2/image.c, related to the opj_aligned_alloc_n function in opj_malloc.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12982/">CVE-2017-12982</cve>
	<bugzilla href="https://bugzilla.suse.com/1054696">SUSE bug 1054696</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13077</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13077" ref_url="https://www.suse.com/security/cve/CVE-2017-13077" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID7022107" ref_url="https://www.suse.com/support/kb/doc/?id=7022107" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13077/">CVE-2017-13077</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063963">SUSE bug 1063963</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13078</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13078" ref_url="https://www.suse.com/security/cve/CVE-2017-13078" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2752-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID7022107" ref_url="https://www.suse.com/support/kb/doc/?id=7022107" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2755-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13078/">CVE-2017-13078</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063667">SUSE bug 1063667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13079</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13079" ref_url="https://www.suse.com/security/cve/CVE-2017-13079" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2752-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID7022107" ref_url="https://www.suse.com/support/kb/doc/?id=7022107" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2755-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13079/">CVE-2017-13079</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13080</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13080" ref_url="https://www.suse.com/security/cve/CVE-2017-13080" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2752-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3072-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3076-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3116-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3117-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3118-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3120-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3121-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3125-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3129-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3132-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3136-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3145-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3146-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3150-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3158-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3159-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3160-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3165-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID7022107" ref_url="https://www.suse.com/support/kb/doc/?id=7022107" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2755-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2846-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13080/">CVE-2017-13080</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063667">SUSE bug 1063667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063671">SUSE bug 1063671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066295">SUSE bug 1066295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105108">SUSE bug 1105108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178872">SUSE bug 1178872</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694782" comment="kernel-firmware-all-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694783" comment="kernel-firmware-amdgpu-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694784" comment="kernel-firmware-ath10k-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694785" comment="kernel-firmware-ath11k-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694786" comment="kernel-firmware-atheros-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694787" comment="kernel-firmware-bluetooth-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694788" comment="kernel-firmware-bnx2-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628538" comment="kernel-firmware-brcm-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694789" comment="kernel-firmware-chelsio-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694790" comment="kernel-firmware-dpaa2-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694791" comment="kernel-firmware-i915-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694792" comment="kernel-firmware-intel-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694793" comment="kernel-firmware-iwlwifi-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694794" comment="kernel-firmware-liquidio-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694795" comment="kernel-firmware-marvell-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694796" comment="kernel-firmware-media-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694797" comment="kernel-firmware-mediatek-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694798" comment="kernel-firmware-mellanox-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694799" comment="kernel-firmware-mwifiex-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694800" comment="kernel-firmware-network-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694801" comment="kernel-firmware-nfp-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694802" comment="kernel-firmware-nvidia-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694803" comment="kernel-firmware-platform-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694804" comment="kernel-firmware-prestera-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694805" comment="kernel-firmware-qlogic-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694806" comment="kernel-firmware-radeon-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694807" comment="kernel-firmware-realtek-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694808" comment="kernel-firmware-serial-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694809" comment="kernel-firmware-sound-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694810" comment="kernel-firmware-ti-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694811" comment="kernel-firmware-ueagle-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694812" comment="kernel-firmware-usb-network-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628539" comment="ucode-amd-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13081</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13081" ref_url="https://www.suse.com/security/cve/CVE-2017-13081" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2752-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID7022107" ref_url="https://www.suse.com/support/kb/doc/?id=7022107" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2755-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13081/">CVE-2017-13081</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066295">SUSE bug 1066295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105108">SUSE bug 1105108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694782" comment="kernel-firmware-all-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694783" comment="kernel-firmware-amdgpu-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694784" comment="kernel-firmware-ath10k-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694785" comment="kernel-firmware-ath11k-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694786" comment="kernel-firmware-atheros-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694787" comment="kernel-firmware-bluetooth-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694788" comment="kernel-firmware-bnx2-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628538" comment="kernel-firmware-brcm-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694789" comment="kernel-firmware-chelsio-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694790" comment="kernel-firmware-dpaa2-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694791" comment="kernel-firmware-i915-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694792" comment="kernel-firmware-intel-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694793" comment="kernel-firmware-iwlwifi-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694794" comment="kernel-firmware-liquidio-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694795" comment="kernel-firmware-marvell-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694796" comment="kernel-firmware-media-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694797" comment="kernel-firmware-mediatek-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694798" comment="kernel-firmware-mellanox-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694799" comment="kernel-firmware-mwifiex-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694800" comment="kernel-firmware-network-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694801" comment="kernel-firmware-nfp-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694802" comment="kernel-firmware-nvidia-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694803" comment="kernel-firmware-platform-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694804" comment="kernel-firmware-prestera-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694805" comment="kernel-firmware-qlogic-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694806" comment="kernel-firmware-radeon-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694807" comment="kernel-firmware-realtek-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694808" comment="kernel-firmware-serial-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694809" comment="kernel-firmware-sound-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694810" comment="kernel-firmware-ti-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694811" comment="kernel-firmware-ueagle-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694812" comment="kernel-firmware-usb-network-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628539" comment="ucode-amd-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713082" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13082</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13082" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13082" ref_url="https://www.suse.com/security/cve/CVE-2017-13082" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID7022107" ref_url="https://www.suse.com/support/kb/doc/?id=7022107" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13082/">CVE-2017-13082</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713086" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13086</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13086" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13086" ref_url="https://www.suse.com/security/cve/CVE-2017-13086" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13086/">CVE-2017-13086</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13087</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13087" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13087" ref_url="https://www.suse.com/security/cve/CVE-2017-13087" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2752-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2755-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13087/">CVE-2017-13087</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13088</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13088" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13088" ref_url="https://www.suse.com/security/cve/CVE-2017-13088" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2752-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2755-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13088/">CVE-2017-13088</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13089</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13089" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13089" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13089" ref_url="https://www.suse.com/security/cve/CVE-2017-13089" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2871-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2884-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00081.html" source="SUSE-SU"/>
    <description>
    The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to skip the chunk in pieces of 512 bytes by using the MIN() macro, but ends up passing the negative chunk length to connect.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13089/">CVE-2017-13089</cve>
	<bugzilla href="https://bugzilla.suse.com/1064715">SUSE bug 1064715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482565" comment="wget-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694929" comment="wget-lang-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695522" comment="wget-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713090" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13090</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13090" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13090" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13090" ref_url="https://www.suse.com/security/cve/CVE-2017-13090" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2871-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2884-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00081.html" source="SUSE-SU"/>
    <description>
    The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to read the chunk in pieces of 8192 bytes by using the MIN() macro, but ends up passing the negative chunk length to retr.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument. The attacker can corrupt malloc metadata after the allocated buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13090/">CVE-2017-13090</cve>
	<bugzilla href="https://bugzilla.suse.com/1064716">SUSE bug 1064716</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482565" comment="wget-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694929" comment="wget-lang-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695522" comment="wget-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13194</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13194" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13194" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13194" ref_url="https://www.suse.com/security/cve/CVE-2017-13194" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0210-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00088.html" source="SUSE-SU"/>
    <description>
    A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64710201.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13194/">CVE-2017-13194</cve>
	<bugzilla href="https://bugzilla.suse.com/1075992">SUSE bug 1075992</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482448" comment="libvpx4-1.6.1-6.6.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177224" comment="libvpx4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13672</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13672" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13672" ref_url="https://www.suse.com/security/cve/CVE-2017-13672" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13921-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913921-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2938-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13672/">CVE-2017-13672</cve>
	<bugzilla href="https://bugzilla.suse.com/1056334">SUSE bug 1056334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056336">SUSE bug 1056336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084604">SUSE bug 1084604</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13673</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13673" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13673" ref_url="https://www.suse.com/security/cve/CVE-2017-13673" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005184.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html" source="SUSE-SU"/>
    <description>
    The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service (assertion failure) in the cpu_physical_memory_snapshot_get_dirty function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13673/">CVE-2017-13673</cve>
	<bugzilla href="https://bugzilla.suse.com/1056386">SUSE bug 1056386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056387">SUSE bug 1056387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084604">SUSE bug 1084604</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13695</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13695" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13695" ref_url="https://www.suse.com/security/cve/CVE-2017-13695" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011310.html" source="SUSE-SU"/>
    <description>
    The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-18"/>
	<updated date="2022-07-19"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-13695/">CVE-2017-13695</cve>
	<bugzilla href="https://bugzilla.suse.com/1055710">SUSE bug 1055710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695342" comment="kernel-debug-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009693407" comment="kernel-default-man-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695343" comment="kernel-kvmsmall-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695344" comment="kernel-vanilla-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695345" comment="kernel-vanilla-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695346" comment="kernel-vanilla-devel-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695347" comment="kernel-vanilla-livepatch-devel-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695348" comment="kernel-zfcpdump-man-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13711</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13711" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13711" ref_url="https://www.suse.com/security/cve/CVE-2017-13711" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2938-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00007.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to cause a denial of service (QEMU instance crash) by leveraging failure to properly clear ifq_so from pending packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13711/">CVE-2017-13711</cve>
	<bugzilla href="https://bugzilla.suse.com/1056291">SUSE bug 1056291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13720</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13720" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13720" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13720" ref_url="https://www.suse.com/security/cve/CVE-2017-13720" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003693.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3256-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0343-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00005.html" source="SUSE-SU"/>
    <description>
    In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash (denial of service). This occurs because '\0' characters are incorrectly skipped in situations involving ? characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-13720/">CVE-2017-13720</cve>
	<bugzilla href="https://bugzilla.suse.com/1054285">SUSE bug 1054285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159415">SUSE bug 1159415</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13721</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13721" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13721" ref_url="https://www.suse.com/security/cve/CVE-2017-13721" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003402.html" source="SUSE-SU"/>
    <description>
    In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memory segments of other X clients in the same session.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-13721/">CVE-2017-13721</cve>
	<bugzilla href="https://bugzilla.suse.com/1051150">SUSE bug 1051150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052984">SUSE bug 1052984</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629053" comment="xorg-x11-server-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629054" comment="xorg-x11-server-extra-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684245" comment="xorg-x11-server-wayland-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177168" comment="xorg-x11-server-wayland is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13722</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13722" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13722" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13722" ref_url="https://www.suse.com/security/cve/CVE-2017-13722" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003693.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3256-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0343-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00005.html" source="SUSE-SU"/>
    <description>
    In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary check (for PCF files) could be used by local attackers authenticated to an Xserver for a buffer over-read, for information disclosure or a crash of the X server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13722/">CVE-2017-13722</cve>
	<bugzilla href="https://bugzilla.suse.com/1049692">SUSE bug 1049692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159415">SUSE bug 1159415</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713723" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13723</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13723" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13723" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13723" ref_url="https://www.suse.com/security/cve/CVE-2017-13723" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003402.html" source="SUSE-SU"/>
    <description>
    In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13723/">CVE-2017-13723</cve>
	<bugzilla href="https://bugzilla.suse.com/1051150">SUSE bug 1051150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052984">SUSE bug 1052984</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629053" comment="xorg-x11-server-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629054" comment="xorg-x11-server-extra-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684245" comment="xorg-x11-server-wayland-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177168" comment="xorg-x11-server-wayland is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13735</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13735" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13735" ref_url="https://www.suse.com/security/cve/CVE-2017-13735" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2638-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00007.html" source="SUSE-SU"/>
    <description>
    There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13735/">CVE-2017-13735</cve>
	<bugzilla href="https://bugzilla.suse.com/1056170">SUSE bug 1056170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060321">SUSE bug 1060321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679588" comment="dcraw-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680722" comment="dcraw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679589" comment="dcraw-lang-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680723" comment="dcraw-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13738</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13738" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13738" ref_url="https://www.suse.com/security/cve/CVE-2017-13738" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003260.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2639-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00008.html" source="SUSE-SU"/>
    <description>
    There is an illegal address access in the _lou_getALine function in compileTranslationTable.c:346 in Liblouis 3.2.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13738/">CVE-2017-13738</cve>
	<bugzilla href="https://bugzilla.suse.com/1056105">SUSE bug 1056105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487548" comment="liblouis-data-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487550" comment="liblouis19-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695545" comment="liblouis19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487551" comment="python3-louis-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177235" comment="python3-louis is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13739</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13739" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13739" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13739" ref_url="https://www.suse.com/security/cve/CVE-2017-13739" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003262.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2639-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00008.html" source="SUSE-SU"/>
    <description>
    There is a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write in Liblouis 3.2.0, triggered in the function resolveSubtable() in compileTranslationTable.c. It will lead to denial of service or remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13739/">CVE-2017-13739</cve>
	<bugzilla href="https://bugzilla.suse.com/1056101">SUSE bug 1056101</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487548" comment="liblouis-data-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487550" comment="liblouis19-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695545" comment="liblouis19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487551" comment="python3-louis-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177235" comment="python3-louis is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13740</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13740" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13740" ref_url="https://www.suse.com/security/cve/CVE-2017-13740" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003262.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2639-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00008.html" source="SUSE-SU"/>
    <description>
    There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationTable.c, that will lead to denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13740/">CVE-2017-13740</cve>
	<bugzilla href="https://bugzilla.suse.com/1056097">SUSE bug 1056097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487548" comment="liblouis-data-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487550" comment="liblouis19-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695545" comment="liblouis19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487551" comment="python3-louis-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177235" comment="python3-louis is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13741</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13741" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13741" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13741" ref_url="https://www.suse.com/security/cve/CVE-2017-13741" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003262.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2639-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00008.html" source="SUSE-SU"/>
    <description>
    There is a use-after-free in the function compileBrailleIndicator() in compileTranslationTable.c in Liblouis 3.2.0 that will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13741/">CVE-2017-13741</cve>
	<bugzilla href="https://bugzilla.suse.com/1056095">SUSE bug 1056095</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487548" comment="liblouis-data-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487550" comment="liblouis19-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695545" comment="liblouis19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487551" comment="python3-louis-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177235" comment="python3-louis is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13742</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13742" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13742" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13742" ref_url="https://www.suse.com/security/cve/CVE-2017-13742" source="SUSE CVE"/>
    <description>
    There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationTable.c, that will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13742/">CVE-2017-13742</cve>
	<bugzilla href="https://bugzilla.suse.com/1056093">SUSE bug 1056093</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487548" comment="liblouis-data-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487550" comment="liblouis19-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695545" comment="liblouis19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487551" comment="python3-louis-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177235" comment="python3-louis is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13743</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13743" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13743" ref_url="https://www.suse.com/security/cve/CVE-2017-13743" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003262.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2639-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00008.html" source="SUSE-SU"/>
    <description>
    There is a buffer overflow in Liblouis 3.2.0, triggered in the function _lou_showString() in utils.c, that will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13743/">CVE-2017-13743</cve>
	<bugzilla href="https://bugzilla.suse.com/1056090">SUSE bug 1056090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487548" comment="liblouis-data-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487550" comment="liblouis19-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695545" comment="liblouis19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487551" comment="python3-louis-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177235" comment="python3-louis is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13744</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13744" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13744" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13744" ref_url="https://www.suse.com/security/cve/CVE-2017-13744" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003260.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2639-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00008.html" source="SUSE-SU"/>
    <description>
    There is an illegal address access in the function _lou_getALine() in compileTranslationTable.c:343 in Liblouis 3.2.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13744/">CVE-2017-13744</cve>
	<bugzilla href="https://bugzilla.suse.com/1056088">SUSE bug 1056088</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487548" comment="liblouis-data-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487550" comment="liblouis19-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695545" comment="liblouis19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487551" comment="python3-louis-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177235" comment="python3-louis is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713757" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13757</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13757" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13757" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13757" ref_url="https://www.suse.com/security/cve/CVE-2017-13757" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to elf_i386_get_synthetic_symtab in elf32-i386.c and elf_x86_64_get_synthetic_symtab in elf64-x86-64.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13757/">CVE-2017-13757</cve>
	<bugzilla href="https://bugzilla.suse.com/1056312">SUSE bug 1056312</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13788</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13788" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13788" ref_url="https://www.suse.com/security/cve/CVE-2017-13788" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13788/">CVE-2017-13788</cve>
	<bugzilla href="https://bugzilla.suse.com/1069925">SUSE bug 1069925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13798</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13798" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13798" ref_url="https://www.suse.com/security/cve/CVE-2017-13798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13798/">CVE-2017-13798</cve>
	<bugzilla href="https://bugzilla.suse.com/1069925">SUSE bug 1069925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13803</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13803" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13803" ref_url="https://www.suse.com/security/cve/CVE-2017-13803" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13803/">CVE-2017-13803</cve>
	<bugzilla href="https://bugzilla.suse.com/1069925">SUSE bug 1069925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713856" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13856</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13856" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13856" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13856" ref_url="https://www.suse.com/security/cve/CVE-2017-13856" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13856/">CVE-2017-13856</cve>
	<bugzilla href="https://bugzilla.suse.com/1073654">SUSE bug 1073654</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13866</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13866" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13866" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13866" ref_url="https://www.suse.com/security/cve/CVE-2017-13866" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13866/">CVE-2017-13866</cve>
	<bugzilla href="https://bugzilla.suse.com/1073654">SUSE bug 1073654</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13870</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13870" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13870" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13870" ref_url="https://www.suse.com/security/cve/CVE-2017-13870" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13870/">CVE-2017-13870</cve>
	<bugzilla href="https://bugzilla.suse.com/1073654">SUSE bug 1073654</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13884</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13884" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13884" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13884" ref_url="https://www.suse.com/security/cve/CVE-2017-13884" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13884/">CVE-2017-13884</cve>
	<bugzilla href="https://bugzilla.suse.com/1075775">SUSE bug 1075775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077535">SUSE bug 1077535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13885</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13885" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13885" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13885" ref_url="https://www.suse.com/security/cve/CVE-2017-13885" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13885/">CVE-2017-13885</cve>
	<bugzilla href="https://bugzilla.suse.com/1075775">SUSE bug 1075775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077535">SUSE bug 1077535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14039</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14039" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14039" ref_url="https://www.suse.com/security/cve/CVE-2017-14039" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003274.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2685-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2686-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00032.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14039/">CVE-2017-14039</cve>
	<bugzilla href="https://bugzilla.suse.com/1056622">SUSE bug 1056622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057511">SUSE bug 1057511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14040</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14040" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14040" ref_url="https://www.suse.com/security/cve/CVE-2017-14040" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003274.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2685-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2686-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00032.html" source="SUSE-SU"/>
    <description>
    An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The vulnerability may lead to remote denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14040/">CVE-2017-14040</cve>
	<bugzilla href="https://bugzilla.suse.com/1056621">SUSE bug 1056621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14041</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14041" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14041" ref_url="https://www.suse.com/security/cve/CVE-2017-14041" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003274.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2685-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2686-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00032.html" source="SUSE-SU"/>
    <description>
    A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14041/">CVE-2017-14041</cve>
	<bugzilla href="https://bugzilla.suse.com/1056562">SUSE bug 1056562</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714051" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14051</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14051" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14051" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14051" ref_url="https://www.suse.com/security/cve/CVE-2017-14051" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2495-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00057.html" source="SUSE-SU"/>
    <description>
    An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service (memory corruption and system crash) by leveraging root access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14051/">CVE-2017-14051</cve>
	<bugzilla href="https://bugzilla.suse.com/1056588">SUSE bug 1056588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14054</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14054" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14054" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14054" ref_url="https://www.suse.com/security/cve/CVE-2017-14054" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivr_read_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted IVR file, which claims a large "len" field in the header but does not contain sufficient backing data, is provided, the first type==4 loop would consume huge CPU resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14054/">CVE-2017-14054</cve>
	<bugzilla href="https://bugzilla.suse.com/1056765">SUSE bug 1056765</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14055</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14055" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14055" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14055" ref_url="https://www.suse.com/security/cve/CVE-2017-14055" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nb_frames" field in the header but does not contain sufficient backing data, is provided, the loop over the frames would consume huge CPU and memory resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14055/">CVE-2017-14055</cve>
	<bugzilla href="https://bugzilla.suse.com/1056766">SUSE bug 1056766</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14056</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14056" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14056" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14056" ref_url="https://www.suse.com/security/cve/CVE-2017-14056" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted RL2 file, which claims a large "frame_count" field in the header but does not contain sufficient backing data, is provided, the loops (for offset and size tables) would consume huge CPU and memory resources, since there is no EOF check inside these loops.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14056/">CVE-2017-14056</cve>
	<bugzilla href="https://bugzilla.suse.com/1056760">SUSE bug 1056760</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714057" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14057</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14057" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14057" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14057" ref_url="https://www.suse.com/security/cve/CVE-2017-14057" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted ASF file, which claims a large "name_len" or "count" field in the header but does not contain sufficient backing data, is provided, the loops over the name and markers would consume huge CPU and memory resources, since there is no EOF check inside these loops.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14057/">CVE-2017-14057</cve>
	<bugzilla href="https://bugzilla.suse.com/1056761">SUSE bug 1056761</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714058" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14058</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14058" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14058" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14058" ref_url="https://www.suse.com/security/cve/CVE-2017-14058" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service (infinite loop).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14058/">CVE-2017-14058</cve>
	<bugzilla href="https://bugzilla.suse.com/1056762">SUSE bug 1056762</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714059" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14059</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14059" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14059" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14059" ref_url="https://www.suse.com/security/cve/CVE-2017-14059" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but does not contain sufficient backing data, is provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14059/">CVE-2017-14059</cve>
	<bugzilla href="https://bugzilla.suse.com/1056763">SUSE bug 1056763</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14062</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14062" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14062" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14062" ref_url="https://www.suse.com/security/cve/CVE-2017-14062" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003874.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003879.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0891-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00010.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14062/">CVE-2017-14062</cve>
	<bugzilla href="https://bugzilla.suse.com/1056450">SUSE bug 1056450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087709">SUSE bug 1087709</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118435">SUSE bug 1118435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123123">SUSE bug 1123123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173590">SUSE bug 1173590</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482248" comment="libidn11-1.34-3.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152668" comment="libidn11 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14107</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14107" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14107" ref_url="https://www.suse.com/security/cve/CVE-2017-14107" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003255.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2550-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00096.html" source="SUSE-SU"/>
    <description>
    The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14107/">CVE-2017-14107</cve>
	<bugzilla href="https://bugzilla.suse.com/1056996">SUSE bug 1056996</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480831" comment="libzip5-1.5.1-1.9 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177169" comment="libzip5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14128</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14128" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14128" ref_url="https://www.suse.com/security/cve/CVE-2017-14128" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (read_1_byte heap-based buffer over-read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14128/">CVE-2017-14128</cve>
	<bugzilla href="https://bugzilla.suse.com/1057139">SUSE bug 1057139</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14129</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14129" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14129" ref_url="https://www.suse.com/security/cve/CVE-2017-14129" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (parse_comp_unit heap-based buffer over-read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14129/">CVE-2017-14129</cve>
	<bugzilla href="https://bugzilla.suse.com/1057144">SUSE bug 1057144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14130</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14130" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14130" ref_url="https://www.suse.com/security/cve/CVE-2017-14130" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (_bfd_elf_attr_strdup heap-based buffer over-read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14130/">CVE-2017-14130</cve>
	<bugzilla href="https://bugzilla.suse.com/1057149">SUSE bug 1057149</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14132</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14132" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14132" ref_url="https://www.suse.com/security/cve/CVE-2017-14132" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas_image_ishomosamp function in libjasper/base/jas_image.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14132/">CVE-2017-14132</cve>
	<bugzilla href="https://bugzilla.suse.com/1057152">SUSE bug 1057152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714151" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14151</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14151" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14151" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14151" ref_url="https://www.suse.com/security/cve/CVE-2017-14151" source="SUSE CVE"/>
    <description>
    An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_mqc_flush in lib/openjp2/mqc.c and opj_t1_encode_cblk in lib/openjp2/t1.c) or possibly remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14151/">CVE-2017-14151</cve>
	<bugzilla href="https://bugzilla.suse.com/1057336">SUSE bug 1057336</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714152" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14152</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14152" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14152" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14152" ref_url="https://www.suse.com/security/cve/CVE-2017-14152" source="SUSE CVE"/>
    <description>
    A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c and opj_j2k_write_sot in lib/openjp2/j2k.c) or possibly remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14152/">CVE-2017-14152</cve>
	<bugzilla href="https://bugzilla.suse.com/1057335">SUSE bug 1057335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057511">SUSE bug 1057511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14160</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14160" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14160" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14160" ref_url="https://www.suse.com/security/cve/CVE-2017-14160" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00084.html" source="SUSE-SU"/>
    <description>
    The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact via a crafted mp4 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14160/">CVE-2017-14160</cve>
	<bugzilla href="https://bugzilla.suse.com/1059812">SUSE bug 1059812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091072">SUSE bug 1091072</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481533" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151122" comment="libvorbis0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630097" comment="libvorbis0-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151123" comment="libvorbis0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481534" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151124" comment="libvorbisenc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630098" comment="libvorbisenc2-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151125" comment="libvorbisenc2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481535" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151126" comment="libvorbisfile3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14164</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14164" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14164" ref_url="https://www.suse.com/security/cve/CVE-2017-14164" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003274.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2685-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2686-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00032.html" source="SUSE-SU"/>
    <description>
    A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c) or possibly remote code execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-14152.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14164/">CVE-2017-14164</cve>
	<bugzilla href="https://bugzilla.suse.com/1057511">SUSE bug 1057511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14166</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14166" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14166" ref_url="https://www.suse.com/security/cve/CVE-2017-14166" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3640-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004927.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3717-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00017.html" source="SUSE-SU"/>
    <description>
    libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archive_read_support_format_xar.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14166/">CVE-2017-14166</cve>
	<bugzilla href="https://bugzilla.suse.com/1057514">SUSE bug 1057514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14167</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14167" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14167" ref_url="https://www.suse.com/security/cve/CVE-2017-14167" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2938-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which trigger an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14167/">CVE-2017-14167</cve>
	<bugzilla href="https://bugzilla.suse.com/1057585">SUSE bug 1057585</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14169</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14169" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14169" ref_url="https://www.suse.com/security/cve/CVE-2017-14169" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In the mxf_read_primer_pack function in libavformat/mxfdec.c in FFmpeg 3.3.3 -&gt; 2.4, an integer signedness error might occur when a crafted file, which claims a large "item_num" field such as 0xffffffff, is provided. As a result, the variable "item_num" turns negative, bypassing the check for a large value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14169/">CVE-2017-14169</cve>
	<bugzilla href="https://bugzilla.suse.com/1057536">SUSE bug 1057536</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14170</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14170" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14170" ref_url="https://www.suse.com/security/cve/CVE-2017-14170" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In libavformat/mxfdec.c in FFmpeg 3.3.3 -&gt; 2.4, a DoS in mxf_read_index_entry_array() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted MXF file, which claims a large "nb_index_entries" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU resources, since there is no EOF check inside the loop. Moreover, this big loop can be invoked multiple times if there is more than one applicable data segment in the crafted MXF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14170/">CVE-2017-14170</cve>
	<bugzilla href="https://bugzilla.suse.com/1057537">SUSE bug 1057537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14171</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14171" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14171" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14171" ref_url="https://www.suse.com/security/cve/CVE-2017-14171" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted NSV file, which claims a large "table_entries_used" field in the header but does not contain sufficient backing data, is provided, the loop over 'table_entries_used' would consume huge CPU resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14171/">CVE-2017-14171</cve>
	<bugzilla href="https://bugzilla.suse.com/1057539">SUSE bug 1057539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14222</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14222" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14222" ref_url="https://www.suse.com/security/cve/CVE-2017-14222" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "item_count" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14222/">CVE-2017-14222</cve>
	<bugzilla href="https://bugzilla.suse.com/1058020">SUSE bug 1058020</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14223</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14223" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14223" ref_url="https://www.suse.com/security/cve/CVE-2017-14223" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14223/">CVE-2017-14223</cve>
	<bugzilla href="https://bugzilla.suse.com/1058019">SUSE bug 1058019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14225</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14225" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14225" ref_url="https://www.suse.com/security/cve/CVE-2017-14225" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    The av_color_primaries_name function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodec_string function in libavcodec/utils.c, leading to a NULL pointer dereference. (It is also conceivable that there is security relevance for a NULL pointer dereference in av_color_primaries_name calls within the ffprobe command-line program.)
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14225/">CVE-2017-14225</cve>
	<bugzilla href="https://bugzilla.suse.com/1058018">SUSE bug 1058018</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14226</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14226" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14226" ref_url="https://www.suse.com/security/cve/CVE-2017-14226" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2931-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2943-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00009.html" source="SUSE-SU"/>
    <description>
    WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers to cause a denial of service (heap-based buffer over-read in the WPXTableList class in WPXTable.cpp). This vulnerability can be triggered in LibreOffice before 5.3.7. It may lead to suffering a remote attack against a LibreOffice application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14226/">CVE-2017-14226</cve>
	<bugzilla href="https://bugzilla.suse.com/1058025">SUSE bug 1058025</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489168" comment="libwpd-0_10-10-0.10.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166617" comment="libwpd-0_10-10 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714245" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14245</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14245" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14245" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14245" ref_url="https://www.suse.com/security/cve/CVE-2017-14245" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003705.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0388-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00018.html" source="SUSE-SU"/>
    <description>
    An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14245/">CVE-2017-14245</cve>
	<bugzilla href="https://bugzilla.suse.com/1059912">SUSE bug 1059912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071777">SUSE bug 1071777</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714246" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14246</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14246" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14246" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14246" ref_url="https://www.suse.com/security/cve/CVE-2017-14246" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003705.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0388-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00018.html" source="SUSE-SU"/>
    <description>
    An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14246/">CVE-2017-14246</cve>
	<bugzilla href="https://bugzilla.suse.com/1059913">SUSE bug 1059913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071767">SUSE bug 1071767</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14265</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14265" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14265" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14265" ref_url="https://www.suse.com/security/cve/CVE-2017-14265" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2638-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00007.html" source="SUSE-SU"/>
    <description>
    A Stack-based Buffer Overflow was discovered in xtrans_interpolate in internal/dcraw_common.cpp in LibRaw before 0.18.3. It could allow a remote denial of service or code execution attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14265/">CVE-2017-14265</cve>
	<bugzilla href="https://bugzilla.suse.com/1060163">SUSE bug 1060163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084688">SUSE bug 1084688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084690">SUSE bug 1084690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084691">SUSE bug 1084691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714333" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14333</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14333" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14333" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14333" ref_url="https://www.suse.com/security/cve/CVE-2017-14333" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vn_next, during "readelf -a" execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14333/">CVE-2017-14333</cve>
	<bugzilla href="https://bugzilla.suse.com/1058480">SUSE bug 1058480</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714348" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14348</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14348" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14348" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14348" ref_url="https://www.suse.com/security/cve/CVE-2017-14348" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2559-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00099.html" source="SUSE-SU"/>
    <description>
    LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14348/">CVE-2017-14348</cve>
	<bugzilla href="https://bugzilla.suse.com/1058467">SUSE bug 1058467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063798">SUSE bug 1063798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14491</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14491" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14491" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14491" ref_url="https://www.suse.com/security/cve/CVE-2017-14491" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2618-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14491/">CVE-2017-14491</cve>
	<bugzilla href="https://bugzilla.suse.com/1060354">SUSE bug 1060354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060360">SUSE bug 1060360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060361">SUSE bug 1060361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060362">SUSE bug 1060362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060364">SUSE bug 1060364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063832">SUSE bug 1063832</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143944">SUSE bug 1143944</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14492</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14492" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14492" ref_url="https://www.suse.com/security/cve/CVE-2017-14492" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2618-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14492/">CVE-2017-14492</cve>
	<bugzilla href="https://bugzilla.suse.com/1060355">SUSE bug 1060355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060360">SUSE bug 1060360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060361">SUSE bug 1060361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060362">SUSE bug 1060362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060364">SUSE bug 1060364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063832">SUSE bug 1063832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14493</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14493" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14493" ref_url="https://www.suse.com/security/cve/CVE-2017-14493" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2618-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14493/">CVE-2017-14493</cve>
	<bugzilla href="https://bugzilla.suse.com/1060360">SUSE bug 1060360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060361">SUSE bug 1060361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060362">SUSE bug 1060362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060364">SUSE bug 1060364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063832">SUSE bug 1063832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14494</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14494" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14494" ref_url="https://www.suse.com/security/cve/CVE-2017-14494" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2618-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-14494/">CVE-2017-14494</cve>
	<bugzilla href="https://bugzilla.suse.com/1060360">SUSE bug 1060360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060361">SUSE bug 1060361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060362">SUSE bug 1060362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060364">SUSE bug 1060364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14495</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14495" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14495" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14495" ref_url="https://www.suse.com/security/cve/CVE-2017-14495" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2618-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14495/">CVE-2017-14495</cve>
	<bugzilla href="https://bugzilla.suse.com/1060360">SUSE bug 1060360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060361">SUSE bug 1060361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060362">SUSE bug 1060362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060364">SUSE bug 1060364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14496</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14496" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14496" ref_url="https://www.suse.com/security/cve/CVE-2017-14496" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2618-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14496/">CVE-2017-14496</cve>
	<bugzilla href="https://bugzilla.suse.com/1060360">SUSE bug 1060360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060361">SUSE bug 1060361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060362">SUSE bug 1060362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060364">SUSE bug 1060364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14501</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14501" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14501" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14501" ref_url="https://www.suse.com/security/cve/CVE-2017-14501" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004813.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3640-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006201.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3717-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00017.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14501/">CVE-2017-14501</cve>
	<bugzilla href="https://bugzilla.suse.com/1059139">SUSE bug 1059139</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14502</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14502" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14502" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14502" ref_url="https://www.suse.com/security/cve/CVE-2017-14502" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004813.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3640-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006201.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3717-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00017.html" source="SUSE-SU"/>
    <description>
    read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14502/">CVE-2017-14502</cve>
	<bugzilla href="https://bugzilla.suse.com/1059134">SUSE bug 1059134</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14503</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14503" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14503" ref_url="https://www.suse.com/security/cve/CVE-2017-14503" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004813.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3640-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006190.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3717-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00017.html" source="SUSE-SU"/>
    <description>
    libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha archive, related to lha_crc16.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14503/">CVE-2017-14503</cve>
	<bugzilla href="https://bugzilla.suse.com/1059100">SUSE bug 1059100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14517</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14517" ref_url="https://www.suse.com/security/cve/CVE-2017-14517" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1626-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006944.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1721-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00032.html" source="SUSE-SU"/>
    <description>
    In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry() function in XRef.cc via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14517/">CVE-2017-14517</cve>
	<bugzilla href="https://bugzilla.suse.com/1059066">SUSE bug 1059066</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628826" comment="libpoppler-cpp0-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628829" comment="libpoppler-glib8-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630169" comment="libpoppler-qt5-1-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628830" comment="libpoppler89-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695546" comment="libpoppler89 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628831" comment="poppler-tools-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14518</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14518" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14518" ref_url="https://www.suse.com/security/cve/CVE-2017-14518" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004186.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1721-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00032.html" source="SUSE-SU"/>
    <description>
    In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired() function in Splash.cc via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14518/">CVE-2017-14518</cve>
	<bugzilla href="https://bugzilla.suse.com/1059101">SUSE bug 1059101</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628826" comment="libpoppler-cpp0-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628829" comment="libpoppler-glib8-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630169" comment="libpoppler-qt5-1-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628830" comment="libpoppler89-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695546" comment="libpoppler89 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628831" comment="poppler-tools-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14529</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14529" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14529" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14529" ref_url="https://www.suse.com/security/cve/CVE-2017-14529" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PE file, related to the bfd_getl16 function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14529/">CVE-2017-14529</cve>
	<bugzilla href="https://bugzilla.suse.com/1059050">SUSE bug 1059050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714608" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14608</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14608" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14608" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14608" ref_url="https://www.suse.com/security/cve/CVE-2017-14608" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2848-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00089.html" source="SUSE-SU"/>
    <description>
    In LibRaw through 0.18.4, an out of bounds read flaw related to kodak_65000_load_raw has been reported in dcraw/dcraw.c and internal/dcraw_common.cpp. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14608/">CVE-2017-14608</cve>
	<bugzilla href="https://bugzilla.suse.com/1063798">SUSE bug 1063798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679588" comment="dcraw-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680722" comment="dcraw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679589" comment="dcraw-lang-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680723" comment="dcraw-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14632</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14632" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14632" ref_url="https://www.suse.com/security/cve/CVE-2017-14632" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003568.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0047-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00015.html" source="SUSE-SU"/>
    <description>
    Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi-&gt;channels&lt;=0, a similar issue to Mozilla bug 550184.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14632/">CVE-2017-14632</cve>
	<bugzilla href="https://bugzilla.suse.com/1059809">SUSE bug 1059809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481533" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151122" comment="libvorbis0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630097" comment="libvorbis0-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151123" comment="libvorbis0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481534" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151124" comment="libvorbisenc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630098" comment="libvorbisenc2-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151125" comment="libvorbisenc2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481535" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151126" comment="libvorbisfile3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14633</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14633" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14633" ref_url="https://www.suse.com/security/cve/CVE-2017-14633" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003568.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0047-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00015.html" source="SUSE-SU"/>
    <description>
    In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-14633/">CVE-2017-14633</cve>
	<bugzilla href="https://bugzilla.suse.com/1059811">SUSE bug 1059811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081833">SUSE bug 1081833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481533" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151122" comment="libvorbis0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630097" comment="libvorbis0-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151123" comment="libvorbis0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481534" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151124" comment="libvorbisenc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630098" comment="libvorbisenc2-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151125" comment="libvorbisenc2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481535" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151126" comment="libvorbisfile3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714634" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14634</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14634" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14634" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14634" ref_url="https://www.suse.com/security/cve/CVE-2017-14634" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003705.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0388-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00018.html" source="SUSE-SU"/>
    <description>
    In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14634/">CVE-2017-14634</cve>
	<bugzilla href="https://bugzilla.suse.com/1059911">SUSE bug 1059911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14729</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14729" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14729" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14729" ref_url="https://www.suse.com/security/cve/CVE-2017-14729" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14729/">CVE-2017-14729</cve>
	<bugzilla href="https://bugzilla.suse.com/1060621">SUSE bug 1060621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14745</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14745" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14745" ref_url="https://www.suse.com/security/cve/CVE-2017-14745" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, which allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14745/">CVE-2017-14745</cve>
	<bugzilla href="https://bugzilla.suse.com/1060599">SUSE bug 1060599</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14746</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14746" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14746" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14746" ref_url="https://www.suse.com/security/cve/CVE-2017-14746" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3104-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004410.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3143-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00095.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14746/">CVE-2017-14746</cve>
	<bugzilla href="https://bugzilla.suse.com/1060427">SUSE bug 1060427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069666">SUSE bug 1069666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714859" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14859</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14859" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14859" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14859" ref_url="https://www.suse.com/security/cve/CVE-2017-14859" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004960.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2818-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14859/">CVE-2017-14859</cve>
	<bugzilla href="https://bugzilla.suse.com/1061000">SUSE bug 1061000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714860" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14860</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14860" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14860" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14860" ref_url="https://www.suse.com/security/cve/CVE-2017-14860" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14860/">CVE-2017-14860</cve>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14862</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14862" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14862" ref_url="https://www.suse.com/security/cve/CVE-2017-14862" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004960.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2818-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14862/">CVE-2017-14862</cve>
	<bugzilla href="https://bugzilla.suse.com/1060996">SUSE bug 1060996</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14864</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14864" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14864" ref_url="https://www.suse.com/security/cve/CVE-2017-14864" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004960.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14864/">CVE-2017-14864</cve>
	<bugzilla href="https://bugzilla.suse.com/1060995">SUSE bug 1060995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1080734">SUSE bug 1080734</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14974</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14974" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14974" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14974" ref_url="https://www.suse.com/security/cve/CVE-2017-14974" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14974/">CVE-2017-14974</cve>
	<bugzilla href="https://bugzilla.suse.com/1061241">SUSE bug 1061241</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14988</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14988" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14988" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14988" ref_url="https://www.suse.com/security/cve/CVE-2017-14988" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005757.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005771.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1954-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00063.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14988/">CVE-2017-14988</cve>
	<bugzilla href="https://bugzilla.suse.com/1061305">SUSE bug 1061305</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15038</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15038" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15038" ref_url="https://www.suse.com/security/cve/CVE-2017-15038" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2938-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
    <description>
    Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15038/">CVE-2017-15038</cve>
	<bugzilla href="https://bugzilla.suse.com/1062069">SUSE bug 1062069</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15107</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15107" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15107" ref_url="https://www.suse.com/security/cve/CVE-2017-15107" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006208.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00027.html" source="SUSE-SU"/>
    <description>
    A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-15107/">CVE-2017-15107</cve>
	<bugzilla href="https://bugzilla.suse.com/1076958">SUSE bug 1076958</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15108</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15108" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15108" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15108" ref_url="https://www.suse.com/security/cve/CVE-2017-15108" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003708.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00028.html" source="SUSE-SU"/>
    <description>
    spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15108/">CVE-2017-15108</cve>
	<bugzilla href="https://bugzilla.suse.com/1070724">SUSE bug 1070724</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629225" comment="spice-vdagent-0.20.0-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171081" comment="spice-vdagent is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15118</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15118" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15118" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15118" ref_url="https://www.suse.com/security/cve/CVE-2017-15118" source="SUSE CVE"/>
    <description>
    A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15118/">CVE-2017-15118</cve>
	<bugzilla href="https://bugzilla.suse.com/1070147">SUSE bug 1070147</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15119</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15119" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15119" ref_url="https://www.suse.com/security/cve/CVE-2017-15119" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00053.html" source="SUSE-SU"/>
    <description>
    The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other requests, resulting in DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15119/">CVE-2017-15119</cve>
	<bugzilla href="https://bugzilla.suse.com/1070144">SUSE bug 1070144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15186</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15186" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15186" ref_url="https://www.suse.com/security/cve/CVE-2017-15186" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0470-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0476-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00062.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15186/">CVE-2017-15186</cve>
	<bugzilla href="https://bugzilla.suse.com/1064577">SUSE bug 1064577</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15232</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15232" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15232" ref_url="https://www.suse.com/security/cve/CVE-2017-15232" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0373-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004223.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2899-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00115.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0393-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00023.html" source="SUSE-SU"/>
    <description>
    libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15232/">CVE-2017-15232</cve>
	<bugzilla href="https://bugzilla.suse.com/1062937">SUSE bug 1062937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628779" comment="libjpeg8-8.1.2-5.15.7 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152543" comment="libjpeg8 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15268</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15268" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15268" ref_url="https://www.suse.com/security/cve/CVE-2017-15268" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2938-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
    <description>
    Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15268/">CVE-2017-15268</cve>
	<bugzilla href="https://bugzilla.suse.com/1062942">SUSE bug 1062942</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715275" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15275</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15275" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15275" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15275" ref_url="https://www.suse.com/security/cve/CVE-2017-15275" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3104-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004410.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3143-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00095.html" source="SUSE-SU"/>
    <description>
    Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15275/">CVE-2017-15275</cve>
	<bugzilla href="https://bugzilla.suse.com/1063008">SUSE bug 1063008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069666">SUSE bug 1069666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15289</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15289" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15289" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15289" ref_url="https://www.suse.com/security/cve/CVE-2017-15289" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3178-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2938-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3193-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00004.html" source="SUSE-SU"/>
    <description>
    The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15289/">CVE-2017-15289</cve>
	<bugzilla href="https://bugzilla.suse.com/1063122">SUSE bug 1063122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063123">SUSE bug 1063123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15365</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15365" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15365" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15365" ref_url="https://www.suse.com/security/cve/CVE-2017-15365" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
    <description>
    sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 allows remote authenticated users with SQL access to bypass intended access restrictions and replicate data definition language (DDL) statements to cluster nodes by leveraging incorrect ordering of DDL replication and ACL checking.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-15365/">CVE-2017-15365</cve>
	<bugzilla href="https://bugzilla.suse.com/1072167">SUSE bug 1072167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15386</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15386" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15386" ref_url="https://www.suse.com/security/cve/CVE-2017-15386" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-15386/">CVE-2017-15386</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15387</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15387" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15387" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15387" ref_url="https://www.suse.com/security/cve/CVE-2017-15387" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows when they should not be allowed to via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15387/">CVE-2017-15387</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15388</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15388" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15388" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15388" ref_url="https://www.suse.com/security/cve/CVE-2017-15388" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15388/">CVE-2017-15388</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15389</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15389" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15389" ref_url="https://www.suse.com/security/cve/CVE-2017-15389" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-15389/">CVE-2017-15389</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15390</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15390" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15390" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15390" ref_url="https://www.suse.com/security/cve/CVE-2017-15390" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-15390/">CVE-2017-15390</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15391</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15391" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15391" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15391" ref_url="https://www.suse.com/security/cve/CVE-2017-15391" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to access Extension pages without authorisation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-15391/">CVE-2017-15391</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15392</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15392" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15392" ref_url="https://www.suse.com/security/cve/CVE-2017-15392" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Windows Registry to potentially exploit heap corruption via a crafted Windows Registry entry, related to PlatformIntegration.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-15392/">CVE-2017-15392</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15393</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15393" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15393" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15393" ref_url="https://www.suse.com/security/cve/CVE-2017-15393" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debugging functionality via a crafted HTML page, aka a Referer leak.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15393/">CVE-2017-15393</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715394" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15394</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15394" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15394" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15394" ref_url="https://www.suse.com/security/cve/CVE-2017-15394" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-15394/">CVE-2017-15394</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15395</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15395" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15395" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15395" ref_url="https://www.suse.com/security/cve/CVE-2017-15395" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an ImageCapture NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15395/">CVE-2017-15395</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15396</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15396" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15396" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15396" ref_url="https://www.suse.com/security/cve/CVE-2017-15396" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15396/">CVE-2017-15396</cve>
	<bugzilla href="https://bugzilla.suse.com/1065405">SUSE bug 1065405</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715398" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15398</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15398" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15398" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15398" ref_url="https://www.suse.com/security/cve/CVE-2017-15398" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2953-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code execution via a malicious server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15398/">CVE-2017-15398</cve>
	<bugzilla href="https://bugzilla.suse.com/1066851">SUSE bug 1066851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066853">SUSE bug 1066853</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15399</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15399" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15399" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15399" ref_url="https://www.suse.com/security/cve/CVE-2017-15399" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2953-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    A use after free in V8 in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15399/">CVE-2017-15399</cve>
	<bugzilla href="https://bugzilla.suse.com/1066851">SUSE bug 1066851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066853">SUSE bug 1066853</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15407</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15407" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15407" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15407" ref_url="https://www.suse.com/security/cve/CVE-2017-15407" source="SUSE CVE"/>
    <description>
    Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via a malicious server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15407/">CVE-2017-15407</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15408</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15408" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15408" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15408" ref_url="https://www.suse.com/security/cve/CVE-2017-15408" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15408/">CVE-2017-15408</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715409" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15409</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15409" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15409" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15409" ref_url="https://www.suse.com/security/cve/CVE-2017-15409" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15409/">CVE-2017-15409</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15410</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15410" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15410" ref_url="https://www.suse.com/security/cve/CVE-2017-15410" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15410/">CVE-2017-15410</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15411</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15411" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15411" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15411" ref_url="https://www.suse.com/security/cve/CVE-2017-15411" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15411/">CVE-2017-15411</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15412</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15412" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15412" ref_url="https://www.suse.com/security/cve/CVE-2017-15412" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003715.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003716.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0418-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00036.html" source="SUSE-SU"/>
    <description>
    Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15412/">CVE-2017-15412</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077993">SUSE bug 1077993</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123129">SUSE bug 1123129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715413" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15413</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15413" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15413" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15413" ref_url="https://www.suse.com/security/cve/CVE-2017-15413" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15413/">CVE-2017-15413</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15415</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15415" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15415" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15415" ref_url="https://www.suse.com/security/cve/CVE-2017-15415" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of a pointer via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15415/">CVE-2017-15415</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15416</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15416" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15416" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15416" ref_url="https://www.suse.com/security/cve/CVE-2017-15416" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka a Blink out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15416/">CVE-2017-15416</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15417</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15417" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15417" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15417" ref_url="https://www.suse.com/security/cve/CVE-2017-15417" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15417/">CVE-2017-15417</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15418</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15418" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15418" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15418" ref_url="https://www.suse.com/security/cve/CVE-2017-15418" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15418/">CVE-2017-15418</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15419</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15419" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15419" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15419" ref_url="https://www.suse.com/security/cve/CVE-2017-15419" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to infer browsing history by triggering a leaked cross-origin URL via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15419/">CVE-2017-15419</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15420</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15420" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15420" ref_url="https://www.suse.com/security/cve/CVE-2017-15420" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-15420/">CVE-2017-15420</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15422</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15422" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15422" ref_url="https://www.suse.com/security/cve/CVE-2017-15422" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1401-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004167.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1422-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00103.html" source="SUSE-SU"/>
    <description>
    Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15422/">CVE-2017-15422</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077999">SUSE bug 1077999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123121">SUSE bug 1123121</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15423</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15423" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15423" ref_url="https://www.suse.com/security/cve/CVE-2017-15423" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15423/">CVE-2017-15423</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15424</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15424" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15424" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15424" ref_url="https://www.suse.com/security/cve/CVE-2017-15424" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-15424/">CVE-2017-15424</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15425</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15425" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15425" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15425" ref_url="https://www.suse.com/security/cve/CVE-2017-15425" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-15425/">CVE-2017-15425</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15426</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15426" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15426" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15426" ref_url="https://www.suse.com/security/cve/CVE-2017-15426" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-15426/">CVE-2017-15426</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15427</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15427" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15427" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15427" ref_url="https://www.suse.com/security/cve/CVE-2017-15427" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-15427/">CVE-2017-15427</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15429</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15429" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15429" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15429" ref_url="https://www.suse.com/security/cve/CVE-2017-15429" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3344-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00077.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-15429/">CVE-2017-15429</cve>
	<bugzilla href="https://bugzilla.suse.com/1072976">SUSE bug 1072976</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715430" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15430</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15430" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15430" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15430" ref_url="https://www.suse.com/security/cve/CVE-2017-15430" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in Chromecast plugin in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15430/">CVE-2017-15430</cve>
	<bugzilla href="https://bugzilla.suse.com/1071691">SUSE bug 1071691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106341">SUSE bug 1106341</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15670</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15670" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15670" ref_url="https://www.suse.com/security/cve/CVE-2017-15670" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004606.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00040.html" source="SUSE-SU"/>
    <description>
    The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15670/">CVE-2017-15670</cve>
	<bugzilla href="https://bugzilla.suse.com/1064583">SUSE bug 1064583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15671</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15671" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15671" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15671" ref_url="https://www.suse.com/security/cve/CVE-2017-15671" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004949.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00040.html" source="SUSE-SU"/>
    <description>
    The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15671/">CVE-2017-15671</cve>
	<bugzilla href="https://bugzilla.suse.com/1064569">SUSE bug 1064569</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15672</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15672" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15672" ref_url="https://www.suse.com/security/cve/CVE-2017-15672" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0470-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0476-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00062.html" source="SUSE-SU"/>
    <description>
    The read_header function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15672/">CVE-2017-15672</cve>
	<bugzilla href="https://bugzilla.suse.com/1066428">SUSE bug 1066428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15804</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15804" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15804" ref_url="https://www.suse.com/security/cve/CVE-2017-15804" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004606.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00040.html" source="SUSE-SU"/>
    <description>
    The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-15804/">CVE-2017-15804</cve>
	<bugzilla href="https://bugzilla.suse.com/1064580">SUSE bug 1064580</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715873" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15873</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15873" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15873" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15873" ref_url="https://www.suse.com/security/cve/CVE-2017-15873" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    The get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15873/">CVE-2017-15873</cve>
	<bugzilla href="https://bugzilla.suse.com/1064976">SUSE bug 1064976</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152555" comment="busybox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653584" comment="busybox-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715874" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15874</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15874" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15874" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15874" ref_url="https://www.suse.com/security/cve/CVE-2017-15874" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15874/">CVE-2017-15874</cve>
	<bugzilla href="https://bugzilla.suse.com/1064978">SUSE bug 1064978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152555" comment="busybox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653584" comment="busybox-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15908</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15908" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15908" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15908" ref_url="https://www.suse.com/security/cve/CVE-2017-15908" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003686.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0320-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00118.html" source="SUSE-SU"/>
    <description>
    In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15908/">CVE-2017-15908</cve>
	<bugzilla href="https://bugzilla.suse.com/1065276">SUSE bug 1065276</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715923" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15923</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15923" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15923" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15923" ref_url="https://www.suse.com/security/cve/CVE-2017-15923" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3097-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00081.html" source="SUSE-SU"/>
    <description>
    Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service (crash) via vectors related to parsing of IRC color formatting codes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15923/">CVE-2017-15923</cve>
	<bugzilla href="https://bugzilla.suse.com/1068097">SUSE bug 1068097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694818" comment="konversation-1.7.5-bp153.1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152510" comment="konversation is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694819" comment="konversation-lang-1.7.5-bp153.1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152511" comment="konversation-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715938" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15938</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15938" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15938" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15938" ref_url="https://www.suse.com/security/cve/CVE-2017-15938" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW_FORM_ref_addr die refs in the case of a relocatable object file, which allows remote attackers to cause a denial of service (find_abstract_instance_name invalid memory read, segmentation fault, and application crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15938/">CVE-2017-15938</cve>
	<bugzilla href="https://bugzilla.suse.com/1065693">SUSE bug 1065693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15939</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15939" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15939" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15939" ref_url="https://www.suse.com/security/cve/CVE-2017-15939" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename. NOTE: this issue is caused by an incomplete fix for CVE-2017-15023.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15939/">CVE-2017-15939</cve>
	<bugzilla href="https://bugzilla.suse.com/1061623">SUSE bug 1061623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065689">SUSE bug 1065689</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15996</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15996" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15996" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15996" ref_url="https://www.suse.com/security/cve/CVE-2017-15996" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly have unspecified other impact via a crafted ELF file that triggers a "buffer overflow on fuzzed archive header," related to an uninitialized variable, an improper conditional jump, and the get_archive_member_name, process_archive_index_and_symbols, and setup_archive functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15996/">CVE-2017-15996</cve>
	<bugzilla href="https://bugzilla.suse.com/1065643">SUSE bug 1065643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16232</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16232" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16232" ref_url="https://www.suse.com/security/cve/CVE-2017-16232" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0073-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0097-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16232/">CVE-2017-16232</cve>
	<bugzilla href="https://bugzilla.suse.com/1069213">SUSE bug 1069213</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716536" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16536</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16536" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16536" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16536" ref_url="https://www.suse.com/security/cve/CVE-2017-16536" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    The cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16536/">CVE-2017-16536</cve>
	<bugzilla href="https://bugzilla.suse.com/1066606">SUSE bug 1066606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16537</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16537" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16537" ref_url="https://www.suse.com/security/cve/CVE-2017-16537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    The imon_probe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16537/">CVE-2017-16537</cve>
	<bugzilla href="https://bugzilla.suse.com/1066573">SUSE bug 1066573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16541</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16541" ref_url="https://www.suse.com/security/cve/CVE-2017-16541" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004918.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-16541/">CVE-2017-16541</cve>
	<bugzilla href="https://bugzilla.suse.com/1066489">SUSE bug 1066489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107343">SUSE bug 1107343</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16544</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16544" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16544" ref_url="https://www.suse.com/security/cve/CVE-2017-16544" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16544/">CVE-2017-16544</cve>
	<bugzilla href="https://bugzilla.suse.com/1069412">SUSE bug 1069412</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152555" comment="busybox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653584" comment="busybox-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16548</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16548" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16548" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16548" ref_url="https://www.suse.com/security/cve/CVE-2017-16548" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003603.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003604.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00044.html" source="SUSE-SU"/>
    <description>
    The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact by sending crafted data to the daemon.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16548/">CVE-2017-16548</cve>
	<bugzilla href="https://bugzilla.suse.com/1066644">SUSE bug 1066644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482539" comment="rsync-3.1.3-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151567" comment="rsync is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716611" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16611</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16611" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16611" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16611" ref_url="https://www.suse.com/security/cve/CVE-2017-16611" source="SUSE CVE"/>
    <description>
    In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16611/">CVE-2017-16611</cve>
	<bugzilla href="https://bugzilla.suse.com/1050459">SUSE bug 1050459</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480422" comment="libXfont2-2-2.0.3-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177240" comment="libXfont2-2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716612" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16612</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16612" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16612" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16612" ref_url="https://www.suse.com/security/cve/CVE-2017-16612" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003472.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003648.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0504-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00087.html" source="SUSE-SU"/>
    <description>
    libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP. It is also possible that an attack vector exists against the related code in cursor/xcursor.c in Wayland through 1.14.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16612/">CVE-2017-16612</cve>
	<bugzilla href="https://bugzilla.suse.com/1065386">SUSE bug 1065386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159415">SUSE bug 1159415</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480411" comment="libXcursor1-1.1.15-1.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151860" comment="libXcursor1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16646</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16646" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16646" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16646" ref_url="https://www.suse.com/security/cve/CVE-2017-16646" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16646/">CVE-2017-16646</cve>
	<bugzilla href="https://bugzilla.suse.com/1067105">SUSE bug 1067105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16648</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16648" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16648" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16648" ref_url="https://www.suse.com/security/cve/CVE-2017-16648" source="SUSE CVE"/>
    <description>
    The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. NOTE: the function was later renamed __dvb_frontend_free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16648/">CVE-2017-16648</cve>
	<bugzilla href="https://bugzilla.suse.com/1067087">SUSE bug 1067087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16818</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16818" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16818" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16818" ref_url="https://www.suse.com/security/cve/CVE-2017-16818" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1417-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00114.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00071.html" source="SUSE-SU"/>
    <description>
    RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging "full" (not necessarily admin) privileges to post an invalid profile to the admin API, related to rgw/rgw_iam_policy.cc, rgw/rgw_basic_types.h, and rgw/rgw_iam_types.h.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16818/">CVE-2017-16818</cve>
	<bugzilla href="https://bugzilla.suse.com/1063014">SUSE bug 1063014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069253">SUSE bug 1069253</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694875" comment="librados2-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694876" comment="librbd1-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16826</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16826" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16826" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16826" ref_url="https://www.suse.com/security/cve/CVE-2017-16826" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted PE file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16826/">CVE-2017-16826</cve>
	<bugzilla href="https://bugzilla.suse.com/1068640">SUSE bug 1068640</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16827</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16827" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16827" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16827" ref_url="https://www.suse.com/security/cve/CVE-2017-16827" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (slurp_symtab invalid free and application crash) or possibly have unspecified other impact via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16827/">CVE-2017-16827</cve>
	<bugzilla href="https://bugzilla.suse.com/1069202">SUSE bug 1069202</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16828</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16828" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16828" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16828" ref_url="https://www.suse.com/security/cve/CVE-2017-16828" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow and heap-based buffer over-read, and application crash) or possibly have unspecified other impact via a crafted ELF file, related to print_debug_frame.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16828/">CVE-2017-16828</cve>
	<bugzilla href="https://bugzilla.suse.com/1069176">SUSE bug 1069176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16829</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16829" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16829" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16829" ref_url="https://www.suse.com/security/cve/CVE-2017-16829" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not prevent negative pointers, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16829/">CVE-2017-16829</cve>
	<bugzilla href="https://bugzilla.suse.com/1068950">SUSE bug 1068950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16830</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16830" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16830" ref_url="https://www.suse.com/security/cve/CVE-2017-16830" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16830/">CVE-2017-16830</cve>
	<bugzilla href="https://bugzilla.suse.com/1068888">SUSE bug 1068888</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16831</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16831" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16831" ref_url="https://www.suse.com/security/cve/CVE-2017-16831" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows remote attackers to cause a denial of service (integer overflow and application crash, or excessive memory allocation) or possibly have unspecified other impact via a crafted PE file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16831/">CVE-2017-16831</cve>
	<bugzilla href="https://bugzilla.suse.com/1068887">SUSE bug 1068887</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716832" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16832</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16832" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16832" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16832" ref_url="https://www.suse.com/security/cve/CVE-2017-16832" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dictionary, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted PE file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16832/">CVE-2017-16832</cve>
	<bugzilla href="https://bugzilla.suse.com/1068643">SUSE bug 1068643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16840</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16840" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16840" ref_url="https://www.suse.com/security/cve/CVE-2017-16840" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0470-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0476-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00062.html" source="SUSE-SU"/>
    <description>
    The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service (out-of-bounds read) because of incorrect buffer padding for non-Haar wavelets, related to libavcodec/vc2enc.c and libavcodec/vc2enc_dwt.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16840/">CVE-2017-16840</cve>
	<bugzilla href="https://bugzilla.suse.com/1069407">SUSE bug 1069407</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16844</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16844" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16844" ref_url="https://www.suse.com/security/cve/CVE-2017-16844" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003618.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16844/">CVE-2017-16844</cve>
	<bugzilla href="https://bugzilla.suse.com/1068648">SUSE bug 1068648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480880" comment="procmail-3.22-2.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152141" comment="procmail is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716997" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16997</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16997" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16997" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16997" ref_url="https://www.suse.com/security/cve/CVE-2017-16997" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00040.html" source="SUSE-SU"/>
    <description>
    elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the "./" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16997/">CVE-2017-16997</cve>
	<bugzilla href="https://bugzilla.suse.com/1073231">SUSE bug 1073231</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17081</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17081" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17081" ref_url="https://www.suse.com/security/cve/CVE-2017-17081" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0470-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0476-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00062.html" source="SUSE-SU"/>
    <description>
    The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service (integer signedness error and out-of-array read) via a crafted MPEG file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17081/">CVE-2017-17081</cve>
	<bugzilla href="https://bugzilla.suse.com/1070762">SUSE bug 1070762</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17087</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17087" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17087" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17087" ref_url="https://www.suse.com/security/cve/CVE-2017-17087" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011493.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:763-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011495.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013343.html" source="SUSE-SU"/>
    <description>
    fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability than CVE-2017-1000382.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-17"/>
	<updated date="2022-12-28"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17087/">CVE-2017-17087</cve>
	<bugzilla href="https://bugzilla.suse.com/1065958">SUSE bug 1065958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070955">SUSE bug 1070955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684389" comment="gvim-8.2.5038-150000.5.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151192" comment="gvim is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684300" comment="vim-8.2.5038-150000.5.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151193" comment="vim is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684301" comment="vim-data-8.2.5038-150000.5.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151194" comment="vim-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684302" comment="vim-data-common-8.2.5038-150000.5.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177135" comment="vim-data-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684303" comment="vim-small-8.2.5038-150000.5.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009670993" comment="vim-small is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17095</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17095" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17095" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17095" ref_url="https://www.suse.com/security/cve/CVE-2017-17095" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010261.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0480-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/" source="SUSE-SU"/>
    <description>
    tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17095/">CVE-2017-17095</cve>
	<bugzilla href="https://bugzilla.suse.com/1071031">SUSE bug 1071031</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665431" comment="libtiff-devel-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666516" comment="libtiff-devel-32bit-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665432" comment="libtiff5-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665439" comment="libtiff5-32bit-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665440" comment="tiff-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17426</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17426" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17426" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17426" ref_url="https://www.suse.com/security/cve/CVE-2017-17426" source="SUSE CVE"/>
    <description>
    The malloc function in the GNU C Library (aka glibc or libc6) 2.26 could return a memory block that is too small if an attempt is made to allocate an object whose size is close to SIZE_MAX, potentially leading to a subsequent heap overflow. This occurs because the per-thread cache (aka tcache) feature enables a code path that lacks an integer overflow check.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17426/">CVE-2017-17426</cve>
	<bugzilla href="https://bugzilla.suse.com/1071479">SUSE bug 1071479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17456</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17456" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17456" ref_url="https://www.suse.com/security/cve/CVE-2017-17456" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004320.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005286.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00015.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14245. Reason: This candidate is a duplicate of CVE-2017-14245. Notes: All CVE users should reference CVE-2017-14245 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17456/">CVE-2017-17456</cve>
	<bugzilla href="https://bugzilla.suse.com/1059912">SUSE bug 1059912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071777">SUSE bug 1071777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117906">SUSE bug 1117906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717457" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17457</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17457" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17457" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17457" ref_url="https://www.suse.com/security/cve/CVE-2017-17457" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004320.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005286.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00015.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17457/">CVE-2017-17457</cve>
	<bugzilla href="https://bugzilla.suse.com/1059913">SUSE bug 1059913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071767">SUSE bug 1071767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117906">SUSE bug 1117906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17505</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17505" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17505" ref_url="https://www.suse.com/security/cve/CVE-2017-17505" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17505/">CVE-2017-17505</cve>
	<bugzilla href="https://bugzilla.suse.com/1072087">SUSE bug 1072087</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694850" comment="libhdf5-103-1.10.7-bp153.3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695547" comment="libhdf5-103 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17506</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17506" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17506" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17506" ref_url="https://www.suse.com/security/cve/CVE-2017-17506" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Opline_pline_decode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17506/">CVE-2017-17506</cve>
	<bugzilla href="https://bugzilla.suse.com/1072090">SUSE bug 1072090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694850" comment="libhdf5-103-1.10.7-bp153.3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695547" comment="libhdf5-103 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17508</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17508" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17508" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17508" ref_url="https://www.suse.com/security/cve/CVE-2017-17508" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17508/">CVE-2017-17508</cve>
	<bugzilla href="https://bugzilla.suse.com/1072108">SUSE bug 1072108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694850" comment="libhdf5-103-1.10.7-bp153.3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695547" comment="libhdf5-103 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17509</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17509" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17509" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17509" ref_url="https://www.suse.com/security/cve/CVE-2017-17509" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example, h5dump would crash or possibly have unspecified other impact someone opens a crafted hdf5 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17509/">CVE-2017-17509</cve>
	<bugzilla href="https://bugzilla.suse.com/1072111">SUSE bug 1072111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694850" comment="libhdf5-103-1.10.7-bp153.3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695547" comment="libhdf5-103 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17555</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17555" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17555" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17555" ref_url="https://www.suse.com/security/cve/CVE-2017-17555" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0470-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0476-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html" source="SUSE-SU"/>
    <description>
    The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17555/">CVE-2017-17555</cve>
	<bugzilla href="https://bugzilla.suse.com/1072366">SUSE bug 1072366</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17740</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17740" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17740" ref_url="https://www.suse.com/security/cve/CVE-2017-17740" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005325.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005929.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00058.html" source="SUSE-SU"/>
    <description>
    contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17740/">CVE-2017-17740</cve>
	<bugzilla href="https://bugzilla.suse.com/1073313">SUSE bug 1073313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17742</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17742" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17742" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17742" ref_url="https://www.suse.com/security/cve/CVE-2017-17742" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 allows an HTTP Response Splitting attack. An attacker can inject a crafted key and value into an HTTP response for the HTTP server of WEBrick.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-17742/">CVE-2017-17742</cve>
	<bugzilla href="https://bugzilla.suse.com/1087434">SUSE bug 1087434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136906">SUSE bug 1136906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152992">SUSE bug 1152992</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17833</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17833" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17833" ref_url="https://www.suse.com/security/cve/CVE-2017-17833" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2779-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2991-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004639.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2991-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2991-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005372.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1958-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00063.html" source="SUSE-SU"/>
    <description>
    OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-17833/">CVE-2017-17833</cve>
	<bugzilla href="https://bugzilla.suse.com/1090638">SUSE bug 1090638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099519">SUSE bug 1099519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628951" comment="openslp-2.0.0-6.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151507" comment="openslp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628952" comment="openslp-32bit-2.0.0-6.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153678" comment="openslp-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17969</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17969" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17969" ref_url="https://www.suse.com/security/cve/CVE-2017-17969" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00040.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17969/">CVE-2017-17969</cve>
	<bugzilla href="https://bugzilla.suse.com/1077725">SUSE bug 1077725</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694907" comment="p7zip-16.02-14.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152637" comment="p7zip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694908" comment="p7zip-full-16.02-14.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474268" comment="p7zip-full is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18009</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18009" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18009" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18009" ref_url="https://www.suse.com/security/cve/CVE-2017-18009" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1697-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00026.html" source="SUSE-SU"/>
    <description>
    In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18009/">CVE-2017-18009</cve>
	<bugzilla href="https://bugzilla.suse.com/1074312">SUSE bug 1074312</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489231" comment="libopencv3_3-3.3.1-6.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223580" comment="libopencv3_3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18013</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18013" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18013" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18013" ref_url="https://www.suse.com/security/cve/CVE-2017-18013" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004247.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00017.html" source="SUSE-SU"/>
    <description>
    In LibTIFF 4.0.9, there is a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated by a tiffinfo crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18013/">CVE-2017-18013</cve>
	<bugzilla href="https://bugzilla.suse.com/1074317">SUSE bug 1074317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082825">SUSE bug 1082825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18078</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18078" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18078" ref_url="https://www.suse.com/security/cve/CVE-2017-18078" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003753.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0560-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00109.html" source="SUSE-SU"/>
    <description>
    systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the fs.protected_hardlinks sysctl is turned off, which allows local users to bypass intended access restrictions via vectors involving a hard link to a file for which the user lacks write access, as demonstrated by changing the ownership of the /etc/passwd file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18078/">CVE-2017-18078</cve>
	<bugzilla href="https://bugzilla.suse.com/1077925">SUSE bug 1077925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18198</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18198" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18198" ref_url="https://www.suse.com/security/cve/CVE-2017-18198" source="SUSE CVE"/>
    <description>
    print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted iso file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.9/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18198/">CVE-2017-18198</cve>
	<bugzilla href="https://bugzilla.suse.com/1082819">SUSE bug 1082819</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629197" comment="libcdio19-2.1.0-1.27 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695548" comment="libcdio19 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18199</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18199" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18199" ref_url="https://www.suse.com/security/cve/CVE-2017-18199" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007472.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3023-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007617.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2294-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00040.html" source="SUSE-SU"/>
    <description>
    realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18199/">CVE-2017-18199</cve>
	<bugzilla href="https://bugzilla.suse.com/1082821">SUSE bug 1082821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487341" comment="libcdio16-0.94-6.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177241" comment="libcdio16 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629197" comment="libcdio19-2.1.0-1.27 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695548" comment="libcdio19 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18201</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18201" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18201" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18201" ref_url="https://www.suse.com/security/cve/CVE-2017-18201" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003811.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004383.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2294-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00040.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18201/">CVE-2017-18201</cve>
	<bugzilla href="https://bugzilla.suse.com/1082877">SUSE bug 1082877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487341" comment="libcdio16-0.94-6.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177241" comment="libcdio16 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629197" comment="libcdio19-2.1.0-1.27 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695548" comment="libcdio19 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18207</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18207" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18207" ref_url="https://www.suse.com/security/cve/CVE-2017-18207" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003890.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004216.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2040-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004297.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0302-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006445.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0966-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications "need to be prepared to handle a wide variety of exceptions."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18207/">CVE-2017-18207</cve>
	<bugzilla href="https://bugzilla.suse.com/1083507">SUSE bug 1083507</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18248</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18248" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18248" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18248" ref_url="https://www.suse.com/security/cve/CVE-2017-18248" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004364.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00022.html" source="SUSE-SU"/>
    <description>
    The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18248/">CVE-2017-18248</cve>
	<bugzilla href="https://bugzilla.suse.com/1087018">SUSE bug 1087018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087072">SUSE bug 1087072</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18258</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18258" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18258" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18258" ref_url="https://www.suse.com/security/cve/CVE-2017-18258" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004657.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00026.html" source="SUSE-SU"/>
    <description>
    The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functionality does not restrict memory usage to what is required for a legitimate file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18258/">CVE-2017-18258</cve>
	<bugzilla href="https://bugzilla.suse.com/1088279">SUSE bug 1088279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088601">SUSE bug 1088601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105166">SUSE bug 1105166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18266</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18266" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18266" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18266" ref_url="https://www.suse.com/security/cve/CVE-2017-18266" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004111.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1596-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00009.html" source="SUSE-SU"/>
    <description>
    The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by %s in this environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18266/">CVE-2017-18266</cve>
	<bugzilla href="https://bugzilla.suse.com/1093086">SUSE bug 1093086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482570" comment="xdg-utils-1.1.3+20190413-1.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009178283" comment="xdg-utils is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18267</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18267" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18267" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18267" ref_url="https://www.suse.com/security/cve/CVE-2017-18267" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service (infinite recursion) via a crafted PDF file, as demonstrated by pdftops.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18267/">CVE-2017-18267</cve>
	<bugzilla href="https://bugzilla.suse.com/1092945">SUSE bug 1092945</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718269" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18269</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18269" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18269" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18269" ref_url="https://www.suse.com/security/cve/CVE-2017-18269" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1562-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1562-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1991-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004285.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1600-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2159-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00000.html" source="SUSE-SU"/>
    <description>
    An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18269/">CVE-2017-18269</cve>
	<bugzilla href="https://bugzilla.suse.com/1094150">SUSE bug 1094150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118435">SUSE bug 1118435</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18640</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18640" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18640" ref_url="https://www.suse.com/security/cve/CVE-2017-18640" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008943.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1979-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0855-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WBPEYN3HS4LO455EQKPMEZAUTFZIRGMT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1876-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FQSQDG6EG5IGZXIQVLQHFSBMALXOT6L6/" source="SUSE-SU"/>
    <description>
    The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18640/">CVE-2017-18640</cve>
	<bugzilla href="https://bugzilla.suse.com/1159488">SUSE bug 1159488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186088">SUSE bug 1186088</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496555" comment="snakeyaml-1.28-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009477984" comment="snakeyaml is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620688" comment="snakeyaml-javadoc-1.28-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009477985" comment="snakeyaml-javadoc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18922</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18922" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18922" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18922" ref_url="https://www.suse.com/security/cve/CVE-2017-18922" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1873-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1922-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2167-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007241.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html" source="SUSE-SU"/>
    <description>
    It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18922/">CVE-2017-18922</cve>
	<bugzilla href="https://bugzilla.suse.com/1173477">SUSE bug 1173477</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718926" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18926</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18926" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18926" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18926" ref_url="https://www.suse.com/security/cve/CVE-2017-18926" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007785.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1949-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IUV22LIOLBYBTTH7G7HNENHDQDYBB4WP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1959-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UXCAHUNNGDFKLSCGKPLLGBYG4BM2FW4J/" source="SUSE-SU"/>
    <description>
    raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows (sometimes seen in raptor_qname_format_as_xml).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18926/">CVE-2017-18926</cve>
	<bugzilla href="https://bugzilla.suse.com/1178593">SUSE bug 1178593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178784">SUSE bug 1178784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178903">SUSE bug 1178903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183914">SUSE bug 1183914</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629212" comment="libraptor2-0-2.0.15-9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151673" comment="libraptor2-0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2350</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2350" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2350" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2350" ref_url="https://www.suse.com/security/cve/CVE-2017-2350" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2350/">CVE-2017-2350</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2354</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2354" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2354" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2354" ref_url="https://www.suse.com/security/cve/CVE-2017-2354" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2354/">CVE-2017-2354</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2355</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2355" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2355" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2355" ref_url="https://www.suse.com/security/cve/CVE-2017-2355" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2355/">CVE-2017-2355</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172356" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2356</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2356" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2356" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2356" ref_url="https://www.suse.com/security/cve/CVE-2017-2356" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2356/">CVE-2017-2356</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2362</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2362" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2362" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2362" ref_url="https://www.suse.com/security/cve/CVE-2017-2362" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2362/">CVE-2017-2362</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2363</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2363" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2363" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2363" ref_url="https://www.suse.com/security/cve/CVE-2017-2363" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2363/">CVE-2017-2363</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2364</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2364" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2364" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2364" ref_url="https://www.suse.com/security/cve/CVE-2017-2364" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2364/">CVE-2017-2364</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2365</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2365" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2365" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2365" ref_url="https://www.suse.com/security/cve/CVE-2017-2365" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2365/">CVE-2017-2365</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172366" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2366</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2366" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2366" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2366" ref_url="https://www.suse.com/security/cve/CVE-2017-2366" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2366/">CVE-2017-2366</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2369</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2369" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2369" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2369" ref_url="https://www.suse.com/security/cve/CVE-2017-2369" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2369/">CVE-2017-2369</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2371</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2371" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2371" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2371" ref_url="https://www.suse.com/security/cve/CVE-2017-2371" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-2371/">CVE-2017-2371</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2373</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2373" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2373" ref_url="https://www.suse.com/security/cve/CVE-2017-2373" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2373/">CVE-2017-2373</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2496</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2496" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2496" ref_url="https://www.suse.com/security/cve/CVE-2017-2496" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2496/">CVE-2017-2496</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2510</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2510" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2510" ref_url="https://www.suse.com/security/cve/CVE-2017-2510" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with pageshow events.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-2510/">CVE-2017-2510</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2538</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2538" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2538" ref_url="https://www.suse.com/security/cve/CVE-2017-2538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2538/">CVE-2017-2538</cve>
	<bugzilla href="https://bugzilla.suse.com/1045460">SUSE bug 1045460</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2539</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2539" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2539" ref_url="https://www.suse.com/security/cve/CVE-2017-2539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2539/">CVE-2017-2539</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172579" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2579</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2579" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2579" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2579" ref_url="https://www.suse.com/security/cve/CVE-2017-2579" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005614.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1645-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005619.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1605-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00056.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack() function has an insufficient code value check, so that a maliciously crafted file could cause the application to crash or possibly allows code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2579/">CVE-2017-2579</cve>
	<bugzilla href="https://bugzilla.suse.com/1024287">SUSE bug 1024287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024288">SUSE bug 1024288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628803" comment="libnetpbm11-10.80.1-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153785" comment="libnetpbm11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628804" comment="netpbm-10.80.1-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153787" comment="netpbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172580" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2580</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2580" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2580" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2580" ref_url="https://www.suse.com/security/cve/CVE-2017-2580" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005614.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1645-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005619.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1605-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00056.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2580/">CVE-2017-2580</cve>
	<bugzilla href="https://bugzilla.suse.com/1024287">SUSE bug 1024287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024291">SUSE bug 1024291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628803" comment="libnetpbm11-10.80.1-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153785" comment="libnetpbm11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628804" comment="netpbm-10.80.1-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153787" comment="netpbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2615</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2615" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2615" ref_url="https://www.suse.com/security/cve/CVE-2017-2615" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0571-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2615/">CVE-2017-2615</cve>
	<bugzilla href="https://bugzilla.suse.com/1023004">SUSE bug 1023004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2616</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2616" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2616" ref_url="https://www.suse.com/security/cve/CVE-2017-2616" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0554-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0555-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0866-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00002.html" source="SUSE-SU"/>
    <description>
    A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2616/">CVE-2017-2616</cve>
	<bugzilla href="https://bugzilla.suse.com/1023041">SUSE bug 1023041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123789">SUSE bug 1123789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628636" comment="libblkid1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151787" comment="libblkid1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628637" comment="libblkid1-32bit-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151788" comment="libblkid1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628639" comment="libfdisk1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154114" comment="libfdisk1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628641" comment="libmount1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151789" comment="libmount1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628642" comment="libmount1-32bit-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151790" comment="libmount1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628644" comment="libsmartcols1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151791" comment="libsmartcols1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628647" comment="libuuid1-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151793" comment="libuuid1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628648" comment="libuuid1-32bit-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151794" comment="libuuid1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628649" comment="util-linux-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151795" comment="util-linux is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628650" comment="util-linux-lang-2.36.2-2.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151796" comment="util-linux-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628651" comment="util-linux-systemd-2.36.2-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151797" comment="util-linux-systemd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2619</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2619" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2619" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2619" ref_url="https://www.suse.com/security/cve/CVE-2017-2619" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0858-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0859-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0862-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0944-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00009.html" source="SUSE-SU"/>
    <description>
    Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2619/">CVE-2017-2619</cve>
	<bugzilla href="https://bugzilla.suse.com/1027147">SUSE bug 1027147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036283">SUSE bug 1036283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054017">SUSE bug 1054017</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2620</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2620" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2620" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2620" ref_url="https://www.suse.com/security/cve/CVE-2017-2620" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0571-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.9/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2620/">CVE-2017-2620</cve>
	<bugzilla href="https://bugzilla.suse.com/1024834">SUSE bug 1024834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024972">SUSE bug 1024972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2624</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2624" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2624" ref_url="https://www.suse.com/security/cve/CVE-2017-2624" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1675-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002980.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1610-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00070.html" source="SUSE-SU"/>
    <description>
    It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp() implementations return after an invalid byte is seen, this causes a time difference between a valid and invalid byte, which could allow an efficient brute force attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2624/">CVE-2017-2624</cve>
	<bugzilla href="https://bugzilla.suse.com/1025029">SUSE bug 1025029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1025639">SUSE bug 1025639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035283">SUSE bug 1035283</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629053" comment="xorg-x11-server-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629054" comment="xorg-x11-server-extra-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684245" comment="xorg-x11-server-wayland-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177168" comment="xorg-x11-server-wayland is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2625</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2625" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2625" ref_url="https://www.suse.com/security/cve/CVE-2017-2625" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1862-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003696.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1802-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00031.html" source="SUSE-SU"/>
    <description>
    It was discovered that libXdmcp used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2625/">CVE-2017-2625</cve>
	<bugzilla href="https://bugzilla.suse.com/1025046">SUSE bug 1025046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1025068">SUSE bug 1025068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1025639">SUSE bug 1025639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123802">SUSE bug 1123802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/815650">SUSE bug 815650</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480413" comment="libXdmcp6-1.1.2-1.23 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158161" comment="libXdmcp6 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172626" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2626</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2626" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2626" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2626" ref_url="https://www.suse.com/security/cve/CVE-2017-2626" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003695.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1801-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00030.html" source="SUSE-SU"/>
    <description>
    It was discovered that libICE used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-2626/">CVE-2017-2626</cve>
	<bugzilla href="https://bugzilla.suse.com/1025068">SUSE bug 1025068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1025639">SUSE bug 1025639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1048274">SUSE bug 1048274</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123800">SUSE bug 1123800</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480361" comment="libICE6-1.0.9-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158166" comment="libICE6 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2629</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2629" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2629" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2629" ref_url="https://www.suse.com/security/cve/CVE-2017-2629" source="SUSE CVE"/>
    <description>
    curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server's certificate's validity in the code that checks for a test success or failure. It ends up always thinking there's valid proof, even when there is none or if the server doesn't support the TLS extension in question. This could lead to users not detecting when a server's certificate goes invalid or otherwise be mislead that the server is in a better shape than it is in reality. This flaw also exists in the command line tool (--cert-status).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-2629/">CVE-2017-2629</cve>
	<bugzilla href="https://bugzilla.suse.com/1025379">SUSE bug 1025379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042181">SUSE bug 1042181</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2630</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2630" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2630" ref_url="https://www.suse.com/security/cve/CVE-2017-2630" source="SUSE CVE"/>
    <description>
    A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBD_OPT_LIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2630/">CVE-2017-2630</cve>
	<bugzilla href="https://bugzilla.suse.com/1025396">SUSE bug 1025396</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2633</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2633" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2633" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2633" ref_url="https://www.suse.com/security/cve/CVE-2017-2633" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0039-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00022.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2633/">CVE-2017-2633</cve>
	<bugzilla href="https://bugzilla.suse.com/1026612">SUSE bug 1026612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1026636">SUSE bug 1026636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074701">SUSE bug 1074701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2635</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2635" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2635" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2635" ref_url="https://www.suse.com/security/cve/CVE-2017-2635" source="SUSE CVE"/>
    <description>
    A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon resulting in denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2635/">CVE-2017-2635</cve>
	<bugzilla href="https://bugzilla.suse.com/1027075">SUSE bug 1027075</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2640</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2640" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2640" ref_url="https://www.suse.com/security/cve/CVE-2017-2640" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004382.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0892-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00115.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0925-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0973-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00012.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2640/">CVE-2017-2640</cve>
	<bugzilla href="https://bugzilla.suse.com/1028835">SUSE bug 1028835</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489234" comment="libpurple-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489237" comment="libpurple-lang-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630146" comment="libpurple-tcl-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489239" comment="pidgin-2.13.0-10.105 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2834</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2834" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2834" ref_url="https://www.suse.com/security/cve/CVE-2017-2834" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00006.html" source="SUSE-SU"/>
    <description>
    An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle attack to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2834/">CVE-2017-2834</cve>
	<bugzilla href="https://bugzilla.suse.com/1050714">SUSE bug 1050714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2835</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2835" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2835" ref_url="https://www.suse.com/security/cve/CVE-2017-2835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00006.html" source="SUSE-SU"/>
    <description>
    An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2835/">CVE-2017-2835</cve>
	<bugzilla href="https://bugzilla.suse.com/1050712">SUSE bug 1050712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2836</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2836" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2836" ref_url="https://www.suse.com/security/cve/CVE-2017-2836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00006.html" source="SUSE-SU"/>
    <description>
    An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2836/">CVE-2017-2836</cve>
	<bugzilla href="https://bugzilla.suse.com/1050699">SUSE bug 1050699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2837</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2837" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2837" ref_url="https://www.suse.com/security/cve/CVE-2017-2837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00006.html" source="SUSE-SU"/>
    <description>
    An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2837/">CVE-2017-2837</cve>
	<bugzilla href="https://bugzilla.suse.com/1050704">SUSE bug 1050704</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050708">SUSE bug 1050708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2838</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2838" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2838" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2838" ref_url="https://www.suse.com/security/cve/CVE-2017-2838" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00006.html" source="SUSE-SU"/>
    <description>
    An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2838/">CVE-2017-2838</cve>
	<bugzilla href="https://bugzilla.suse.com/1050708">SUSE bug 1050708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2839</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2839" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2839" ref_url="https://www.suse.com/security/cve/CVE-2017-2839" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00006.html" source="SUSE-SU"/>
    <description>
    An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2839/">CVE-2017-2839</cve>
	<bugzilla href="https://bugzilla.suse.com/1050711">SUSE bug 1050711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2862</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2862" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2862" ref_url="https://www.suse.com/security/cve/CVE-2017-2862" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2381-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2470-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004484.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00021.html" source="SUSE-SU"/>
    <description>
    An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2862/">CVE-2017-2862</cve>
	<bugzilla href="https://bugzilla.suse.com/1048289">SUSE bug 1048289</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628451" comment="gdk-pixbuf-lang-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628452" comment="gdk-pixbuf-query-loaders-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628453" comment="gdk-pixbuf-thumbnailer-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177170" comment="gdk-pixbuf-thumbnailer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628454" comment="libgdk_pixbuf-2_0-0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628455" comment="typelib-1_0-GdkPixbuf-2_0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2870</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2870" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2870" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2870" ref_url="https://www.suse.com/security/cve/CVE-2017-2870" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2381-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2470-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004484.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00021.html" source="SUSE-SU"/>
    <description>
    An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-2870/">CVE-2017-2870</cve>
	<bugzilla href="https://bugzilla.suse.com/1048289">SUSE bug 1048289</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1048544">SUSE bug 1048544</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628451" comment="gdk-pixbuf-lang-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628452" comment="gdk-pixbuf-query-loaders-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628453" comment="gdk-pixbuf-thumbnailer-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177170" comment="gdk-pixbuf-thumbnailer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628454" comment="libgdk_pixbuf-2_0-0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628455" comment="typelib-1_0-GdkPixbuf-2_0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2885</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2885" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2885" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2885" ref_url="https://www.suse.com/security/cve/CVE-2017-2885" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2129-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004374.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2204-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00042.html" source="SUSE-SU"/>
    <description>
    An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2885/">CVE-2017-2885</cve>
	<bugzilla href="https://bugzilla.suse.com/1052916">SUSE bug 1052916</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482399" comment="libsoup-2_4-1-2.68.3-2.32 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151596" comment="libsoup-2_4-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482400" comment="libsoup-lang-2.68.3-2.32 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151598" comment="libsoup-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487573" comment="typelib-1_0-Soup-2_4-2.68.3-2.32 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151599" comment="typelib-1_0-Soup-2_4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172888" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2888</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2888" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2888" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2888" ref_url="https://www.suse.com/security/cve/CVE-2017-2888" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2893-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00111.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2895-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00113.html" source="SUSE-SU"/>
    <description>
    An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2888/">CVE-2017-2888</cve>
	<bugzilla href="https://bugzilla.suse.com/1062777">SUSE bug 1062777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1062784">SUSE bug 1062784</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487325" comment="libSDL2-2_0-0-2.0.8-9.63 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3135</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3135" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3135" ref_url="https://www.suse.com/security/cve/CVE-2017-3135" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002672.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002673.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002674.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0620-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00012.html" source="SUSE-SU"/>
    <description>
    Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -&gt; 9.9.9-S7, 9.9.3 -&gt; 9.9.9-P5, 9.9.10b1, 9.10.0 -&gt; 9.10.4-P5, 9.10.5b1, 9.11.0 -&gt; 9.11.0-P2, 9.11.1b1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3135/">CVE-2017-3135</cve>
	<bugzilla href="https://bugzilla.suse.com/1018700">SUSE bug 1018700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018701">SUSE bug 1018701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018702">SUSE bug 1018702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024130">SUSE bug 1024130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033466">SUSE bug 1033466</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3136</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3136" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3136" ref_url="https://www.suse.com/security/cve/CVE-2017-3136" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0999-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007552.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1063-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html" source="SUSE-SU"/>
    <description>
    A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met. Affects BIND 9.8.0 -&gt; 9.8.8-P1, 9.9.0 -&gt; 9.9.9-P6, 9.9.10b1-&gt;9.9.10rc1, 9.10.0 -&gt; 9.10.4-P6, 9.10.5b1-&gt;9.10.5rc1, 9.11.0 -&gt; 9.11.0-P3, 9.11.1b1-&gt;9.11.1rc1, 9.9.3-S1 -&gt; 9.9.9-S8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3136/">CVE-2017-3136</cve>
	<bugzilla href="https://bugzilla.suse.com/1018700">SUSE bug 1018700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018701">SUSE bug 1018701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018702">SUSE bug 1018702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024130">SUSE bug 1024130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033461">SUSE bug 1033461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033466">SUSE bug 1033466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081545">SUSE bug 1081545</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3137</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3137" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3137" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3137" ref_url="https://www.suse.com/security/cve/CVE-2017-3137" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0999-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1027-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1063-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00022.html" source="SUSE-SU"/>
    <description>
    Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an unusual order. Affects BIND 9.9.9-P6, 9.9.10b1-&gt;9.9.10rc1, 9.10.4-P6, 9.10.5b1-&gt;9.10.5rc1, 9.11.0-P3, 9.11.1b1-&gt;9.11.1rc1, and 9.9.9-S8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3137/">CVE-2017-3137</cve>
	<bugzilla href="https://bugzilla.suse.com/1018700">SUSE bug 1018700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018701">SUSE bug 1018701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018702">SUSE bug 1018702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024130">SUSE bug 1024130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033461">SUSE bug 1033461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033466">SUSE bug 1033466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033467">SUSE bug 1033467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1034162">SUSE bug 1034162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076118">SUSE bug 1076118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081545">SUSE bug 1081545</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3138</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3138" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3138" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3138" ref_url="https://www.suse.com/security/cve/CVE-2017-3138" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0999-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002797.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1063-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00022.html" source="SUSE-SU"/>
    <description>
    named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of named can be caused to exit with a REQUIRE assertion failure if they are sent a null command string. Affects BIND 9.9.9-&gt;9.9.9-P7, 9.9.10b1-&gt;9.9.10rc2, 9.10.4-&gt;9.10.4-P7, 9.10.5b1-&gt;9.10.5rc2, 9.11.0-&gt;9.11.0-P4, 9.11.1b1-&gt;9.11.1rc2, 9.9.9-S1-&gt;9.9.9-S9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3138/">CVE-2017-3138</cve>
	<bugzilla href="https://bugzilla.suse.com/1018700">SUSE bug 1018700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018701">SUSE bug 1018701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018702">SUSE bug 1018702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024130">SUSE bug 1024130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033461">SUSE bug 1033461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033466">SUSE bug 1033466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033468">SUSE bug 1033468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3140</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3140" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3140" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3140" ref_url="https://www.suse.com/security/cve/CVE-2017-3140" source="SUSE CVE"/>
    <description>
    If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0-&gt;9.11.1, 9.9.10-S1, 9.10.5-S1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-3140/">CVE-2017-3140</cve>
	<bugzilla href="https://bugzilla.suse.com/1044225">SUSE bug 1044225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044226">SUSE bug 1044226</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3141</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3141" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3141" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3141" ref_url="https://www.suse.com/security/cve/CVE-2017-3141" source="SUSE CVE"/>
    <description>
    The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2-&gt;9.2.9, 9.3.2-P1-&gt;9.3.6, 9.4.0-&gt;9.8.8, 9.9.0-&gt;9.9.10, 9.10.0-&gt;9.10.5, 9.11.0-&gt;9.11.1, 9.9.3-S1-&gt;9.9.10-S1, 9.10.5-S1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3141/">CVE-2017-3141</cve>
	<bugzilla href="https://bugzilla.suse.com/1044225">SUSE bug 1044225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044226">SUSE bug 1044226</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3142</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3142" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3142" ref_url="https://www.suse.com/security/cve/CVE-2017-3142" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1737-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="TID7021041" ref_url="https://www.suse.com/support/kb/doc/?id=7021041" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1809-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00007.html" source="SUSE-SU"/>
    <description>
    An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into: providing an AXFR of a zone to an unauthorized recipient or accepting bogus NOTIFY packets. Affects BIND 9.4.0-&gt;9.8.8, 9.9.0-&gt;9.9.10-P1, 9.10.0-&gt;9.10.5-P1, 9.11.0-&gt;9.11.1-P1, 9.9.3-S1-&gt;9.9.10-S2, 9.10.5-S1-&gt;9.10.5-S2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3142/">CVE-2017-3142</cve>
	<bugzilla href="https://bugzilla.suse.com/1024130">SUSE bug 1024130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046554">SUSE bug 1046554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046555">SUSE bug 1046555</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3143</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3143" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3143" ref_url="https://www.suse.com/security/cve/CVE-2017-3143" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1737-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="TID7021041" ref_url="https://www.suse.com/support/kb/doc/?id=7021041" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1809-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00007.html" source="SUSE-SU"/>
    <description>
    An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BIND 9.4.0-&gt;9.8.8, 9.9.0-&gt;9.9.10-P1, 9.10.0-&gt;9.10.5-P1, 9.11.0-&gt;9.11.1-P1, 9.9.3-S1-&gt;9.9.10-S2, 9.10.5-S1-&gt;9.10.5-S2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-3143/">CVE-2017-3143</cve>
	<bugzilla href="https://bugzilla.suse.com/1024130">SUSE bug 1024130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046554">SUSE bug 1046554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046555">SUSE bug 1046555</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3144</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3144" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3144" ref_url="https://www.suse.com/security/cve/CVE-2017-3144" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0537-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00101.html" source="SUSE-SU"/>
    <description>
    A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-3144/">CVE-2017-3144</cve>
	<bugzilla href="https://bugzilla.suse.com/1076118">SUSE bug 1076118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076119">SUSE bug 1076119</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628411" comment="dhcp-4.3.5-6.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628412" comment="dhcp-client-4.3.5-6.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3145</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3145" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3145" ref_url="https://www.suse.com/security/cve/CVE-2017-3145" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0362-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00105.html" source="SUSE-SU"/>
    <description>
    BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3145/">CVE-2017-3145</cve>
	<bugzilla href="https://bugzilla.suse.com/1076118">SUSE bug 1076118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101131">SUSE bug 1101131</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177790">SUSE bug 1177790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3157</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3157" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3157" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3157" ref_url="https://www.suse.com/security/cve/CVE-2017-3157" source="SUSE CVE"/>
    <description>
    By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacker by, e.g., using hidden sections to store the information, tricking the user into saving the document and convincing the user to send the document back to the attacker. The vulnerability is mitigated by the need for the attacker to know the precise file path in the target system, and the need to trick the user into saving the document and sending it back.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3157/">CVE-2017-3157</cve>
	<bugzilla href="https://bugzilla.suse.com/1026640">SUSE bug 1026640</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3238</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3238" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3238" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3238" ref_url="https://www.suse.com/security/cve/CVE-2017-3238" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3238/">CVE-2017-3238</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020882">SUSE bug 1020882</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3243</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3243" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3243" ref_url="https://www.suse.com/security/cve/CVE-2017-3243" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3243/">CVE-2017-3243</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020891">SUSE bug 1020891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3244</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3244" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3244" ref_url="https://www.suse.com/security/cve/CVE-2017-3244" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3244/">CVE-2017-3244</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020877">SUSE bug 1020877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173257" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3257</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3257" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3257" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3257" ref_url="https://www.suse.com/security/cve/CVE-2017-3257" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3257/">CVE-2017-3257</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020878">SUSE bug 1020878</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3258</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3258" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3258" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3258" ref_url="https://www.suse.com/security/cve/CVE-2017-3258" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3258/">CVE-2017-3258</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020875">SUSE bug 1020875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3265</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3265" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3265" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3265" ref_url="https://www.suse.com/security/cve/CVE-2017-3265" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 5.6 (Confidentiality and Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3265/">CVE-2017-3265</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020885">SUSE bug 1020885</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3290</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3290" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3290" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3290" ref_url="https://www.suse.com/security/cve/CVE-2017-3290" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00004.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS v3.0 Base Score 7.9 (Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.9/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3290/">CVE-2017-3290</cve>
	<bugzilla href="https://bugzilla.suse.com/1020856">SUSE bug 1020856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3291</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3291" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3291" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3291" ref_url="https://www.suse.com/security/cve/CVE-2017-3291" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3291/">CVE-2017-3291</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020884">SUSE bug 1020884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998309">SUSE bug 998309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3302</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3302" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3302" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3302" ref_url="https://www.suse.com/security/cve/CVE-2017-3302" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1137-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1315-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1475-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00001.html" source="SUSE-SU"/>
    <description>
    Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3302/">CVE-2017-3302</cve>
	<bugzilla href="https://bugzilla.suse.com/1022428">SUSE bug 1022428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1034850">SUSE bug 1034850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1034911">SUSE bug 1034911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173308" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3308</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3308" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3308" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3308" ref_url="https://www.suse.com/security/cve/CVE-2017-3308" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1137-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2034-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00036.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3308/">CVE-2017-3308</cve>
	<bugzilla href="https://bugzilla.suse.com/1034850">SUSE bug 1034850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1048715">SUSE bug 1048715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3309</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3309" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3309" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3309" ref_url="https://www.suse.com/security/cve/CVE-2017-3309" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1137-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2034-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00036.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3309/">CVE-2017-3309</cve>
	<bugzilla href="https://bugzilla.suse.com/1034850">SUSE bug 1034850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1048715">SUSE bug 1048715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3312</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3312" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3312" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3312" ref_url="https://www.suse.com/security/cve/CVE-2017-3312" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3312/">CVE-2017-3312</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020873">SUSE bug 1020873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998309">SUSE bug 998309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3313</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3313" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3313" ref_url="https://www.suse.com/security/cve/CVE-2017-3313" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1315-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1475-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00001.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3313/">CVE-2017-3313</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020890">SUSE bug 1020890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1034911">SUSE bug 1034911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3316</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3316" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3316" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3316" ref_url="https://www.suse.com/security/cve/CVE-2017-3316" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00004.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS v3.0 Base Score 8.4 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.4/CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3316/">CVE-2017-3316</cve>
	<bugzilla href="https://bugzilla.suse.com/1020856">SUSE bug 1020856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3317</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3317" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3317" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3317" ref_url="https://www.suse.com/security/cve/CVE-2017-3317" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3317/">CVE-2017-3317</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020894">SUSE bug 1020894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173318" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3318</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3318" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3318" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3318" ref_url="https://www.suse.com/security/cve/CVE-2017-3318" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3318/">CVE-2017-3318</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020896">SUSE bug 1020896</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173332" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3332</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3332" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3332" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3332" ref_url="https://www.suse.com/security/cve/CVE-2017-3332" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00004.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: VirtualBox SVGA Emulation). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS v3.0 Base Score 8.4 (Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3332/">CVE-2017-3332</cve>
	<bugzilla href="https://bugzilla.suse.com/1020856">SUSE bug 1020856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173453" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3453</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3453" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3453" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3453" ref_url="https://www.suse.com/security/cve/CVE-2017-3453" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1137-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2034-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00036.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3453/">CVE-2017-3453</cve>
	<bugzilla href="https://bugzilla.suse.com/1034850">SUSE bug 1034850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1048715">SUSE bug 1048715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3456</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3456" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3456" ref_url="https://www.suse.com/security/cve/CVE-2017-3456" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1137-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2034-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00036.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3456/">CVE-2017-3456</cve>
	<bugzilla href="https://bugzilla.suse.com/1034850">SUSE bug 1034850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1048715">SUSE bug 1048715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3464</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3464" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3464" ref_url="https://www.suse.com/security/cve/CVE-2017-3464" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1137-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2034-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00036.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-3464/">CVE-2017-3464</cve>
	<bugzilla href="https://bugzilla.suse.com/1034850">SUSE bug 1034850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1048715">SUSE bug 1048715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3513</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3513" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3513" ref_url="https://www.suse.com/security/cve/CVE-2017-3513" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00002.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 2.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3513/">CVE-2017-3513</cve>
	<bugzilla href="https://bugzilla.suse.com/1034854">SUSE bug 1034854</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3538</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3538" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3538" ref_url="https://www.suse.com/security/cve/CVE-2017-3538" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00002.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported versions that are affected are Prior to 5.0.34 and Prior to 5.1.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-3538/">CVE-2017-3538</cve>
	<bugzilla href="https://bugzilla.suse.com/1034854">SUSE bug 1034854</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3558</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3558" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3558" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3558" ref_url="https://www.suse.com/security/cve/CVE-2017-3558" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00002.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-3558/">CVE-2017-3558</cve>
	<bugzilla href="https://bugzilla.suse.com/1034854">SUSE bug 1034854</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3559</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3559" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3559" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3559" ref_url="https://www.suse.com/security/cve/CVE-2017-3559" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00002.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.9/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-3559/">CVE-2017-3559</cve>
	<bugzilla href="https://bugzilla.suse.com/1034854">SUSE bug 1034854</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173561" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3561</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3561" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3561" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3561" ref_url="https://www.suse.com/security/cve/CVE-2017-3561" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00002.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3561/">CVE-2017-3561</cve>
	<bugzilla href="https://bugzilla.suse.com/1034854">SUSE bug 1034854</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3563</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3563" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3563" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3563" ref_url="https://www.suse.com/security/cve/CVE-2017-3563" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00002.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3563/">CVE-2017-3563</cve>
	<bugzilla href="https://bugzilla.suse.com/1034854">SUSE bug 1034854</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3575</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3575" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3575" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3575" ref_url="https://www.suse.com/security/cve/CVE-2017-3575" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00002.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.9/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3575/">CVE-2017-3575</cve>
	<bugzilla href="https://bugzilla.suse.com/1034854">SUSE bug 1034854</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3576</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3576" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3576" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3576" ref_url="https://www.suse.com/security/cve/CVE-2017-3576" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00002.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3576/">CVE-2017-3576</cve>
	<bugzilla href="https://bugzilla.suse.com/1034854">SUSE bug 1034854</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3587</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3587" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3587" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3587" ref_url="https://www.suse.com/security/cve/CVE-2017-3587" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00002.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3587/">CVE-2017-3587</cve>
	<bugzilla href="https://bugzilla.suse.com/1034854">SUSE bug 1034854</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3636</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3636" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3636" ref_url="https://www.suse.com/security/cve/CVE-2017-3636" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2290-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003596.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2011-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0088-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-3636/">CVE-2017-3636</cve>
	<bugzilla href="https://bugzilla.suse.com/1049399">SUSE bug 1049399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049422">SUSE bug 1049422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054591">SUSE bug 1054591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3641</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3641" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3641" ref_url="https://www.suse.com/security/cve/CVE-2017-3641" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2290-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003596.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2011-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0088-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3641/">CVE-2017-3641</cve>
	<bugzilla href="https://bugzilla.suse.com/1049404">SUSE bug 1049404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049422">SUSE bug 1049422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054591">SUSE bug 1054591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173653" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3653</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3653" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3653" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3653" ref_url="https://www.suse.com/security/cve/CVE-2017-3653" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2290-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003596.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2011-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0088-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-3653/">CVE-2017-3653</cve>
	<bugzilla href="https://bugzilla.suse.com/1049417">SUSE bug 1049417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049422">SUSE bug 1049422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054591">SUSE bug 1054591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3731</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3731" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3731" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3731" ref_url="https://www.suse.com/security/cve/CVE-2017-3731" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0431-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0481-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0487-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0941-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3731/">CVE-2017-3731</cve>
	<bugzilla href="https://bugzilla.suse.com/1021641">SUSE bug 1021641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1022085">SUSE bug 1022085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064118">SUSE bug 1064118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064119">SUSE bug 1064119</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3732</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3732" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3732" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3732" ref_url="https://www.suse.com/security/cve/CVE-2017-3732" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0431-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004658.html" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0481-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0941-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2011-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3732/">CVE-2017-3732</cve>
	<bugzilla href="https://bugzilla.suse.com/1021641">SUSE bug 1021641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1022086">SUSE bug 1022086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049418">SUSE bug 1049418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049421">SUSE bug 1049421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049422">SUSE bug 1049422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066242">SUSE bug 1066242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071906">SUSE bug 1071906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957814">SUSE bug 957814</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482336" comment="openssl-1.1.1d-1.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3733</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3733" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3733" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3733" ref_url="https://www.suse.com/security/cve/CVE-2017-3733" source="SUSE CVE"/>
    <description>
    During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 before 1.1.0e to crash (dependent on ciphersuite). Both clients and servers are affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3733/">CVE-2017-3733</cve>
	<bugzilla href="https://bugzilla.suse.com/1025661">SUSE bug 1025661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064200">SUSE bug 1064200</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3735</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3735" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3735" ref_url="https://www.suse.com/security/cve/CVE-2017-3735" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2968-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3169-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0002-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003558.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID7022367" ref_url="https://www.suse.com/support/kb/doc/?id=7022367" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3192-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0029-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0315-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00113.html" source="SUSE-SU"/>
    <description>
    While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-3735/">CVE-2017-3735</cve>
	<bugzilla href="https://bugzilla.suse.com/1056058">SUSE bug 1056058</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3736</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3736" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3736" ref_url="https://www.suse.com/security/cve/CVE-2017-3736" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3169-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0002-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003558.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7022367" ref_url="https://www.suse.com/support/kb/doc/?id=7022367" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3192-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0029-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0315-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00113.html" source="SUSE-SU"/>
    <description>
    There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-3736/">CVE-2017-3736</cve>
	<bugzilla href="https://bugzilla.suse.com/1066242">SUSE bug 1066242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071906">SUSE bug 1071906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076369">SUSE bug 1076369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957814">SUSE bug 957814</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3738</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3738" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3738" ref_url="https://www.suse.com/security/cve/CVE-2017-3738" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0002-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003558.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID7022464" ref_url="https://www.suse.com/support/kb/doc/?id=7022464" source="SUSE-SU"/>
		<reference ref_id="TID7022627" ref_url="https://www.suse.com/support/kb/doc/?id=7022627" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0029-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0315-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00113.html" source="SUSE-SU"/>
    <description>
    There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3738/">CVE-2017-3738</cve>
	<bugzilla href="https://bugzilla.suse.com/1071906">SUSE bug 1071906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097757">SUSE bug 1097757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175006" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5006</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5006" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5006" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5006" ref_url="https://www.suse.com/security/cve/CVE-2017-5006" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled object owner relationships, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5006/">CVE-2017-5006</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175007" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5007</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5007" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5007" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5007" ref_url="https://www.suse.com/security/cve/CVE-2017-5007" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of events when closing a page, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5007/">CVE-2017-5007</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175008" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5008</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5008" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5008" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5008" ref_url="https://www.suse.com/security/cve/CVE-2017-5008" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker controlled JavaScript to be run during the invocation of a private script method, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5008/">CVE-2017-5008</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5009</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5009" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5009" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5009" ref_url="https://www.suse.com/security/cve/CVE-2017-5009" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5009/">CVE-2017-5009</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5010</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5010" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5010" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5010" ref_url="https://www.suse.com/security/cve/CVE-2017-5010" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promises in an inappropriate context, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5010/">CVE-2017-5010</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5011</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5011" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5011" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5011" ref_url="https://www.suse.com/security/cve/CVE-2017-5011" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5011/">CVE-2017-5011</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5012</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5012" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5012" ref_url="https://www.suse.com/security/cve/CVE-2017-5012" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5012/">CVE-2017-5012</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5013</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5013" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5013" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5013" ref_url="https://www.suse.com/security/cve/CVE-2017-5013" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non-selected tabs, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5013/">CVE-2017-5013</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175014" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5014</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5014" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5014" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5014" ref_url="https://www.suse.com/security/cve/CVE-2017-5014" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-5014/">CVE-2017-5014</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175015" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5015</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5015" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5015" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5015" ref_url="https://www.suse.com/security/cve/CVE-2017-5015" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5015/">CVE-2017-5015</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175016" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5016</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5016" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5016" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5016" ref_url="https://www.suse.com/security/cve/CVE-2017-5016" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don't control via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5016/">CVE-2017-5016</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175017" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5017</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5017" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5017" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5017" ref_url="https://www.suse.com/security/cve/CVE-2017-5017" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extract image fragments on systems with GeForce 8600M graphics chips via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5017/">CVE-2017-5017</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175018" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5018</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5018" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5018" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5018" ref_url="https://www.suse.com/security/cve/CVE-2017-5018" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had an insufficiently strict content security policy on the Chrome app launcher page, which allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5018/">CVE-2017-5018</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5019</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5019" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5019" ref_url="https://www.suse.com/security/cve/CVE-2017-5019" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-5019/">CVE-2017-5019</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5020</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5020" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5020" ref_url="https://www.suse.com/security/cve/CVE-2017-5020" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to require a user gesture for powerful download operations, which allowed a remote attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5020/">CVE-2017-5020</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5021</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5021" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5021" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5021" ref_url="https://www.suse.com/security/cve/CVE-2017-5021" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-5021/">CVE-2017-5021</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5022</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5022" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5022" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5022" ref_url="https://www.suse.com/security/cve/CVE-2017-5022" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5022/">CVE-2017-5022</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175023" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5023</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5023" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5023" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5023" ref_url="https://www.suse.com/security/cve/CVE-2017-5023" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit a near null dereference via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-5023/">CVE-2017-5023</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5024</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5024" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5024" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5024" ref_url="https://www.suse.com/security/cve/CVE-2017-5024" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1531-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00030.html" source="SUSE-SU"/>
    <description>
    FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5024/">CVE-2017-5024</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5025</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5025" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5025" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5025" ref_url="https://www.suse.com/security/cve/CVE-2017-5025" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1531-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00030.html" source="SUSE-SU"/>
    <description>
    FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5025/">CVE-2017-5025</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5026</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5026" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5026" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5026" ref_url="https://www.suse.com/security/cve/CVE-2017-5026" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00043.html" source="SUSE-SU"/>
    <description>
    Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote attacker to show alerts on a page they don't control via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5026/">CVE-2017-5026</cve>
	<bugzilla href="https://bugzilla.suse.com/1022049">SUSE bug 1022049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5029</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5029" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5029" ref_url="https://www.suse.com/security/cve/CVE-2017-5029" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1390-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00079.html" source="SUSE-SU"/>
    <description>
    The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5029/">CVE-2017-5029</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035905">SUSE bug 1035905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123130">SUSE bug 1123130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482466" comment="libxslt-tools-1.1.32-3.8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155747" comment="libxslt-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482467" comment="libxslt1-1.1.32-3.8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155748" comment="libxslt1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5030</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5030" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5030" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5030" ref_url="https://www.suse.com/security/cve/CVE-2017-5030" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5030/">CVE-2017-5030</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5031</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5031" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5031" ref_url="https://www.suse.com/security/cve/CVE-2017-5031" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5031/">CVE-2017-5031</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5032</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5032" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5032" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5032" ref_url="https://www.suse.com/security/cve/CVE-2017-5032" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5032/">CVE-2017-5032</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175033" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5033</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5033" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5033" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5033" ref_url="https://www.suse.com/security/cve/CVE-2017-5033" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page, related to the unsafe-inline keyword.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5033/">CVE-2017-5033</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175034" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5034</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5034" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5034" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5034" ref_url="https://www.suse.com/security/cve/CVE-2017-5034" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5034/">CVE-2017-5034</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5035</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5035" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5035" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5035" ref_url="https://www.suse.com/security/cve/CVE-2017-5035" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5035/">CVE-2017-5035</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175036" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5036</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5036" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5036" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5036" ref_url="https://www.suse.com/security/cve/CVE-2017-5036" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to have an unspecified impact via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5036/">CVE-2017-5036</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5037</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5037" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5037" ref_url="https://www.suse.com/security/cve/CVE-2017-5037" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5037/">CVE-2017-5037</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5038</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5038" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5038" ref_url="https://www.suse.com/security/cve/CVE-2017-5038" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-5038/">CVE-2017-5038</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5039</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5039" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5039" ref_url="https://www.suse.com/security/cve/CVE-2017-5039" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5039/">CVE-2017-5039</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5040</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5040" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5040" ref_url="https://www.suse.com/security/cve/CVE-2017-5040" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5040/">CVE-2017-5040</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5041</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5041" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5041" ref_url="https://www.suse.com/security/cve/CVE-2017-5041" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5041/">CVE-2017-5041</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5042</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5042" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5042" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5042" ref_url="https://www.suse.com/security/cve/CVE-2017-5042" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5042/">CVE-2017-5042</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175043" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5043</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5043" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5043" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5043" ref_url="https://www.suse.com/security/cve/CVE-2017-5043" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5043/">CVE-2017-5043</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5044</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5044" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5044" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5044" ref_url="https://www.suse.com/security/cve/CVE-2017-5044" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-5044/">CVE-2017-5044</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5045</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5045" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5045" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5045" ref_url="https://www.suse.com/security/cve/CVE-2017-5045" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5045/">CVE-2017-5045</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175046" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5046</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5046" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5046" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5046" ref_url="https://www.suse.com/security/cve/CVE-2017-5046" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5046/">CVE-2017-5046</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5052</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5052" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5052" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5052" ref_url="https://www.suse.com/security/cve/CVE-2017-5052" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00003.html" source="SUSE-SU"/>
    <description>
    An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page that triggers improper casting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5052/">CVE-2017-5052</cve>
	<bugzilla href="https://bugzilla.suse.com/1031677">SUSE bug 1031677</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5053</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5053" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5053" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5053" ref_url="https://www.suse.com/security/cve/CVE-2017-5053" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00003.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to Array.prototype.indexOf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5053/">CVE-2017-5053</cve>
	<bugzilla href="https://bugzilla.suse.com/1031677">SUSE bug 1031677</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5054</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5054" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5054" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5054" ref_url="https://www.suse.com/security/cve/CVE-2017-5054" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00003.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to obtain heap memory contents via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5054/">CVE-2017-5054</cve>
	<bugzilla href="https://bugzilla.suse.com/1031677">SUSE bug 1031677</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5055</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5055" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5055" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5055" ref_url="https://www.suse.com/security/cve/CVE-2017-5055" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00003.html" source="SUSE-SU"/>
    <description>
    A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5055/">CVE-2017-5055</cve>
	<bugzilla href="https://bugzilla.suse.com/1031677">SUSE bug 1031677</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5056</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5056" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5056" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5056" ref_url="https://www.suse.com/security/cve/CVE-2017-5056" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00003.html" source="SUSE-SU"/>
    <description>
    A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5056/">CVE-2017-5056</cve>
	<bugzilla href="https://bugzilla.suse.com/1031677">SUSE bug 1031677</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175057" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5057</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5057" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5057" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5057" ref_url="https://www.suse.com/security/cve/CVE-2017-5057" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00030.html" source="SUSE-SU"/>
    <description>
    Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5057/">CVE-2017-5057</cve>
	<bugzilla href="https://bugzilla.suse.com/1035103">SUSE bug 1035103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175058" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5058</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5058" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5058" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5058" ref_url="https://www.suse.com/security/cve/CVE-2017-5058" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00030.html" source="SUSE-SU"/>
    <description>
    A use after free in PrintPreview in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5058/">CVE-2017-5058</cve>
	<bugzilla href="https://bugzilla.suse.com/1035103">SUSE bug 1035103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175059" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5059</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5059" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5059" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5059" ref_url="https://www.suse.com/security/cve/CVE-2017-5059" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00030.html" source="SUSE-SU"/>
    <description>
    Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to potentially obtain code execution via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5059/">CVE-2017-5059</cve>
	<bugzilla href="https://bugzilla.suse.com/1035103">SUSE bug 1035103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175060" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5060</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5060" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5060" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5060" ref_url="https://www.suse.com/security/cve/CVE-2017-5060" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00030.html" source="SUSE-SU"/>
    <description>
    Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5060/">CVE-2017-5060</cve>
	<bugzilla href="https://bugzilla.suse.com/1035103">SUSE bug 1035103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175061" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5061</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5061" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5061" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5061" ref_url="https://www.suse.com/security/cve/CVE-2017-5061" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00030.html" source="SUSE-SU"/>
    <description>
    A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5061/">CVE-2017-5061</cve>
	<bugzilla href="https://bugzilla.suse.com/1035103">SUSE bug 1035103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5062</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5062" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5062" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5062" ref_url="https://www.suse.com/security/cve/CVE-2017-5062" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00030.html" source="SUSE-SU"/>
    <description>
    A use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to potentially perform out of bounds memory access via a crafted Chrome extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5062/">CVE-2017-5062</cve>
	<bugzilla href="https://bugzilla.suse.com/1035103">SUSE bug 1035103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5063</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5063" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5063" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5063" ref_url="https://www.suse.com/security/cve/CVE-2017-5063" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00030.html" source="SUSE-SU"/>
    <description>
    A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-5063/">CVE-2017-5063</cve>
	<bugzilla href="https://bugzilla.suse.com/1035103">SUSE bug 1035103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5064</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5064" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5064" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5064" ref_url="https://www.suse.com/security/cve/CVE-2017-5064" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00030.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5064/">CVE-2017-5064</cve>
	<bugzilla href="https://bugzilla.suse.com/1035103">SUSE bug 1035103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5065</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5065" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5065" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5065" ref_url="https://www.suse.com/security/cve/CVE-2017-5065" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00030.html" source="SUSE-SU"/>
    <description>
    Lack of an appropriate action on page navigation in Blink in Google Chrome prior to 58.0.3029.81 for Windows and Mac allowed a remote attacker to potentially confuse a user into making an incorrect security decision via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5065/">CVE-2017-5065</cve>
	<bugzilla href="https://bugzilla.suse.com/1035103">SUSE bug 1035103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5066</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5066" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5066" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5066" ref_url="https://www.suse.com/security/cve/CVE-2017-5066" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00030.html" source="SUSE-SU"/>
    <description>
    Insufficient consistency checks in signature handling in the networking stack in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to incorrectly accept a badly formed X.509 certificate via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5066/">CVE-2017-5066</cve>
	<bugzilla href="https://bugzilla.suse.com/1035103">SUSE bug 1035103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5067</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5067" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5067" ref_url="https://www.suse.com/security/cve/CVE-2017-5067" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00030.html" source="SUSE-SU"/>
    <description>
    An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5067/">CVE-2017-5067</cve>
	<bugzilla href="https://bugzilla.suse.com/1035103">SUSE bug 1035103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5068</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5068" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5068" ref_url="https://www.suse.com/security/cve/CVE-2017-5068" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1190-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00013.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to trigger a race condition via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5068/">CVE-2017-5068</cve>
	<bugzilla href="https://bugzilla.suse.com/1037594">SUSE bug 1037594</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5069</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5069" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5069" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5069" ref_url="https://www.suse.com/security/cve/CVE-2017-5069" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00030.html" source="SUSE-SU"/>
    <description>
    Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5069/">CVE-2017-5069</cve>
	<bugzilla href="https://bugzilla.suse.com/1035103">SUSE bug 1035103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5070</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5070" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5070" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5070" ref_url="https://www.suse.com/security/cve/CVE-2017-5070" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5070/">CVE-2017-5070</cve>
	<bugzilla href="https://bugzilla.suse.com/1042833">SUSE bug 1042833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5071</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5071" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5071" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5071" ref_url="https://www.suse.com/security/cve/CVE-2017-5071" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-5071/">CVE-2017-5071</cve>
	<bugzilla href="https://bugzilla.suse.com/1042833">SUSE bug 1042833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5072</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5072" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5072" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5072" ref_url="https://www.suse.com/security/cve/CVE-2017-5072" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to perform domain spoofing with RTL characters via a crafted URL page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5072/">CVE-2017-5072</cve>
	<bugzilla href="https://bugzilla.suse.com/1042833">SUSE bug 1042833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5073</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5073" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5073" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5073" ref_url="https://www.suse.com/security/cve/CVE-2017-5073" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5073/">CVE-2017-5073</cve>
	<bugzilla href="https://bugzilla.suse.com/1042833">SUSE bug 1042833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5074</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5074" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5074" ref_url="https://www.suse.com/security/cve/CVE-2017-5074" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00004.html" source="SUSE-SU"/>
    <description>
    A use after free in Chrome Apps in Google Chrome prior to 59.0.3071.86 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, related to Bluetooth.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5074/">CVE-2017-5074</cve>
	<bugzilla href="https://bugzilla.suse.com/1042833">SUSE bug 1042833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5075</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5075" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5075" ref_url="https://www.suse.com/security/cve/CVE-2017-5075" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to obtain the value of url fragments via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5075/">CVE-2017-5075</cve>
	<bugzilla href="https://bugzilla.suse.com/1042833">SUSE bug 1042833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5076</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5076" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5076" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5076" ref_url="https://www.suse.com/security/cve/CVE-2017-5076" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5076/">CVE-2017-5076</cve>
	<bugzilla href="https://bugzilla.suse.com/1042833">SUSE bug 1042833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5077</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5077" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5077" ref_url="https://www.suse.com/security/cve/CVE-2017-5077" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5077/">CVE-2017-5077</cve>
	<bugzilla href="https://bugzilla.suse.com/1042833">SUSE bug 1042833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5078</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5078" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5078" ref_url="https://www.suse.com/security/cve/CVE-2017-5078" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform command injection via a crafted HTML page, a similar issue to CVE-2004-0121. For example, characters such as * have an incorrect interaction with xdg-email in xdg-utils, and a space character can be used in front of a command-line argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5078/">CVE-2017-5078</cve>
	<bugzilla href="https://bugzilla.suse.com/1042833">SUSE bug 1042833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5079</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5079" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5079" ref_url="https://www.suse.com/security/cve/CVE-2017-5079" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5079/">CVE-2017-5079</cve>
	<bugzilla href="https://bugzilla.suse.com/1042833">SUSE bug 1042833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5080</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5080" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5080" ref_url="https://www.suse.com/security/cve/CVE-2017-5080" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00004.html" source="SUSE-SU"/>
    <description>
    A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5080/">CVE-2017-5080</cve>
	<bugzilla href="https://bugzilla.suse.com/1042833">SUSE bug 1042833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5081</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5081" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5081" ref_url="https://www.suse.com/security/cve/CVE-2017-5081" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5081/">CVE-2017-5081</cve>
	<bugzilla href="https://bugzilla.suse.com/1042833">SUSE bug 1042833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175082" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5082</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5082" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5082" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5082" ref_url="https://www.suse.com/security/cve/CVE-2017-5082" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for Android allowed a local attacker to take screen shots of credit card information via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5082/">CVE-2017-5082</cve>
	<bugzilla href="https://bugzilla.suse.com/1042833">SUSE bug 1042833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5083</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5083" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5083" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5083" ref_url="https://www.suse.com/security/cve/CVE-2017-5083" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5083/">CVE-2017-5083</cve>
	<bugzilla href="https://bugzilla.suse.com/1042833">SUSE bug 1042833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175085" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5085</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5085" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5085" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5085" ref_url="https://www.suse.com/security/cve/CVE-2017-5085" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Bookmarks in Google Chrome prior to 59 for iOS allowed a remote attacker who convinced the user to perform certain operations to run JavaScript on chrome:// pages via a crafted bookmark.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5085/">CVE-2017-5085</cve>
	<bugzilla href="https://bugzilla.suse.com/1042833">SUSE bug 1042833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175086" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5086</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5086" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5086" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5086" ref_url="https://www.suse.com/security/cve/CVE-2017-5086" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5086/">CVE-2017-5086</cve>
	<bugzilla href="https://bugzilla.suse.com/1042833">SUSE bug 1042833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5087</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5087" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5087" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5087" ref_url="https://www.suse.com/security/cve/CVE-2017-5087" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1591-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1593-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00060.html" source="SUSE-SU"/>
    <description>
    A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, aka an IndexedDB sandbox escape.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5087/">CVE-2017-5087</cve>
	<bugzilla href="https://bugzilla.suse.com/1044690">SUSE bug 1044690</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5088</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5088" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5088" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5088" ref_url="https://www.suse.com/security/cve/CVE-2017-5088" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1591-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1593-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00060.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5088/">CVE-2017-5088</cve>
	<bugzilla href="https://bugzilla.suse.com/1044690">SUSE bug 1044690</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5089</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5089" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5089" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5089" ref_url="https://www.suse.com/security/cve/CVE-2017-5089" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1591-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1593-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00060.html" source="SUSE-SU"/>
    <description>
    Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.104 for Mac allowed a remote attacker to perform domain spoofing via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5089/">CVE-2017-5089</cve>
	<bugzilla href="https://bugzilla.suse.com/1044690">SUSE bug 1044690</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175091" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5091</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5091" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5091" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5091" ref_url="https://www.suse.com/security/cve/CVE-2017-5091" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5091/">CVE-2017-5091</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5092</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5092" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5092" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5092" ref_url="https://www.suse.com/security/cve/CVE-2017-5092" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5092/">CVE-2017-5092</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5093</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5093" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5093" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5093" ref_url="https://www.suse.com/security/cve/CVE-2017-5093" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to prevent a full screen warning from being displayed via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5093/">CVE-2017-5093</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5094</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5094" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5094" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5094" ref_url="https://www.suse.com/security/cve/CVE-2017-5094" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5094/">CVE-2017-5094</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5095</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5095" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5095" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5095" ref_url="https://www.suse.com/security/cve/CVE-2017-5095" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5095/">CVE-2017-5095</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175096" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5096</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5096" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5096" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5096" ref_url="https://www.suse.com/security/cve/CVE-2017-5096" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement during navigation between different schemes in Google Chrome prior to 60.0.3112.78 for Android allowed a remote attacker to perform cross origin content download via a crafted HTML page, related to intents.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5096/">CVE-2017-5096</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5097</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5097" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5097" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5097" ref_url="https://www.suse.com/security/cve/CVE-2017-5097" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5097/">CVE-2017-5097</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5098</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5098" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5098" ref_url="https://www.suse.com/security/cve/CVE-2017-5098" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5098/">CVE-2017-5098</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5099</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5099" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5099" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5099" ref_url="https://www.suse.com/security/cve/CVE-2017-5099" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5099/">CVE-2017-5099</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175100" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5100</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5100" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5100" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5100" ref_url="https://www.suse.com/security/cve/CVE-2017-5100" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5100/">CVE-2017-5100</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5101</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5101" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5101" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5101" ref_url="https://www.suse.com/security/cve/CVE-2017-5101" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5101/">CVE-2017-5101</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175102" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5102</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5102" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5102" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5102" ref_url="https://www.suse.com/security/cve/CVE-2017-5102" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5102/">CVE-2017-5102</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5103</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5103" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5103" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5103" ref_url="https://www.suse.com/security/cve/CVE-2017-5103" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5103/">CVE-2017-5103</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5104</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5104" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5104" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5104" ref_url="https://www.suse.com/security/cve/CVE-2017-5104" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5104/">CVE-2017-5104</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5105</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5105" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5105" ref_url="https://www.suse.com/security/cve/CVE-2017-5105" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5105/">CVE-2017-5105</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5106</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5106" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5106" ref_url="https://www.suse.com/security/cve/CVE-2017-5106" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5106/">CVE-2017-5106</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5107</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5107" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5107" ref_url="https://www.suse.com/security/cve/CVE-2017-5107" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5107/">CVE-2017-5107</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5108</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5108" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5108" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5108" ref_url="https://www.suse.com/security/cve/CVE-2017-5108" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5108/">CVE-2017-5108</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5109</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5109" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5109" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5109" ref_url="https://www.suse.com/security/cve/CVE-2017-5109" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5109/">CVE-2017-5109</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5110</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5110" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5110" ref_url="https://www.suse.com/security/cve/CVE-2017-5110" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5110/">CVE-2017-5110</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5111</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5111" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5111" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5111" ref_url="https://www.suse.com/security/cve/CVE-2017-5111" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2491-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00055.html" source="SUSE-SU"/>
    <description>
    A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5111/">CVE-2017-5111</cve>
	<bugzilla href="https://bugzilla.suse.com/1057364">SUSE bug 1057364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5112</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5112" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5112" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5112" ref_url="https://www.suse.com/security/cve/CVE-2017-5112" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2491-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00055.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5112/">CVE-2017-5112</cve>
	<bugzilla href="https://bugzilla.suse.com/1057364">SUSE bug 1057364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5113</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5113" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5113" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5113" ref_url="https://www.suse.com/security/cve/CVE-2017-5113" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2491-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00055.html" source="SUSE-SU"/>
    <description>
    Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5113/">CVE-2017-5113</cve>
	<bugzilla href="https://bugzilla.suse.com/1057364">SUSE bug 1057364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5114</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5114" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5114" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5114" ref_url="https://www.suse.com/security/cve/CVE-2017-5114" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2491-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00055.html" source="SUSE-SU"/>
    <description>
    Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5114/">CVE-2017-5114</cve>
	<bugzilla href="https://bugzilla.suse.com/1057364">SUSE bug 1057364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175115" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5115</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5115" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5115" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5115" ref_url="https://www.suse.com/security/cve/CVE-2017-5115" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2491-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00055.html" source="SUSE-SU"/>
    <description>
    Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5115/">CVE-2017-5115</cve>
	<bugzilla href="https://bugzilla.suse.com/1057364">SUSE bug 1057364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5116</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5116" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5116" ref_url="https://www.suse.com/security/cve/CVE-2017-5116" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2491-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00055.html" source="SUSE-SU"/>
    <description>
    Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5116/">CVE-2017-5116</cve>
	<bugzilla href="https://bugzilla.suse.com/1057364">SUSE bug 1057364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5117</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5117" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5117" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5117" ref_url="https://www.suse.com/security/cve/CVE-2017-5117" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2491-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00055.html" source="SUSE-SU"/>
    <description>
    Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5117/">CVE-2017-5117</cve>
	<bugzilla href="https://bugzilla.suse.com/1057364">SUSE bug 1057364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5118</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5118" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5118" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5118" ref_url="https://www.suse.com/security/cve/CVE-2017-5118" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2491-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00055.html" source="SUSE-SU"/>
    <description>
    Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correctly propagate CSP restrictions to javascript scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5118/">CVE-2017-5118</cve>
	<bugzilla href="https://bugzilla.suse.com/1057364">SUSE bug 1057364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5119</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5119" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5119" ref_url="https://www.suse.com/security/cve/CVE-2017-5119" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2491-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00055.html" source="SUSE-SU"/>
    <description>
    Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5119/">CVE-2017-5119</cve>
	<bugzilla href="https://bugzilla.suse.com/1057364">SUSE bug 1057364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5120</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5120" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5120" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5120" ref_url="https://www.suse.com/security/cve/CVE-2017-5120" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2491-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00055.html" source="SUSE-SU"/>
    <description>
    Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial "www." substring).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5120/">CVE-2017-5120</cve>
	<bugzilla href="https://bugzilla.suse.com/1057364">SUSE bug 1057364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5121</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5121" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5121" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5121" ref_url="https://www.suse.com/security/cve/CVE-2017-5121" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2557-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2558-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00098.html" source="SUSE-SU"/>
    <description>
    Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to the escape analysis phase.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5121/">CVE-2017-5121</cve>
	<bugzilla href="https://bugzilla.suse.com/1060019">SUSE bug 1060019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060020">SUSE bug 1060020</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175122" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5122</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5122" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5122" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5122" ref_url="https://www.suse.com/security/cve/CVE-2017-5122" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2557-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2558-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00098.html" source="SUSE-SU"/>
    <description>
    Inappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for Windows allowed a remote attacker to trigger out-of-bounds access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5122/">CVE-2017-5122</cve>
	<bugzilla href="https://bugzilla.suse.com/1060019">SUSE bug 1060019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060020">SUSE bug 1060020</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175124" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5124</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5124" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5124" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5124" ref_url="https://www.suse.com/security/cve/CVE-2017-5124" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5124/">CVE-2017-5124</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5125</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5125" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5125" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5125" ref_url="https://www.suse.com/security/cve/CVE-2017-5125" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5125/">CVE-2017-5125</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5126" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5126" ref_url="https://www.suse.com/security/cve/CVE-2017-5126" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5126/">CVE-2017-5126</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5127</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5127" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5127" ref_url="https://www.suse.com/security/cve/CVE-2017-5127" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5127/">CVE-2017-5127</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5128</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5128" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5128" ref_url="https://www.suse.com/security/cve/CVE-2017-5128" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, related to WebGL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5128/">CVE-2017-5128</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5129</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5129" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5129" ref_url="https://www.suse.com/security/cve/CVE-2017-5129" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5129/">CVE-2017-5129</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5130</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5130" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5130" ref_url="https://www.suse.com/security/cve/CVE-2017-5130" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003715.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003716.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0418-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00036.html" source="SUSE-SU"/>
    <description>
    An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5130/">CVE-2017-5130</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078806">SUSE bug 1078806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123129">SUSE bug 1123129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5131</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5131" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5131" ref_url="https://www.suse.com/security/cve/CVE-2017-5131" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5131/">CVE-2017-5131</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5132</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5132" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5132" ref_url="https://www.suse.com/security/cve/CVE-2017-5132" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka incorrect WebAssembly stack manipulation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5132/">CVE-2017-5132</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5133</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5133" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5133" ref_url="https://www.suse.com/security/cve/CVE-2017-5133" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and potentially execute code via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5133/">CVE-2017-5133</cve>
	<bugzilla href="https://bugzilla.suse.com/1064066">SUSE bug 1064066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064089">SUSE bug 1064089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5209</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5209" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5209" ref_url="https://www.suse.com/security/cve/CVE-2017-5209" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002908.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0428-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0528-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00094.html" source="SUSE-SU"/>
    <description>
    The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5209/">CVE-2017-5209</cve>
	<bugzilla href="https://bugzilla.suse.com/1019531">SUSE bug 1019531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021610">SUSE bug 1021610</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5225</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5225" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5225" ref_url="https://www.suse.com/security/cve/CVE-2017-5225" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002639.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0512-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00091.html" source="SUSE-SU"/>
    <description>
    LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5225/">CVE-2017-5225</cve>
	<bugzilla href="https://bugzilla.suse.com/1019611">SUSE bug 1019611</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5226</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5226" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5226" ref_url="https://www.suse.com/security/cve/CVE-2017-5226" source="SUSE CVE"/>
    <description>
    When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the sandbox.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5226/">CVE-2017-5226</cve>
	<bugzilla href="https://bugzilla.suse.com/1130637">SUSE bug 1130637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173998">SUSE bug 1173998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174073">SUSE bug 1174073</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481773" comment="bubblewrap-0.4.1-1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177243" comment="bubblewrap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629101" comment="flatpak-1.10.2-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171006" comment="flatpak is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629104" comment="libflatpak0-1.10.2-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171009" comment="libflatpak0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629105" comment="system-user-flatpak-1.10.2-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009350838" comment="system-user-flatpak is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5338</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5338" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5338" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5338" ref_url="https://www.suse.com/security/cve/CVE-2017-5338" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00072.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2017-5338/">CVE-2017-5338</cve>
	<bugzilla href="https://bugzilla.suse.com/1019037">SUSE bug 1019037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175339" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5339</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5339" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5339" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5339" ref_url="https://www.suse.com/security/cve/CVE-2017-5339" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00072.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2017-5339/">CVE-2017-5339</cve>
	<bugzilla href="https://bugzilla.suse.com/1019037">SUSE bug 1019037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5373</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5373" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5373" ref_url="https://www.suse.com/security/cve/CVE-2017-5373" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 45.7, Firefox ESR &lt; 45.7, and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5373/">CVE-2017-5373</cve>
	<bugzilla href="https://bugzilla.suse.com/1021824">SUSE bug 1021824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5374</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5374" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5374" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5374" ref_url="https://www.suse.com/security/cve/CVE-2017-5374" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 50.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5374/">CVE-2017-5374</cve>
	<bugzilla href="https://bugzilla.suse.com/1021841">SUSE bug 1021841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5375</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5375" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5375" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5375" ref_url="https://www.suse.com/security/cve/CVE-2017-5375" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird &lt; 45.7, Firefox ESR &lt; 45.7, and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5375/">CVE-2017-5375</cve>
	<bugzilla href="https://bugzilla.suse.com/1021814">SUSE bug 1021814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5376</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5376" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5376" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5376" ref_url="https://www.suse.com/security/cve/CVE-2017-5376" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird &lt; 45.7, Firefox ESR &lt; 45.7, and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5376/">CVE-2017-5376</cve>
	<bugzilla href="https://bugzilla.suse.com/1021817">SUSE bug 1021817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5377</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5377" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5377" ref_url="https://www.suse.com/security/cve/CVE-2017-5377" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potentially exploitable crash. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5377/">CVE-2017-5377</cve>
	<bugzilla href="https://bugzilla.suse.com/1021826">SUSE bug 1021826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5378</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5378" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5378" ref_url="https://www.suse.com/security/cve/CVE-2017-5378" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered through hash codes, and also allows for data leakage of an object's content using these hash codes. This vulnerability affects Thunderbird &lt; 45.7, Firefox ESR &lt; 45.7, and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5378/">CVE-2017-5378</cve>
	<bugzilla href="https://bugzilla.suse.com/1021818">SUSE bug 1021818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5379</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5379" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5379" ref_url="https://www.suse.com/security/cve/CVE-2017-5379" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Web Animations when interacting with cycle collection found through fuzzing. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5379/">CVE-2017-5379</cve>
	<bugzilla href="https://bugzilla.suse.com/1021827">SUSE bug 1021827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5380</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5380" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5380" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5380" ref_url="https://www.suse.com/security/cve/CVE-2017-5380" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    A potential use-after-free found through fuzzing during DOM manipulation of SVG content. This vulnerability affects Thunderbird &lt; 45.7, Firefox ESR &lt; 45.7, and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5380/">CVE-2017-5380</cve>
	<bugzilla href="https://bugzilla.suse.com/1021819">SUSE bug 1021819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5381</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5381" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5381" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5381" ref_url="https://www.suse.com/security/cve/CVE-2017-5381" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The "export" function in the Certificate Viewer can force local filesystem navigation when the "common name" in a certificate contains slashes, allowing certificate content to be saved in unsafe locations with an arbitrary filename. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5381/">CVE-2017-5381</cve>
	<bugzilla href="https://bugzilla.suse.com/1021830">SUSE bug 1021830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5382</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5382" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5382" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5382" ref_url="https://www.suse.com/security/cve/CVE-2017-5382" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal information not meant to be seen by web content. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5382/">CVE-2017-5382</cve>
	<bugzilla href="https://bugzilla.suse.com/1021831">SUSE bug 1021831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5383</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5383" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5383" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5383" ref_url="https://www.suse.com/security/cve/CVE-2017-5383" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks in the location bar. This vulnerability affects Thunderbird &lt; 45.7, Firefox ESR &lt; 45.7, and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5383/">CVE-2017-5383</cve>
	<bugzilla href="https://bugzilla.suse.com/1021822">SUSE bug 1021822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5384</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5384" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5384" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5384" ref_url="https://www.suse.com/security/cve/CVE-2017-5384" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Proxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with the full URL path which exposes more information than would be sent to the proxy itself in the case of HTTPS. Normally the Proxy Auto-Config file is specified by the user or machine owner and presumed to be non-malicious, but if a user has enabled Web Proxy Auto Detect (WPAD) this file can be served remotely. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5384/">CVE-2017-5384</cve>
	<bugzilla href="https://bugzilla.suse.com/1021832">SUSE bug 1021832</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5385</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5385" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5385" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5385" ref_url="https://www.suse.com/security/cve/CVE-2017-5385" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Data sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will ignore the referrer-policy response header, leading to potential information disclosure for sites using this header. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5385/">CVE-2017-5385</cve>
	<bugzilla href="https://bugzilla.suse.com/1021833">SUSE bug 1021833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5386</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5386" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5386" ref_url="https://www.suse.com/security/cve/CVE-2017-5386" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol, leading to potential data disclosure or privilege escalation in affected extensions. This vulnerability affects Firefox ESR &lt; 45.7 and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-5386/">CVE-2017-5386</cve>
	<bugzilla href="https://bugzilla.suse.com/1021823">SUSE bug 1021823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5387</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5387" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5387" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5387" ref_url="https://www.suse.com/security/cve/CVE-2017-5387" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The existence of a specifically requested local file can be found due to the double firing of the "onerror" when the "source" attribute on a "&lt;track&gt;" tag refers to a file that does not exist if the source page is loaded locally. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5387/">CVE-2017-5387</cve>
	<bugzilla href="https://bugzilla.suse.com/1021839">SUSE bug 1021839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5388</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5388" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5388" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5388" ref_url="https://www.suse.com/security/cve/CVE-2017-5388" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used to send large STUN packets in a short period of time due to a lack of rate limiting being applied on e10s systems, allowing for a denial of service attack. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5388/">CVE-2017-5388</cve>
	<bugzilla href="https://bugzilla.suse.com/1021840">SUSE bug 1021840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5389</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5389" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5389" ref_url="https://www.suse.com/security/cve/CVE-2017-5389" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    WebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the appropriate permissions and then using host requests to redirect script loads to a malicious site. This allows a malicious extension to then install additional extensions without explicit user permission. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5389/">CVE-2017-5389</cve>
	<bugzilla href="https://bugzilla.suse.com/1021828">SUSE bug 1021828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5390</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5390" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5390" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5390" ref_url="https://www.suse.com/security/cve/CVE-2017-5390" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing JSON or HTTP headers data, allowing for potential privilege escalation. This vulnerability affects Thunderbird &lt; 45.7, Firefox ESR &lt; 45.7, and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5390/">CVE-2017-5390</cve>
	<bugzilla href="https://bugzilla.suse.com/1021820">SUSE bug 1021820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5391</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5391" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5391" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5391" ref_url="https://www.suse.com/security/cve/CVE-2017-5391" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potential privilege escalation. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5391/">CVE-2017-5391</cve>
	<bugzilla href="https://bugzilla.suse.com/1021835">SUSE bug 1021835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5392</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5392" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5392" ref_url="https://www.suse.com/security/cve/CVE-2017-5392" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Weak proxy objects have weak references on multiple threads when they should only have them on one, resulting in incorrect memory usage and corruption, which leads to potentially exploitable crashes. Note: This issue only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5392/">CVE-2017-5392</cve>
	<bugzilla href="https://bugzilla.suse.com/1021836">SUSE bug 1021836</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5393</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5393" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5393" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5393" ref_url="https://www.suse.com/security/cve/CVE-2017-5393" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla.org, a publicly accessible site. This could allow malicious extensions to install additional extensions from the CDN in combination with an XSS attack on Mozilla AMO sites. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5393/">CVE-2017-5393</cve>
	<bugzilla href="https://bugzilla.suse.com/1021837">SUSE bug 1021837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175394" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5394</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5394" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5394" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5394" ref_url="https://www.suse.com/security/cve/CVE-2017-5394" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    A location bar spoofing attack where the location bar of loaded page will be shown over the content of another tab due to a series of JavaScript events combined with fullscreen mode. Note: This issue only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5394/">CVE-2017-5394</cve>
	<bugzilla href="https://bugzilla.suse.com/1021834">SUSE bug 1021834</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5395</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5395" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5395" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5395" ref_url="https://www.suse.com/security/cve/CVE-2017-5395" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Malicious sites can display a spoofed location bar on a subsequently loaded page when the existing location bar on the new page is scrolled out of view if navigations between pages can be timed correctly. Note: This issue only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5395/">CVE-2017-5395</cve>
	<bugzilla href="https://bugzilla.suse.com/1021838">SUSE bug 1021838</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5396</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5396" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5396" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5396" ref_url="https://www.suse.com/security/cve/CVE-2017-5396" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are freed from memory. This vulnerability affects Thunderbird &lt; 45.7, Firefox ESR &lt; 45.7, and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5396/">CVE-2017-5396</cve>
	<bugzilla href="https://bugzilla.suse.com/1021821">SUSE bug 1021821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175398" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5398</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5398" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5398" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5398" ref_url="https://www.suse.com/security/cve/CVE-2017-5398" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5398/">CVE-2017-5398</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5399</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5399" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5399" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5399" ref_url="https://www.suse.com/security/cve/CVE-2017-5399" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5399/">CVE-2017-5399</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175400" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5400</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5400" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5400" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5400" ref_url="https://www.suse.com/security/cve/CVE-2017-5400" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5400/">CVE-2017-5400</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5401</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5401" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5401" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5401" ref_url="https://www.suse.com/security/cve/CVE-2017-5401" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5401/">CVE-2017-5401</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5402</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5402" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5402" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5402" ref_url="https://www.suse.com/security/cve/CVE-2017-5402" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts. This results in a potentially exploitable crash. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5402/">CVE-2017-5402</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175403" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5403</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5403" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5403" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5403" ref_url="https://www.suse.com/security/cve/CVE-2017-5403" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a use-after-free, resulting in a potentially exploitable crash. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5403/">CVE-2017-5403</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175404" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5404</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5404" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5404" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5404" ref_url="https://www.suse.com/security/cve/CVE-2017-5404" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results in a potentially exploitable crash. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5404/">CVE-2017-5404</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5405</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5405" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5405" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5405" ref_url="https://www.suse.com/security/cve/CVE-2017-5405" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5405/">CVE-2017-5405</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175406" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5406</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5406" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5406" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5406" ref_url="https://www.suse.com/security/cve/CVE-2017-5406" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip intersection and empty masks. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5406/">CVE-2017-5406</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5407</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5407" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5407" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5407" ref_url="https://www.suse.com/security/cve/CVE-2017-5407" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and leads to information disclosure. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5407/">CVE-2017-5407</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5408</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5408" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5408" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5408" ref_url="https://www.suse.com/security/cve/CVE-2017-5408" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5408/">CVE-2017-5408</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5410</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5410" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5410" ref_url="https://www.suse.com/security/cve/CVE-2017-5410" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is managed for memory cleanup. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5410/">CVE-2017-5410</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5412</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5412" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5412" ref_url="https://www.suse.com/security/cve/CVE-2017-5412" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A buffer overflow read during SVG filter color value operations, resulting in data exposure. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5412/">CVE-2017-5412</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175413" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5413</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5413" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5413" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5413" ref_url="https://www.suse.com/security/cve/CVE-2017-5413" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A segmentation fault can occur during some bidirectional layout operations. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5413/">CVE-2017-5413</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175414" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5414</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5414" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5414" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5414" ref_url="https://www.suse.com/security/cve/CVE-2017-5414" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    The file picker dialog can choose and display the wrong local default directory when instantiated. On some operating systems, this can lead to information disclosure, such as the operating system or the local account name. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5414/">CVE-2017-5414</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5415</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5415" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5415" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5415" ref_url="https://www.suse.com/security/cve/CVE-2017-5415" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
    <description>
    An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leading to user confusion and further spoofing attacks. This vulnerability affects Firefox &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5415/">CVE-2017-5415</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5416</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5416" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5416" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5416" ref_url="https://www.suse.com/security/cve/CVE-2017-5416" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    In certain circumstances a networking event listener can be prematurely released. This appears to result in a null dereference in practice. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5416/">CVE-2017-5416</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5417</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5417" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5417" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5417" ref_url="https://www.suse.com/security/cve/CVE-2017-5417" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
    <description>
    When dragging content from the primary browser pane to the addressbar on a malicious site, it is possible to change the addressbar so that the displayed location following navigation does not match the URL of the newly loaded page. This allows for spoofing attacks. This vulnerability affects Firefox &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5417/">CVE-2017-5417</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5418</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5418" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5418" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5418" ref_url="https://www.suse.com/security/cve/CVE-2017-5418" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    An out of bounds read error occurs when parsing some HTTP digest authorization responses, resulting in information leakage through the reading of random memory containing matches to specifically set patterns. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5418/">CVE-2017-5418</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5419</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5419" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5419" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5419" ref_url="https://www.suse.com/security/cve/CVE-2017-5419" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become non-responsive, requiring shutdown through the operating system. This is a denial of service (DOS) attack. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5419/">CVE-2017-5419</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5420</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5420" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5420" ref_url="https://www.suse.com/security/cve/CVE-2017-5420" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
    <description>
    A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an attacker to spoof an existing page without the malicious page's address being displayed correctly. This vulnerability affects Firefox &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5420/">CVE-2017-5420</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5421</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5421" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5421" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5421" ref_url="https://www.suse.com/security/cve/CVE-2017-5421" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5421/">CVE-2017-5421</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5422</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5422" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5422" ref_url="https://www.suse.com/security/cve/CVE-2017-5422" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    If a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it can trigger a non-exploitable browser crash when the hyperlink is selected. This was fixed by no longer making "view-source:" linkable. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5422/">CVE-2017-5422</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5426</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5426" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5426" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5426" ref_url="https://www.suse.com/security/cve/CVE-2017-5426" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    On Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media Plugin sandbox is started, the sandbox fails to be applied and items that would run within the sandbox are run protected only by the running filter which is typically weak compared to the sandbox. Note: this issue only affects Linux. Other operating systems are not affected. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5426/">CVE-2017-5426</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5427</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5427" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5427" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5427" ref_url="https://www.suse.com/security/cve/CVE-2017-5427" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
    <description>
    A non-existent chrome.manifest file will attempt to be loaded during startup from the primary installation directory. If a malicious user with local access puts chrome.manifest and other referenced files in this directory, they will be loaded and activated during startup. This could result in malicious software being added without consent or modification of referenced installed files. This vulnerability affects Firefox &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5427/">CVE-2017-5427</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175428" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5428</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5428" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5428" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5428" ref_url="https://www.suse.com/security/cve/CVE-2017-5428" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0765-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00021.html" source="SUSE-SU"/>
    <description>
    An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to the "createImageBitmap" API. This function runs in the content sandbox, requiring a second vulnerability to compromise a user's computer. This vulnerability affects Firefox ESR &lt; 52.0.1 and Firefox &lt; 52.0.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5428/">CVE-2017-5428</cve>
	<bugzilla href="https://bugzilla.suse.com/1029822">SUSE bug 1029822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5429</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5429" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5429" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5429" ref_url="https://www.suse.com/security/cve/CVE-2017-5429" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5429/">CVE-2017-5429</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175430" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5430</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5430" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5430" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5430" ref_url="https://www.suse.com/security/cve/CVE-2017-5430" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5430/">CVE-2017-5430</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175432" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5432</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5432" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5432" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5432" ref_url="https://www.suse.com/security/cve/CVE-2017-5432" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5432/">CVE-2017-5432</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5433</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5433" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5433" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5433" ref_url="https://www.suse.com/security/cve/CVE-2017-5433" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5433/">CVE-2017-5433</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5434</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5434" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5434" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5434" ref_url="https://www.suse.com/security/cve/CVE-2017-5434" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5434/">CVE-2017-5434</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5435</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5435" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5435" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5435" ref_url="https://www.suse.com/security/cve/CVE-2017-5435" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5435/">CVE-2017-5435</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5436</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5436" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5436" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5436" ref_url="https://www.suse.com/security/cve/CVE-2017-5436" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00026.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5436/">CVE-2017-5436</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035204">SUSE bug 1035204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480302" comment="libgraphite2-3-1.3.11-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153578" comment="libgraphite2-3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5437</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5437" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5437" ref_url="https://www.suse.com/security/cve/CVE-2017-5437" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-10195, CVE-2016-10196, CVE-2016-10197.  Reason: This candidate is a duplicate of CVE-2016-10195, CVE-2016-10196, and CVE-2016-10197.  Notes: All CVE users should reference CVE-2016-10195, CVE-2016-10196, and/or CVE-2016-10197 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2017-5437/">CVE-2017-5437</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5438</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5438" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5438" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5438" ref_url="https://www.suse.com/security/cve/CVE-2017-5438" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5438/">CVE-2017-5438</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5439</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5439" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5439" ref_url="https://www.suse.com/security/cve/CVE-2017-5439" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5439/">CVE-2017-5439</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5440</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5440" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5440" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5440" ref_url="https://www.suse.com/security/cve/CVE-2017-5440" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5440/">CVE-2017-5440</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5441</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5441" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5441" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5441" ref_url="https://www.suse.com/security/cve/CVE-2017-5441" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5441/">CVE-2017-5441</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5442</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5442" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5442" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5442" ref_url="https://www.suse.com/security/cve/CVE-2017-5442" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5442/">CVE-2017-5442</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175443" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5443</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5443" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5443" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5443" ref_url="https://www.suse.com/security/cve/CVE-2017-5443" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5443/">CVE-2017-5443</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5444</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5444" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5444" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5444" ref_url="https://www.suse.com/security/cve/CVE-2017-5444" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5444/">CVE-2017-5444</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5445</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5445" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5445" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5445" ref_url="https://www.suse.com/security/cve/CVE-2017-5445" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5445/">CVE-2017-5445</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175446" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5446</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5446" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5446" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5446" ref_url="https://www.suse.com/security/cve/CVE-2017-5446" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5446/">CVE-2017-5446</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5447</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5447" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5447" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5447" ref_url="https://www.suse.com/security/cve/CVE-2017-5447" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to read otherwise inaccessible memory. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5447/">CVE-2017-5447</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5448</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5448" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5448" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5448" ref_url="https://www.suse.com/security/cve/CVE-2017-5448" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecryptor" code runs within the Gecko Media Plugin (GMP) sandbox. If a second mechanism is found to escape the sandbox, this vulnerability allows for the writing of arbitrary data within memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-5448/">CVE-2017-5448</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5449</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5449" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5449" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5449" ref_url="https://www.suse.com/security/cve/CVE-2017-5449" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5449/">CVE-2017-5449</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5451</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5451" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5451" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5451" ref_url="https://www.suse.com/security/cve/CVE-2017-5451" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5451/">CVE-2017-5451</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5454</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5454" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5454" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5454" ref_url="https://www.suse.com/security/cve/CVE-2017-5454" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5454/">CVE-2017-5454</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175455" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5455</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5455" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5455" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5455" ref_url="https://www.suse.com/security/cve/CVE-2017-5455" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
    <description>
    The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR &lt; 52.1 and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5455/">CVE-2017-5455</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5456</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5456" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5456" ref_url="https://www.suse.com/security/cve/CVE-2017-5456" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
    <description>
    A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. This vulnerability affects Firefox ESR &lt; 52.1 and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5456/">CVE-2017-5456</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5459</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5459" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5459" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5459" ref_url="https://www.suse.com/security/cve/CVE-2017-5459" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5459/">CVE-2017-5459</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5460</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5460" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5460" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5460" ref_url="https://www.suse.com/security/cve/CVE-2017-5460" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5460/">CVE-2017-5460</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5461</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5461" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5461" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5461" ref_url="https://www.suse.com/security/cve/CVE-2017-5461" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by leveraging incorrect base64 operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5461/">CVE-2017-5461</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5462</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5462" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5462" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5462" ref_url="https://www.suse.com/security/cve/CVE-2017-5462" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue and Firefox ESR 52.1 has been updated with NSS version 3.28.4. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5462/">CVE-2017-5462</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5464</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5464" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5464" ref_url="https://www.suse.com/security/cve/CVE-2017-5464" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5464/">CVE-2017-5464</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175465" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5465</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5465" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5465" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5465" ref_url="https://www.suse.com/security/cve/CVE-2017-5465" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5465/">CVE-2017-5465</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5466</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5466" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5466" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5466" ref_url="https://www.suse.com/security/cve/CVE-2017-5466" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will run the reloaded "data:text/html" page with its origin set incorrectly. This allows for a cross-site scripting (XSS) attack. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5466/">CVE-2017-5466</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5467</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5467" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5467" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5467" ref_url="https://www.suse.com/security/cve/CVE-2017-5467" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5467/">CVE-2017-5467</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5469</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5469" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5469" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5469" ref_url="https://www.suse.com/security/cve/CVE-2017-5469" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5469/">CVE-2017-5469</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5470</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5470" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5470" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5470" ref_url="https://www.suse.com/security/cve/CVE-2017-5470" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-5470/">CVE-2017-5470</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5472</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5472" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5472" ref_url="https://www.suse.com/security/cve/CVE-2017-5472" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists. This results in a potentially exploitable crash. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-5472/">CVE-2017-5472</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5498</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5498" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5498" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5498" ref_url="https://www.suse.com/security/cve/CVE-2017-5498" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002789.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1034-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00061.html" source="SUSE-SU"/>
    <description>
    libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5498/">CVE-2017-5498</cve>
	<bugzilla href="https://bugzilla.suse.com/1020353">SUSE bug 1020353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020451">SUSE bug 1020451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020456">SUSE bug 1020456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020460">SUSE bug 1020460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175499" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5499</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5499" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5499" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5499" ref_url="https://www.suse.com/security/cve/CVE-2017-5499" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5499/">CVE-2017-5499</cve>
	<bugzilla href="https://bugzilla.suse.com/1020451">SUSE bug 1020451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020456">SUSE bug 1020456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020460">SUSE bug 1020460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115637">SUSE bug 1115637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5503</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5503" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5503" ref_url="https://www.suse.com/security/cve/CVE-2017-5503" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5503/">CVE-2017-5503</cve>
	<bugzilla href="https://bugzilla.suse.com/1020456">SUSE bug 1020456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020458">SUSE bug 1020458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020460">SUSE bug 1020460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5504</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5504" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5504" ref_url="https://www.suse.com/security/cve/CVE-2017-5504" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5504/">CVE-2017-5504</cve>
	<bugzilla href="https://bugzilla.suse.com/1020456">SUSE bug 1020456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020458">SUSE bug 1020458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020460">SUSE bug 1020460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5505</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5505" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5505" ref_url="https://www.suse.com/security/cve/CVE-2017-5505" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5505/">CVE-2017-5505</cve>
	<bugzilla href="https://bugzilla.suse.com/1020456">SUSE bug 1020456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020458">SUSE bug 1020458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020460">SUSE bug 1020460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5525</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5525" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5525" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5525" ref_url="https://www.suse.com/security/cve/CVE-2017-5525" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5525/">CVE-2017-5525</cve>
	<bugzilla href="https://bugzilla.suse.com/1020491">SUSE bug 1020491</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5526</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5526" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5526" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5526" ref_url="https://www.suse.com/security/cve/CVE-2017-5526" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2751-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2815-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2856-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2864-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2821-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2916-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00000.html" source="SUSE-SU"/>
    <description>
    Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5526/">CVE-2017-5526</cve>
	<bugzilla href="https://bugzilla.suse.com/1020589">SUSE bug 1020589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059777">SUSE bug 1059777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5545</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5545" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5545" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5545" ref_url="https://www.suse.com/security/cve/CVE-2017-5545" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002908.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0428-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00094.html" source="SUSE-SU"/>
    <description>
    The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5545/">CVE-2017-5545</cve>
	<bugzilla href="https://bugzilla.suse.com/1021610">SUSE bug 1021610</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5552</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5552" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5552" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5552" ref_url="https://www.suse.com/security/cve/CVE-2017-5552" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
    <description>
    Memory leak in the virgl_resource_attach_backing function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5552/">CVE-2017-5552</cve>
	<bugzilla href="https://bugzilla.suse.com/1021195">SUSE bug 1021195</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5578</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5578" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5578" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5578" ref_url="https://www.suse.com/security/cve/CVE-2017-5578" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
    <description>
    Memory leak in the virtio_gpu_resource_attach_backing function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5578/">CVE-2017-5578</cve>
	<bugzilla href="https://bugzilla.suse.com/1021481">SUSE bug 1021481</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175579" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5579</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5579" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5579" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5579" ref_url="https://www.suse.com/security/cve/CVE-2017-5579" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    CVE-2017-5579 Qemu: serial: host memory leakage 16550A UART emulation
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5579/">CVE-2017-5579</cve>
	<bugzilla href="https://bugzilla.suse.com/1021741">SUSE bug 1021741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1022627">SUSE bug 1022627</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5601</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5601" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5601" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5601" ref_url="https://www.suse.com/security/cve/CVE-2017-5601" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0944-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010509.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0944-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011227.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0944-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2GOSOUIKGPKMNRIKY4M2SLF54G6W2YC4/" source="SUSE-SU"/>
    <description>
    An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-5601/">CVE-2017-5601</cve>
	<bugzilla href="https://bugzilla.suse.com/1022528">SUSE bug 1022528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189528">SUSE bug 1189528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673536" comment="bsdtar-3.4.2-150200.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673531" comment="libarchive-devel-3.4.2-150200.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673532" comment="libarchive13-3.4.2-150200.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009674171" comment="libarchive13-32bit-3.4.2-150200.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152672" comment="libarchive13-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5618</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5618" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5618" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5618" ref_url="https://www.suse.com/security/cve/CVE-2017-5618" source="SUSE CVE"/>
    <description>
    GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5618/">CVE-2017-5618</cve>
	<bugzilla href="https://bugzilla.suse.com/1021743">SUSE bug 1021743</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629014" comment="screen-4.6.2-5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177244" comment="screen is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5667</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5667" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5667" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5667" ref_url="https://www.suse.com/security/cve/CVE-2017-5667" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) or execute arbitrary code on the QEMU host via vectors involving the data transfer length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5667/">CVE-2017-5667</cve>
	<bugzilla href="https://bugzilla.suse.com/1022541">SUSE bug 1022541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175715" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5715</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5715" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5715" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5715" ref_url="https://www.suse.com/security/cve/CVE-2017-5715" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0006-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0009-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0039-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0069-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0114-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0285-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0383-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0416-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0552-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0555-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0601-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0609-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0660-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0708-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0757-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0838-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0986-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1308-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1363-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1376-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1567-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004160.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1571-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1699-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1759-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004215.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004222.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004334.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004357.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2631-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005270.html" source="SUSE-SU"/>
		<reference ref_id="TID000019122" ref_url="https://www.suse.com/support/kb/doc/?id=000019122" source="SUSE-SU"/>
		<reference ref_id="TID7022512" ref_url="https://www.suse.com/support/kb/doc/?id=7022512" source="SUSE-SU"/>
		<reference ref_id="TID7022514" ref_url="https://www.suse.com/support/kb/doc/?id=7022514" source="SUSE-SU"/>
		<reference ref_id="TID7022531" ref_url="https://www.suse.com/support/kb/doc/?id=7022531" source="SUSE-SU"/>
		<reference ref_id="TID7022541" ref_url="https://www.suse.com/support/kb/doc/?id=7022541" source="SUSE-SU"/>
		<reference ref_id="TID7022548" ref_url="https://www.suse.com/support/kb/doc/?id=7022548" source="SUSE-SU"/>
		<reference ref_id="TID7022568" ref_url="https://www.suse.com/support/kb/doc/?id=7022568" source="SUSE-SU"/>
		<reference ref_id="TID7022569" ref_url="https://www.suse.com/support/kb/doc/?id=7022569" source="SUSE-SU"/>
		<reference ref_id="TID7022571" ref_url="https://www.suse.com/support/kb/doc/?id=7022571" source="SUSE-SU"/>
		<reference ref_id="TID7022572" ref_url="https://www.suse.com/support/kb/doc/?id=7022572" source="SUSE-SU"/>
		<reference ref_id="TID7022578" ref_url="https://www.suse.com/support/kb/doc/?id=7022578" source="SUSE-SU"/>
		<reference ref_id="TID7022579" ref_url="https://www.suse.com/support/kb/doc/?id=7022579" source="SUSE-SU"/>
		<reference ref_id="TID7022982" ref_url="https://www.suse.com/support/kb/doc/?id=7022982" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU--1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0013-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0030-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0059-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0066-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0939-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1623-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2237-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5715/">CVE-2017-5715</cve>
	<bugzilla href="https://bugzilla.suse.com/1068032">SUSE bug 1068032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074562">SUSE bug 1074562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074578">SUSE bug 1074578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074701">SUSE bug 1074701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074741">SUSE bug 1074741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074919">SUSE bug 1074919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075006">SUSE bug 1075006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075007">SUSE bug 1075007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075262">SUSE bug 1075262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075419">SUSE bug 1075419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076115">SUSE bug 1076115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076372">SUSE bug 1076372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076606">SUSE bug 1076606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078353">SUSE bug 1078353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1080039">SUSE bug 1080039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087887">SUSE bug 1087887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087939">SUSE bug 1087939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088147">SUSE bug 1088147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089055">SUSE bug 1089055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091815">SUSE bug 1091815</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095735">SUSE bug 1095735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102517">SUSE bug 1102517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105108">SUSE bug 1105108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126516">SUSE bug 1126516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173489">SUSE bug 1173489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201457">SUSE bug 1201457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201877">SUSE bug 1201877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203236">SUSE bug 1203236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694782" comment="kernel-firmware-all-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694783" comment="kernel-firmware-amdgpu-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694784" comment="kernel-firmware-ath10k-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694785" comment="kernel-firmware-ath11k-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694786" comment="kernel-firmware-atheros-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694787" comment="kernel-firmware-bluetooth-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694788" comment="kernel-firmware-bnx2-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628538" comment="kernel-firmware-brcm-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694789" comment="kernel-firmware-chelsio-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694790" comment="kernel-firmware-dpaa2-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694791" comment="kernel-firmware-i915-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694792" comment="kernel-firmware-intel-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694793" comment="kernel-firmware-iwlwifi-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694794" comment="kernel-firmware-liquidio-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694795" comment="kernel-firmware-marvell-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694796" comment="kernel-firmware-media-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694797" comment="kernel-firmware-mediatek-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694798" comment="kernel-firmware-mellanox-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694799" comment="kernel-firmware-mwifiex-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694800" comment="kernel-firmware-network-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694801" comment="kernel-firmware-nfp-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694802" comment="kernel-firmware-nvidia-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694803" comment="kernel-firmware-platform-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694804" comment="kernel-firmware-prestera-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694805" comment="kernel-firmware-qlogic-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694806" comment="kernel-firmware-radeon-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694807" comment="kernel-firmware-realtek-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694808" comment="kernel-firmware-serial-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694809" comment="kernel-firmware-sound-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694810" comment="kernel-firmware-ti-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694811" comment="kernel-firmware-ueagle-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694812" comment="kernel-firmware-usb-network-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628539" comment="ucode-amd-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629040" comment="ucode-intel-20210216-2.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5731</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5731" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5731" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5731" ref_url="https://www.suse.com/security/cve/CVE-2017-5731" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004989.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00059.html" source="SUSE-SU"/>
    <description>
    Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5731/">CVE-2017-5731</cve>
	<bugzilla href="https://bugzilla.suse.com/1115917">SUSE bug 1115917</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5732</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5732" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5732" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5732" ref_url="https://www.suse.com/security/cve/CVE-2017-5732" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004989.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00059.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2017-5732/">CVE-2017-5732</cve>
	<bugzilla href="https://bugzilla.suse.com/1115917">SUSE bug 1115917</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5733</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5733" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5733" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5733" ref_url="https://www.suse.com/security/cve/CVE-2017-5733" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004989.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00059.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2017-5733/">CVE-2017-5733</cve>
	<bugzilla href="https://bugzilla.suse.com/1115917">SUSE bug 1115917</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175734" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5734</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5734" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5734" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5734" ref_url="https://www.suse.com/security/cve/CVE-2017-5734" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004989.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00059.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2017-5734/">CVE-2017-5734</cve>
	<bugzilla href="https://bugzilla.suse.com/1115917">SUSE bug 1115917</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5735</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5735" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5735" ref_url="https://www.suse.com/security/cve/CVE-2017-5735" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004989.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00059.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2017-5735/">CVE-2017-5735</cve>
	<bugzilla href="https://bugzilla.suse.com/1115917">SUSE bug 1115917</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5753</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5753" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5753" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0069-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0114-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0285-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0552-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0601-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0609-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1376-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1699-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004334.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004377.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005581.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2862-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3929-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/020993.html" source="SUSE-SU"/>
		<reference ref_id="TID000019122" ref_url="https://www.suse.com/support/kb/doc/?id=000019122" source="SUSE-SU"/>
		<reference ref_id="TID000019229" ref_url="https://www.suse.com/support/kb/doc/?id=000019229" source="SUSE-SU"/>
		<reference ref_id="TID7022512" ref_url="https://www.suse.com/support/kb/doc/?id=7022512" source="SUSE-SU"/>
		<reference ref_id="TID7022514" ref_url="https://www.suse.com/support/kb/doc/?id=7022514" source="SUSE-SU"/>
		<reference ref_id="TID7022531" ref_url="https://www.suse.com/support/kb/doc/?id=7022531" source="SUSE-SU"/>
		<reference ref_id="TID7022541" ref_url="https://www.suse.com/support/kb/doc/?id=7022541" source="SUSE-SU"/>
		<reference ref_id="TID7022548" ref_url="https://www.suse.com/support/kb/doc/?id=7022548" source="SUSE-SU"/>
		<reference ref_id="TID7022568" ref_url="https://www.suse.com/support/kb/doc/?id=7022568" source="SUSE-SU"/>
		<reference ref_id="TID7022569" ref_url="https://www.suse.com/support/kb/doc/?id=7022569" source="SUSE-SU"/>
		<reference ref_id="TID7022571" ref_url="https://www.suse.com/support/kb/doc/?id=7022571" source="SUSE-SU"/>
		<reference ref_id="TID7022572" ref_url="https://www.suse.com/support/kb/doc/?id=7022572" source="SUSE-SU"/>
		<reference ref_id="TID7022578" ref_url="https://www.suse.com/support/kb/doc/?id=7022578" source="SUSE-SU"/>
		<reference ref_id="TID7022579" ref_url="https://www.suse.com/support/kb/doc/?id=7022579" source="SUSE-SU"/>
		<reference ref_id="TID7023075" ref_url="https://www.suse.com/support/kb/doc/?id=7023075" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1623-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1212-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5IDOTKMILRKOFD2ODQXJF3OOEYZ3EMR5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2861-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5MOJKTUHVZFZADZQ6EYELCLEJ5BD766Q/" source="SUSE-SU"/>
    <description>
    Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<bugzilla href="https://bugzilla.suse.com/1068032">SUSE bug 1068032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074562">SUSE bug 1074562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074578">SUSE bug 1074578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074701">SUSE bug 1074701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075006">SUSE bug 1075006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075419">SUSE bug 1075419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075748">SUSE bug 1075748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1080039">SUSE bug 1080039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087084">SUSE bug 1087084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087939">SUSE bug 1087939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089055">SUSE bug 1089055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201877">SUSE bug 1201877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631131" comment="spectre-meltdown-checker-0.44-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009275301" comment="spectre-meltdown-checker is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5754</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5754" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5754" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5754" ref_url="https://www.suse.com/security/cve/CVE-2017-5754" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0285-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0552-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0601-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0609-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1699-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004740.html" source="SUSE-SU"/>
		<reference ref_id="TID000019122" ref_url="https://www.suse.com/support/kb/doc/?id=000019122" source="SUSE-SU"/>
		<reference ref_id="TID7022512" ref_url="https://www.suse.com/support/kb/doc/?id=7022512" source="SUSE-SU"/>
		<reference ref_id="TID7022514" ref_url="https://www.suse.com/support/kb/doc/?id=7022514" source="SUSE-SU"/>
		<reference ref_id="TID7022531" ref_url="https://www.suse.com/support/kb/doc/?id=7022531" source="SUSE-SU"/>
		<reference ref_id="TID7022541" ref_url="https://www.suse.com/support/kb/doc/?id=7022541" source="SUSE-SU"/>
		<reference ref_id="TID7022548" ref_url="https://www.suse.com/support/kb/doc/?id=7022548" source="SUSE-SU"/>
		<reference ref_id="TID7022568" ref_url="https://www.suse.com/support/kb/doc/?id=7022568" source="SUSE-SU"/>
		<reference ref_id="TID7022569" ref_url="https://www.suse.com/support/kb/doc/?id=7022569" source="SUSE-SU"/>
		<reference ref_id="TID7022571" ref_url="https://www.suse.com/support/kb/doc/?id=7022571" source="SUSE-SU"/>
		<reference ref_id="TID7022572" ref_url="https://www.suse.com/support/kb/doc/?id=7022572" source="SUSE-SU"/>
		<reference ref_id="TID7022578" ref_url="https://www.suse.com/support/kb/doc/?id=7022578" source="SUSE-SU"/>
		<reference ref_id="TID7022579" ref_url="https://www.suse.com/support/kb/doc/?id=7022579" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1623-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00014.html" source="SUSE-SU"/>
    <description>
    Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5754/">CVE-2017-5754</cve>
	<bugzilla href="https://bugzilla.suse.com/1068032">SUSE bug 1068032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074562">SUSE bug 1074562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074578">SUSE bug 1074578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074701">SUSE bug 1074701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075006">SUSE bug 1075006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075008">SUSE bug 1075008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087939">SUSE bug 1087939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089055">SUSE bug 1089055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115045">SUSE bug 1115045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201877">SUSE bug 1201877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5834</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5834" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5834" ref_url="https://www.suse.com/security/cve/CVE-2017-5834" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002908.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0528-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00094.html" source="SUSE-SU"/>
    <description>
    The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5834/">CVE-2017-5834</cve>
	<bugzilla href="https://bugzilla.suse.com/1023848">SUSE bug 1023848</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5835</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5835" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5835" ref_url="https://www.suse.com/security/cve/CVE-2017-5835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002908.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0528-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00094.html" source="SUSE-SU"/>
    <description>
    libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5835/">CVE-2017-5835</cve>
	<bugzilla href="https://bugzilla.suse.com/1023822">SUSE bug 1023822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5836</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5836" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5836" ref_url="https://www.suse.com/security/cve/CVE-2017-5836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002908.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0528-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00094.html" source="SUSE-SU"/>
    <description>
    The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5836/">CVE-2017-5836</cve>
	<bugzilla href="https://bugzilla.suse.com/1023807">SUSE bug 1023807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1023848">SUSE bug 1023848</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5837</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5837" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5837" ref_url="https://www.suse.com/security/cve/CVE-2017-5837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002798.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1039-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002805.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002807.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005542.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0574-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1079-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00095.html" source="SUSE-SU"/>
    <description>
    The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted video file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5837/">CVE-2017-5837</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024076">SUSE bug 1024076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024079">SUSE bug 1024079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482016" comment="gstreamer-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154019" comment="gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482017" comment="gstreamer-lang-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154023" comment="gstreamer-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487262" comment="gstreamer-utils-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154024" comment="gstreamer-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482018" comment="libgstreamer-1_0-0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154025" comment="libgstreamer-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482019" comment="typelib-1_0-Gst-1_0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154027" comment="typelib-1_0-Gst-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5838</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5838" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5838" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5838" ref_url="https://www.suse.com/security/cve/CVE-2017-5838" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0966-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0967-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002792.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0580-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1031-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00058.html" source="SUSE-SU"/>
    <description>
    The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5838/">CVE-2017-5838</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024051">SUSE bug 1024051</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482016" comment="gstreamer-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154019" comment="gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482017" comment="gstreamer-lang-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154023" comment="gstreamer-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694753" comment="gstreamer-plugins-bad-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153876" comment="gstreamer-plugins-bad is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694754" comment="gstreamer-plugins-bad-lang-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153880" comment="gstreamer-plugins-bad-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482034" comment="gstreamer-plugins-good-1.16.2-1.85 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153915" comment="gstreamer-plugins-good is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694766" comment="gstreamer-plugins-good-gtk-1.16.2-1.85 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009476863" comment="gstreamer-plugins-good-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482035" comment="gstreamer-plugins-good-lang-1.16.2-1.85 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153920" comment="gstreamer-plugins-good-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489214" comment="gstreamer-plugins-ugly-1.16.2-1.75 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177245" comment="gstreamer-plugins-ugly is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489215" comment="gstreamer-plugins-ugly-lang-1.16.2-1.75 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177246" comment="gstreamer-plugins-ugly-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487262" comment="gstreamer-utils-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154024" comment="gstreamer-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694755" comment="libgstadaptivedemux-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154275" comment="libgstadaptivedemux-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694756" comment="libgstbadaudio-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154277" comment="libgstbadaudio-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694757" comment="libgstbasecamerabinsrc-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153886" comment="libgstbasecamerabinsrc-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694758" comment="libgstcodecparsers-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153890" comment="libgstcodecparsers-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694759" comment="libgstisoff-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009476869" comment="libgstisoff-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694760" comment="libgstmpegts-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153896" comment="libgstmpegts-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694761" comment="libgstphotography-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153899" comment="libgstphotography-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482018" comment="libgstreamer-1_0-0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154025" comment="libgstreamer-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694762" comment="libgstsctp-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009476871" comment="libgstsctp-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694763" comment="libgsturidownloader-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153902" comment="libgsturidownloader-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694764" comment="libgstwayland-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153905" comment="libgstwayland-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694765" comment="libgstwebrtc-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009476873" comment="libgstwebrtc-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482019" comment="typelib-1_0-Gst-1_0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154027" comment="typelib-1_0-Gst-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5839</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5839" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5839" ref_url="https://www.suse.com/security/cve/CVE-2017-5839" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1039-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002805.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002807.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0574-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00095.html" source="SUSE-SU"/>
    <description>
    The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service (stack overflow and crash) via vectors involving nested WAVEFORMATEX.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5839/">CVE-2017-5839</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024047">SUSE bug 1024047</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482016" comment="gstreamer-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154019" comment="gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482017" comment="gstreamer-lang-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154023" comment="gstreamer-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487262" comment="gstreamer-utils-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154024" comment="gstreamer-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482018" comment="libgstreamer-1_0-0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154025" comment="libgstreamer-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482019" comment="typelib-1_0-Gst-1_0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154027" comment="typelib-1_0-Gst-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5840</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5840" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5840" ref_url="https://www.suse.com/security/cve/CVE-2017-5840" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1010-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002801.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1066-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1076-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00081.html" source="SUSE-SU"/>
    <description>
    The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving the current stts index.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5840/">CVE-2017-5840</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024034">SUSE bug 1024034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482016" comment="gstreamer-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154019" comment="gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482017" comment="gstreamer-lang-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154023" comment="gstreamer-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487262" comment="gstreamer-utils-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154024" comment="gstreamer-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482018" comment="libgstreamer-1_0-0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154025" comment="libgstreamer-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482019" comment="typelib-1_0-Gst-1_0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154027" comment="typelib-1_0-Gst-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5841</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5841" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5841" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5841" ref_url="https://www.suse.com/security/cve/CVE-2017-5841" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1010-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002801.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1066-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1076-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00081.html" source="SUSE-SU"/>
    <description>
    The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving ncdt tags.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5841/">CVE-2017-5841</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024030">SUSE bug 1024030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024062">SUSE bug 1024062</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482016" comment="gstreamer-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154019" comment="gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482017" comment="gstreamer-lang-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154023" comment="gstreamer-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487262" comment="gstreamer-utils-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154024" comment="gstreamer-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482018" comment="libgstreamer-1_0-0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154025" comment="libgstreamer-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482019" comment="typelib-1_0-Gst-1_0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154027" comment="typelib-1_0-Gst-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5842</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5842" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5842" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5842" ref_url="https://www.suse.com/security/cve/CVE-2017-5842" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1039-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002805.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002807.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0574-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00095.html" source="SUSE-SU"/>
    <description>
    The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted SMI file, as demonstrated by OneNote_Manager.smi.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5842/">CVE-2017-5842</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024041">SUSE bug 1024041</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482016" comment="gstreamer-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154019" comment="gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482017" comment="gstreamer-lang-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154023" comment="gstreamer-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487262" comment="gstreamer-utils-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154024" comment="gstreamer-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482018" comment="libgstreamer-1_0-0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154025" comment="libgstreamer-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482019" comment="typelib-1_0-Gst-1_0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154027" comment="typelib-1_0-Gst-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5843</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5843" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5843" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5843" ref_url="https://www.suse.com/security/cve/CVE-2017-5843" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002790.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1032-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00059.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of service (crash) via vectors involving stream tags, as demonstrated by 02785736.mxf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5843/">CVE-2017-5843</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024044">SUSE bug 1024044</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482016" comment="gstreamer-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154019" comment="gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482017" comment="gstreamer-lang-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154023" comment="gstreamer-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487262" comment="gstreamer-utils-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154024" comment="gstreamer-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482018" comment="libgstreamer-1_0-0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154025" comment="libgstreamer-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482019" comment="typelib-1_0-Gst-1_0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154027" comment="typelib-1_0-Gst-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5844</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5844" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5844" ref_url="https://www.suse.com/security/cve/CVE-2017-5844" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002798.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1039-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002805.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002807.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005542.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0574-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1079-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00095.html" source="SUSE-SU"/>
    <description>
    The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted ASF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5844/">CVE-2017-5844</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024079">SUSE bug 1024079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482016" comment="gstreamer-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154019" comment="gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482017" comment="gstreamer-lang-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154023" comment="gstreamer-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487262" comment="gstreamer-utils-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154024" comment="gstreamer-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482018" comment="libgstreamer-1_0-0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154025" comment="libgstreamer-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482019" comment="typelib-1_0-Gst-1_0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154027" comment="typelib-1_0-Gst-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5845</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5845" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5845" ref_url="https://www.suse.com/security/cve/CVE-2017-5845" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1010-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002801.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1066-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1076-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00081.html" source="SUSE-SU"/>
    <description>
    The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a ncdt sub-tag that "goes behind" the surrounding tag.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5845/">CVE-2017-5845</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024062">SUSE bug 1024062</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482016" comment="gstreamer-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154019" comment="gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482017" comment="gstreamer-lang-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154023" comment="gstreamer-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487262" comment="gstreamer-utils-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154024" comment="gstreamer-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482018" comment="libgstreamer-1_0-0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154025" comment="libgstreamer-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482019" comment="typelib-1_0-Gst-1_0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154027" comment="typelib-1_0-Gst-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5846</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5846" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5846" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5846" ref_url="https://www.suse.com/security/cve/CVE-2017-5846" source="SUSE CVE"/>
    <description>
    The gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors related to the number of languages in a video file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5846/">CVE-2017-5846</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482016" comment="gstreamer-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154019" comment="gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482017" comment="gstreamer-lang-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154023" comment="gstreamer-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487262" comment="gstreamer-utils-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154024" comment="gstreamer-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482018" comment="libgstreamer-1_0-0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154025" comment="libgstreamer-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482019" comment="typelib-1_0-Gst-1_0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154027" comment="typelib-1_0-Gst-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175847" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5847</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5847" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5847" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5847" ref_url="https://www.suse.com/security/cve/CVE-2017-5847" source="SUSE CVE"/>
    <description>
    The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving extended content descriptors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5847/">CVE-2017-5847</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482016" comment="gstreamer-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154019" comment="gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482017" comment="gstreamer-lang-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154023" comment="gstreamer-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694753" comment="gstreamer-plugins-bad-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153876" comment="gstreamer-plugins-bad is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694754" comment="gstreamer-plugins-bad-lang-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153880" comment="gstreamer-plugins-bad-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489214" comment="gstreamer-plugins-ugly-1.16.2-1.75 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177245" comment="gstreamer-plugins-ugly is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489215" comment="gstreamer-plugins-ugly-lang-1.16.2-1.75 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177246" comment="gstreamer-plugins-ugly-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487262" comment="gstreamer-utils-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154024" comment="gstreamer-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694755" comment="libgstadaptivedemux-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154275" comment="libgstadaptivedemux-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694756" comment="libgstbadaudio-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154277" comment="libgstbadaudio-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694757" comment="libgstbasecamerabinsrc-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153886" comment="libgstbasecamerabinsrc-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694758" comment="libgstcodecparsers-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153890" comment="libgstcodecparsers-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694759" comment="libgstisoff-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009476869" comment="libgstisoff-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694760" comment="libgstmpegts-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153896" comment="libgstmpegts-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694761" comment="libgstphotography-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153899" comment="libgstphotography-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482018" comment="libgstreamer-1_0-0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154025" comment="libgstreamer-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694762" comment="libgstsctp-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009476871" comment="libgstsctp-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694763" comment="libgsturidownloader-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153902" comment="libgsturidownloader-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694764" comment="libgstwayland-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153905" comment="libgstwayland-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694765" comment="libgstwebrtc-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009476873" comment="libgstwebrtc-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482019" comment="typelib-1_0-Gst-1_0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154027" comment="typelib-1_0-Gst-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5848</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5848" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5848" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5848" ref_url="https://www.suse.com/security/cve/CVE-2017-5848" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002790.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1032-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00059.html" source="SUSE-SU"/>
    <description>
    The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors involving PSM parsing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5848/">CVE-2017-5848</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024068">SUSE bug 1024068</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482016" comment="gstreamer-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154019" comment="gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482017" comment="gstreamer-lang-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154023" comment="gstreamer-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694753" comment="gstreamer-plugins-bad-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153876" comment="gstreamer-plugins-bad is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694754" comment="gstreamer-plugins-bad-lang-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153880" comment="gstreamer-plugins-bad-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487262" comment="gstreamer-utils-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154024" comment="gstreamer-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694755" comment="libgstadaptivedemux-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154275" comment="libgstadaptivedemux-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694756" comment="libgstbadaudio-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154277" comment="libgstbadaudio-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694757" comment="libgstbasecamerabinsrc-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153886" comment="libgstbasecamerabinsrc-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694758" comment="libgstcodecparsers-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153890" comment="libgstcodecparsers-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694759" comment="libgstisoff-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009476869" comment="libgstisoff-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694760" comment="libgstmpegts-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153896" comment="libgstmpegts-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694761" comment="libgstphotography-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153899" comment="libgstphotography-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482018" comment="libgstreamer-1_0-0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154025" comment="libgstreamer-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694762" comment="libgstsctp-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009476871" comment="libgstsctp-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694763" comment="libgsturidownloader-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153902" comment="libgsturidownloader-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694764" comment="libgstwayland-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153905" comment="libgstwayland-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694765" comment="libgstwebrtc-1_0-0-1.16.2-lp153.2.114 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009476873" comment="libgstwebrtc-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482019" comment="typelib-1_0-Gst-1_0-1.16.2-1.53 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154027" comment="typelib-1_0-Gst-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175856" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5856</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5856" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5856" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5856" ref_url="https://www.suse.com/security/cve/CVE-2017-5856" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via MegaRAID Firmware Interface (MFI) commands with the sglist size set to a value over 2 Gb.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5856/">CVE-2017-5856</cve>
	<bugzilla href="https://bugzilla.suse.com/1023053">SUSE bug 1023053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024186">SUSE bug 1024186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175857" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5857</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5857" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5857" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5857" ref_url="https://www.suse.com/security/cve/CVE-2017-5857" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
    <description>
    Memory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_UNREF commands sent without detaching the backing storage beforehand.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5857/">CVE-2017-5857</cve>
	<bugzilla href="https://bugzilla.suse.com/1023073">SUSE bug 1023073</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5884</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5884" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5884" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5884" ref_url="https://www.suse.com/security/cve/CVE-2017-5884" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009456.html" source="SUSE-SU"/>
    <description>
    It was found that gtk-vnc lacked proper bounds checking while processing messages using RRE, hextile, or copyrect encodings. A remote malicious VNC server could use this flaw to crash VNC viewers which are based on the gtk-vnc library.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-5884/">CVE-2017-5884</cve>
	<bugzilla href="https://bugzilla.suse.com/1024266">SUSE bug 1024266</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694767" comment="gtk-vnc-lang-1.0.0-2.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177247" comment="gtk-vnc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482239" comment="libgtk-vnc-2_0-0-1.0.0-2.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177248" comment="libgtk-vnc-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482240" comment="libgvnc-1_0-0-1.0.0-2.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177249" comment="libgvnc-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488509" comment="typelib-1_0-GVnc-1_0-1.0.0-2.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177250" comment="typelib-1_0-GVnc-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488511" comment="typelib-1_0-GtkVnc-2_0-1.0.0-2.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177251" comment="typelib-1_0-GtkVnc-2_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5885</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5885" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5885" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5885" ref_url="https://www.suse.com/security/cve/CVE-2017-5885" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009456.html" source="SUSE-SU"/>
    <description>
    An integer overflow flaw was found in gtk-vnc. A remote malicious VNC server could use this flaw to crash VNC viewers which are based on the gtk-vnc library.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-5885/">CVE-2017-5885</cve>
	<bugzilla href="https://bugzilla.suse.com/1024268">SUSE bug 1024268</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694767" comment="gtk-vnc-lang-1.0.0-2.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177247" comment="gtk-vnc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482239" comment="libgtk-vnc-2_0-0-1.0.0-2.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177248" comment="libgtk-vnc-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482240" comment="libgvnc-1_0-0-1.0.0-2.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177249" comment="libgvnc-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488509" comment="typelib-1_0-GVnc-1_0-1.0.0-2.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177250" comment="typelib-1_0-GVnc-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488511" comment="typelib-1_0-GtkVnc-2_0-1.0.0-2.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177251" comment="typelib-1_0-GtkVnc-2_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5898</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5898" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5898" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5898" ref_url="https://www.suse.com/security/cve/CVE-2017-5898" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5898/">CVE-2017-5898</cve>
	<bugzilla href="https://bugzilla.suse.com/1023907">SUSE bug 1023907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024307">SUSE bug 1024307</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175931" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5931</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5931" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5931" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5931" ref_url="https://www.suse.com/security/cve/CVE-2017-5931" source="SUSE CVE"/>
    <description>
    Integer overflow in hw/virtio/virtio-crypto.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code on the host via a crafted virtio-crypto request, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5931/">CVE-2017-5931</cve>
	<bugzilla href="https://bugzilla.suse.com/1024114">SUSE bug 1024114</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175937" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5937</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5937" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5937" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5937" ref_url="https://www.suse.com/security/cve/CVE-2017-5937" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002738.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0902-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00119.html" source="SUSE-SU"/>
    <description>
    The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference) via a crafted VIRGL_CCMD_CLEAR command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5937/">CVE-2017-5937</cve>
	<bugzilla href="https://bugzilla.suse.com/1024232">SUSE bug 1024232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1041089">SUSE bug 1041089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488549" comment="libvirglrenderer0-0.6.0-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175950" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5950</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5950" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5950" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5950" ref_url="https://www.suse.com/security/cve/CVE-2017-5950" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003791.html" source="SUSE-SU"/>
    <description>
    The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5950/">CVE-2017-5950</cve>
	<bugzilla href="https://bugzilla.suse.com/1032144">SUSE bug 1032144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628930" comment="libyaml-cpp0_6-0.6.1-4.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677956" comment="libyaml-cpp0_6 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175951" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5951</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5951" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5951" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5951" ref_url="https://www.suse.com/security/cve/CVE-2017-5951" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00014.html" source="SUSE-SU"/>
    <description>
    The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-5951/">CVE-2017-5951</cve>
	<bugzilla href="https://bugzilla.suse.com/1032114">SUSE bug 1032114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036453">SUSE bug 1036453</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175953" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5953</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5953" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5953" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5953" ref_url="https://www.suse.com/security/cve/CVE-2017-5953" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013343.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0511-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1811-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00039.html" source="SUSE-SU"/>
    <description>
    vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5953/">CVE-2017-5953</cve>
	<bugzilla href="https://bugzilla.suse.com/1024724">SUSE bug 1024724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123143">SUSE bug 1123143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173534">SUSE bug 1173534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629044" comment="vim-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151193" comment="vim is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629045" comment="vim-data-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151194" comment="vim-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629046" comment="vim-data-common-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177135" comment="vim-data-common is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5957</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5957" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5957" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5957" ref_url="https://www.suse.com/security/cve/CVE-2017-5957" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002738.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0902-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00119.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator (QEMU), allows a local guest users to cause a denial of service (application crash) via the "nr_cbufs" argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5957/">CVE-2017-5957</cve>
	<bugzilla href="https://bugzilla.suse.com/1024993">SUSE bug 1024993</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488549" comment="libvirglrenderer0-0.6.0-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5969</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5969" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5969" ref_url="https://www.suse.com/security/cve/CVE-2017-5969" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1746-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00000.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document.  NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5969/">CVE-2017-5969</cve>
	<bugzilla href="https://bugzilla.suse.com/1024989">SUSE bug 1024989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5973</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5973" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5973" ref_url="https://www.suse.com/security/cve/CVE-2017-5973" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5973/">CVE-2017-5973</cve>
	<bugzilla href="https://bugzilla.suse.com/1025109">SUSE bug 1025109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1025188">SUSE bug 1025188</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175987" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5987</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5987" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5987" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5987" ref_url="https://www.suse.com/security/cve/CVE-2017-5987" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5987/">CVE-2017-5987</cve>
	<bugzilla href="https://bugzilla.suse.com/1025311">SUSE bug 1025311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175993" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5993</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5993" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5993" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5993" ref_url="https://www.suse.com/security/cve/CVE-2017-5993" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002738.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0902-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00119.html" source="SUSE-SU"/>
    <description>
    Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_CCMD_BLIT commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5993/">CVE-2017-5993</cve>
	<bugzilla href="https://bugzilla.suse.com/1025505">SUSE bug 1025505</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488549" comment="libvirglrenderer0-0.6.0-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5994</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5994" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5994" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5994" ref_url="https://www.suse.com/security/cve/CVE-2017-5994" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002738.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0902-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00119.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and crash) via the num_elements parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5994/">CVE-2017-5994</cve>
	<bugzilla href="https://bugzilla.suse.com/1025507">SUSE bug 1025507</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488549" comment="libvirglrenderer0-0.6.0-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176004" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6004</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6004" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6004" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6004" ref_url="https://www.suse.com/security/cve/CVE-2017-6004" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009718.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3652-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009715.html" source="SUSE-SU"/>
    <description>
    The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled version) allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted regular expression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6004/">CVE-2017-6004</cve>
	<bugzilla href="https://bugzilla.suse.com/1025709">SUSE bug 1025709</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191803">SUSE bug 1191803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193384">SUSE bug 1193384</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176058" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6058</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6058" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6058" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6058" ref_url="https://www.suse.com/security/cve/CVE-2017-6058" source="SUSE CVE"/>
    <description>
    Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service (out-of-bounds access and QEMU process crash) via vectors related to VLAN stripping.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6058/">CVE-2017-6058</cve>
	<bugzilla href="https://bugzilla.suse.com/1025837">SUSE bug 1025837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6312</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6312" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6312" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6312" ref_url="https://www.suse.com/security/cve/CVE-2017-6312" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2381-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2470-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004484.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6312/">CVE-2017-6312</cve>
	<bugzilla href="https://bugzilla.suse.com/1027024">SUSE bug 1027024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1027026">SUSE bug 1027026</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628451" comment="gdk-pixbuf-lang-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628452" comment="gdk-pixbuf-query-loaders-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628453" comment="gdk-pixbuf-thumbnailer-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177170" comment="gdk-pixbuf-thumbnailer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628454" comment="libgdk_pixbuf-2_0-0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628455" comment="typelib-1_0-GdkPixbuf-2_0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6313</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6313" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6313" ref_url="https://www.suse.com/security/cve/CVE-2017-6313" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2381-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2470-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004484.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (out-of-bounds read and program crash) via a crafted image entry size in an ICO file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-6313/">CVE-2017-6313</cve>
	<bugzilla href="https://bugzilla.suse.com/1027024">SUSE bug 1027024</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628451" comment="gdk-pixbuf-lang-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628452" comment="gdk-pixbuf-query-loaders-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628453" comment="gdk-pixbuf-thumbnailer-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177170" comment="gdk-pixbuf-thumbnailer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628454" comment="libgdk_pixbuf-2_0-0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628455" comment="typelib-1_0-GdkPixbuf-2_0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176318" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6318</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6318" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6318" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6318" ref_url="https://www.suse.com/security/cve/CVE-2017-6318" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002700.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007683.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0649-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    saned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via a crafted SANE_NET_CONTROL_OPTION packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-6318/">CVE-2017-6318</cve>
	<bugzilla href="https://bugzilla.suse.com/1027197">SUSE bug 1027197</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629222" comment="sane-backends-1.0.32-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154031" comment="sane-backends is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629223" comment="sane-backends-autoconfig-1.0.32-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154033" comment="sane-backends-autoconfig is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6349</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6349" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6349" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6349" ref_url="https://www.suse.com/security/cve/CVE-2017-6349" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013343.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1811-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00039.html" source="SUSE-SU"/>
    <description>
    An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6349/">CVE-2017-6349</cve>
	<bugzilla href="https://bugzilla.suse.com/1027057">SUSE bug 1027057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629044" comment="vim-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151193" comment="vim is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629045" comment="vim-data-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151194" comment="vim-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629046" comment="vim-data-common-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177135" comment="vim-data-common is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6350</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6350" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6350" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6350" ref_url="https://www.suse.com/security/cve/CVE-2017-6350" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013343.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1811-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00039.html" source="SUSE-SU"/>
    <description>
    An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6350/">CVE-2017-6350</cve>
	<bugzilla href="https://bugzilla.suse.com/1027053">SUSE bug 1027053</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629044" comment="vim-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151193" comment="vim is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629045" comment="vim-data-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151194" comment="vim-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629046" comment="vim-data-common-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177135" comment="vim-data-common is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6362</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6362" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6362" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6362" ref_url="https://www.suse.com/security/cve/CVE-2017-6362" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0151-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00054.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6362/">CVE-2017-6362</cve>
	<bugzilla href="https://bugzilla.suse.com/1056993">SUSE bug 1056993</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6386</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6386" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6386" ref_url="https://www.suse.com/security/cve/CVE-2017-6386" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002738.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0902-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00119.html" source="SUSE-SU"/>
    <description>
    Memory leak in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_OBJECT_VERTEX_ELEMENTS commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6386/">CVE-2017-6386</cve>
	<bugzilla href="https://bugzilla.suse.com/1027376">SUSE bug 1027376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488549" comment="libvirglrenderer0-0.6.0-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176414" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6414</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6414" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6414" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6414" ref_url="https://www.suse.com/security/cve/CVE-2017-6414" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00006.html" source="SUSE-SU"/>
    <description>
    Memory leak in the vcard_apdu_new function in card_7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service (host memory consumption) via vectors related to allocating a new APDU object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6414/">CVE-2017-6414</cve>
	<bugzilla href="https://bugzilla.suse.com/1027514">SUSE bug 1027514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1027570">SUSE bug 1027570</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488173" comment="libcacard0-2.5.3-1.27 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177252" comment="libcacard0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6419</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6419" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6419" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6419" ref_url="https://www.suse.com/security/cve/CVE-2017-6419" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0809-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0863-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00062.html" source="SUSE-SU"/>
    <description>
    mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted CHM file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6419/">CVE-2017-6419</cve>
	<bugzilla href="https://bugzilla.suse.com/1052449">SUSE bug 1052449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083915">SUSE bug 1083915</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482310" comment="libmspack0-0.6-3.8.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151459" comment="libmspack0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6435</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6435" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6435" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6435" ref_url="https://www.suse.com/security/cve/CVE-2017-6435" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003143.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2208-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00082.html" source="SUSE-SU"/>
    <description>
    The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory corruption) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6435/">CVE-2017-6435</cve>
	<bugzilla href="https://bugzilla.suse.com/1029639">SUSE bug 1029639</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6436</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6436" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6436" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6436" ref_url="https://www.suse.com/security/cve/CVE-2017-6436" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003143.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2208-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00082.html" source="SUSE-SU"/>
    <description>
    The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6436/">CVE-2017-6436</cve>
	<bugzilla href="https://bugzilla.suse.com/1029751">SUSE bug 1029751</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6437</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6437" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6437" ref_url="https://www.suse.com/security/cve/CVE-2017-6437" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003143.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2208-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00082.html" source="SUSE-SU"/>
    <description>
    The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6437/">CVE-2017-6437</cve>
	<bugzilla href="https://bugzilla.suse.com/1029707">SUSE bug 1029707</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6438</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6438" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6438" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6438" ref_url="https://www.suse.com/security/cve/CVE-2017-6438" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003143.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2208-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00082.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) and possibly code execution via a crafted plist file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-6438/">CVE-2017-6438</cve>
	<bugzilla href="https://bugzilla.suse.com/1029706">SUSE bug 1029706</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6439</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6439" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6439" ref_url="https://www.suse.com/security/cve/CVE-2017-6439" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003143.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2208-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00082.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-6439/">CVE-2017-6439</cve>
	<bugzilla href="https://bugzilla.suse.com/1029638">SUSE bug 1029638</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6440</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6440" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6440" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6440" ref_url="https://www.suse.com/security/cve/CVE-2017-6440" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002908.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00094.html" source="SUSE-SU"/>
    <description>
    The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6440/">CVE-2017-6440</cve>
	<bugzilla href="https://bugzilla.suse.com/1029631">SUSE bug 1029631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1029706">SUSE bug 1029706</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6505</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6505" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6505" ref_url="https://www.suse.com/security/cve/CVE-2017-6505" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1078-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors, a different vulnerability than CVE-2017-9330.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6505/">CVE-2017-6505</cve>
	<bugzilla href="https://bugzilla.suse.com/1028184">SUSE bug 1028184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028235">SUSE bug 1028235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6507</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6507" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6507" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6507" ref_url="https://www.suse.com/security/cve/CVE-2017-6507" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00011.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files allows an attacker to possibly have increased attack surfaces of processes that were intended to be confined by AppArmor. This is due to the common logic to handle 'restart' operations removing AppArmor profiles that aren't found in the typical filesystem locations, such as /etc/apparmor.d/. Userspace projects that manage their own AppArmor profiles in atypical directories, such as what's done by LXD and Docker, are affected by this flaw in the AppArmor init script logic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-6507/">CVE-2017-6507</cve>
	<bugzilla href="https://bugzilla.suse.com/1029696">SUSE bug 1029696</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628272" comment="apparmor-abstractions-2.13.6-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154052" comment="apparmor-abstractions is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628273" comment="apparmor-docs-2.13.6-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154053" comment="apparmor-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628274" comment="apparmor-parser-2.13.6-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154054" comment="apparmor-parser is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628275" comment="apparmor-parser-lang-2.13.6-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154055" comment="apparmor-parser-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628276" comment="apparmor-profiles-2.13.6-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154056" comment="apparmor-profiles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628277" comment="apparmor-utils-2.13.6-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154057" comment="apparmor-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628278" comment="apparmor-utils-lang-2.13.6-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154058" comment="apparmor-utils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628281" comment="perl-apparmor-2.13.6-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154064" comment="perl-apparmor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628282" comment="python3-apparmor-2.13.6-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154065" comment="python3-apparmor is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6508</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6508" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6508" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6508" ref_url="https://www.suse.com/security/cve/CVE-2017-6508" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002740.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0890-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00113.html" source="SUSE-SU"/>
    <description>
    CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-6508/">CVE-2017-6508</cve>
	<bugzilla href="https://bugzilla.suse.com/1028301">SUSE bug 1028301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159418">SUSE bug 1159418</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482565" comment="wget-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694929" comment="wget-lang-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695522" comment="wget-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6512</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6512" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6512" ref_url="https://www.suse.com/security/cve/CVE-2017-6512" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2229-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012239.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012241.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012242.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012243.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2250-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012244.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012247.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012248.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2256-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012253.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2257-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012254.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2286-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2288-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012277.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2290-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012279.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012281.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012282.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2297-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012307.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012310.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012314.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2314-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012315.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012333.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012334.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012336.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012337.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012338.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2341-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012343.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2342-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2343-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2659-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012651.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2660-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012654.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012655.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2664-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2666-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012672.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012673.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012674.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2701-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012675.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2707-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012676.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012690.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012692.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:323-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013692.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012587.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2951-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0449-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008321.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012233.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    Race condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbitrary files via vectors involving directory-permission loosening logic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-15"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-6512/">CVE-2017-6512</cve>
	<bugzilla href="https://bugzilla.suse.com/1042218">SUSE bug 1042218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047178">SUSE bug 1047178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710215" comment="perl-5.26.1-150300.17.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710248" comment="perl-32bit-5.26.1-150300.17.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151456" comment="perl-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710216" comment="perl-base-5.26.1-150300.17.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710217" comment="perl-base-32bit-5.26.1-150300.17.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153231" comment="perl-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710218" comment="perl-core-DB_File-5.26.1-150300.17.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695544" comment="perl-core-DB_File is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710397" comment="perl-core-DB_File-32bit-5.26.1-150300.17.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009711215" comment="perl-core-DB_File-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710240" comment="perl-doc-5.26.1-150300.17.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151458" comment="perl-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6590</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6590" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6590" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6590" ref_url="https://www.suse.com/security/cve/CVE-2017-6590" source="SUSE CVE"/>
    <description>
    An issue was discovered in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. A local attacker could use this issue at the default Ubuntu login screen to access local files and execute arbitrary commands as the lightdm user. The exploitation requires physical access to the locked computer and the Wi-Fi must be turned on. An access point that lets you use a certificate to login is required as well, but it's easy to create one. Then, it's possible to open a nautilus window and browse directories. One also can open some applications such as Firefox, which is useful for downloading malicious binaries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6590/">CVE-2017-6590</cve>
	<bugzilla href="https://bugzilla.suse.com/1028792">SUSE bug 1028792</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489177" comment="NetworkManager-applet-1.8.24-5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177253" comment="NetworkManager-applet is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489178" comment="NetworkManager-applet-lang-1.8.24-5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177254" comment="NetworkManager-applet-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489179" comment="NetworkManager-connection-editor-1.8.24-5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177255" comment="NetworkManager-connection-editor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487559" comment="libnma0-1.8.24-5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177257" comment="libnma0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487560" comment="nma-data-1.8.24-5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177258" comment="nma-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487561" comment="typelib-1_0-NMA-1_0-1.8.24-5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695549" comment="typelib-1_0-NMA-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176850" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6850</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6850" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6850" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6850" ref_url="https://www.suse.com/security/cve/CVE-2017-6850" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002789.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1034-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00061.html" source="SUSE-SU"/>
    <description>
    The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6850/">CVE-2017-6850</cve>
	<bugzilla href="https://bugzilla.suse.com/1021868">SUSE bug 1021868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176886" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6886</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6886" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6886" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6886" ref_url="https://www.suse.com/security/cve/CVE-2017-6886" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003170.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1460-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00111.html" source="SUSE-SU"/>
    <description>
    An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-6886/">CVE-2017-6886</cve>
	<bugzilla href="https://bugzilla.suse.com/1039380">SUSE bug 1039380</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176887" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6887</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6887" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6887" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6887" ref_url="https://www.suse.com/security/cve/CVE-2017-6887" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003170.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1460-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00111.html" source="SUSE-SU"/>
    <description>
    A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-6887/">CVE-2017-6887</cve>
	<bugzilla href="https://bugzilla.suse.com/1039379">SUSE bug 1039379</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176888" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6888</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6888" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6888" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6888" ref_url="https://www.suse.com/security/cve/CVE-2017-6888" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005317.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1225-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00069.html" source="SUSE-SU"/>
    <description>
    An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c) in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-6888/">CVE-2017-6888</cve>
	<bugzilla href="https://bugzilla.suse.com/1091045">SUSE bug 1091045</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628446" comment="libFLAC8-1.3.2-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152524" comment="libFLAC8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630148" comment="libFLAC8-32bit-1.3.2-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152525" comment="libFLAC8-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176890" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6890</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6890" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6890" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6890" ref_url="https://www.suse.com/security/cve/CVE-2017-6890" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003170.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1460-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00111.html" source="SUSE-SU"/>
    <description>
    A boundary error within the "foveon_load_camf()" function (dcraw_foveon.c) when initializing a huffman table in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a stack-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-6890/">CVE-2017-6890</cve>
	<bugzilla href="https://bugzilla.suse.com/1039209">SUSE bug 1039209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176892" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6892</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6892" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6892" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6892" ref_url="https://www.suse.com/security/cve/CVE-2017-6892" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003705.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0388-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00018.html" source="SUSE-SU"/>
    <description>
    In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6892/">CVE-2017-6892</cve>
	<bugzilla href="https://bugzilla.suse.com/1043978">SUSE bug 1043978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6899</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6899" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6899" ref_url="https://www.suse.com/security/cve/CVE-2017-6899" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003170.html" source="SUSE-SU"/>
    <description>
    The msm_bus_dbg_update_request_write function in drivers/platform/msm/msm_bus/msm_bus_dbg.c in android_kernel_huawei_msm8916 through 2017-06-16 in LineageOS, and possibly other kernels for MSM devices, allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted /sys/kernel/debug/msm-bus-dbg/client-data/update-request write request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6899/">CVE-2017-6899</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6965</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6965" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6965" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6965" ref_url="https://www.suse.com/security/cve/CVE-2017-6965" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6965/">CVE-2017-6965</cve>
	<bugzilla href="https://bugzilla.suse.com/1029909">SUSE bug 1029909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6966</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6966" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6966" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6966" ref_url="https://www.suse.com/security/cve/CVE-2017-6966" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6966/">CVE-2017-6966</cve>
	<bugzilla href="https://bugzilla.suse.com/1029908">SUSE bug 1029908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6969</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6969" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6969" ref_url="https://www.suse.com/security/cve/CVE-2017-6969" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6969/">CVE-2017-6969</cve>
	<bugzilla href="https://bugzilla.suse.com/1029907">SUSE bug 1029907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105209">SUSE bug 1105209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7000</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7000" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7000" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7000" ref_url="https://www.suse.com/security/cve/CVE-2017-7000" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00056.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7000/">CVE-2017-7000</cve>
	<bugzilla href="https://bugzilla.suse.com/1050537">SUSE bug 1050537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177006" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7006</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7006" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7006" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7006" ref_url="https://www.suse.com/security/cve/CVE-2017-7006" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct a timing side-channel attack to bypass the Same Origin Policy and obtain sensitive information via a crafted web site that uses SVG filters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7006/">CVE-2017-7006</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7011</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7011" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7011" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7011" ref_url="https://www.suse.com/security/cve/CVE-2017-7011" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar via a crafted web site that uses FRAME elements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.2/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7011/">CVE-2017-7011</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7012</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7012" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7012" ref_url="https://www.suse.com/security/cve/CVE-2017-7012" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7012/">CVE-2017-7012</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177018" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7018</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7018" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7018" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7018" ref_url="https://www.suse.com/security/cve/CVE-2017-7018" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7018/">CVE-2017-7018</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7019</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7019" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7019" ref_url="https://www.suse.com/security/cve/CVE-2017-7019" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit Page Loading" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7019/">CVE-2017-7019</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7020</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7020" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7020" ref_url="https://www.suse.com/security/cve/CVE-2017-7020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7020/">CVE-2017-7020</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7030</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7030" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7030" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7030" ref_url="https://www.suse.com/security/cve/CVE-2017-7030" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7030/">CVE-2017-7030</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177034" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7034</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7034" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7034" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7034" ref_url="https://www.suse.com/security/cve/CVE-2017-7034" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7034/">CVE-2017-7034</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7037</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7037" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7037" ref_url="https://www.suse.com/security/cve/CVE-2017-7037" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7037/">CVE-2017-7037</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7038</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7038" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7038" ref_url="https://www.suse.com/security/cve/CVE-2017-7038" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.2/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7038/">CVE-2017-7038</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7039</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7039" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7039" ref_url="https://www.suse.com/security/cve/CVE-2017-7039" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7039/">CVE-2017-7039</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7040</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7040" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7040" ref_url="https://www.suse.com/security/cve/CVE-2017-7040" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7040/">CVE-2017-7040</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7041</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7041" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7041" ref_url="https://www.suse.com/security/cve/CVE-2017-7041" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7041/">CVE-2017-7041</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7042</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7042" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7042" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7042" ref_url="https://www.suse.com/security/cve/CVE-2017-7042" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7042/">CVE-2017-7042</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177043" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7043</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7043" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7043" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7043" ref_url="https://www.suse.com/security/cve/CVE-2017-7043" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7043/">CVE-2017-7043</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177046" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7046</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7046" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7046" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7046" ref_url="https://www.suse.com/security/cve/CVE-2017-7046" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7046/">CVE-2017-7046</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7048</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7048" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7048" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7048" ref_url="https://www.suse.com/security/cve/CVE-2017-7048" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7048/">CVE-2017-7048</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7049</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7049" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7049" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7049" ref_url="https://www.suse.com/security/cve/CVE-2017-7049" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7049/">CVE-2017-7049</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7052</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7052" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7052" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7052" ref_url="https://www.suse.com/security/cve/CVE-2017-7052" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7052/">CVE-2017-7052</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7055</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7055" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7055" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7055" ref_url="https://www.suse.com/security/cve/CVE-2017-7055" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7055/">CVE-2017-7055</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7056</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7056" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7056" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7056" ref_url="https://www.suse.com/security/cve/CVE-2017-7056" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7056/">CVE-2017-7056</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177059" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7059</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7059" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7059" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7059" ref_url="https://www.suse.com/security/cve/CVE-2017-7059" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.2/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7059/">CVE-2017-7059</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177061" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7061</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7061" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7061" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7061" ref_url="https://www.suse.com/security/cve/CVE-2017-7061" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7061/">CVE-2017-7061</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7064</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7064" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7064" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7064" ref_url="https://www.suse.com/security/cve/CVE-2017-7064" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7064/">CVE-2017-7064</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7081</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7081" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7081" ref_url="https://www.suse.com/security/cve/CVE-2017-7081" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7081/">CVE-2017-7081</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7087</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7087" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7087" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7087" ref_url="https://www.suse.com/security/cve/CVE-2017-7087" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7087/">CVE-2017-7087</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7089</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7089" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7089" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7089" ref_url="https://www.suse.com/security/cve/CVE-2017-7089" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that is mishandled during parent-tab processing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7089/">CVE-2017-7089</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177090" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7090</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7090" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7090" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7090" ref_url="https://www.suse.com/security/cve/CVE-2017-7090" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive cookie information via a custom URL scheme.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7090/">CVE-2017-7090</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177091" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7091</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7091" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7091" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7091" ref_url="https://www.suse.com/security/cve/CVE-2017-7091" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7091/">CVE-2017-7091</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7092</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7092" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7092" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7092" ref_url="https://www.suse.com/security/cve/CVE-2017-7092" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7092/">CVE-2017-7092</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7093</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7093" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7093" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7093" ref_url="https://www.suse.com/security/cve/CVE-2017-7093" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7093/">CVE-2017-7093</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7094</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7094" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7094" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7094" ref_url="https://www.suse.com/security/cve/CVE-2017-7094" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7094/">CVE-2017-7094</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7095</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7095" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7095" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7095" ref_url="https://www.suse.com/security/cve/CVE-2017-7095" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7095/">CVE-2017-7095</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177096" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7096</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7096" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7096" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7096" ref_url="https://www.suse.com/security/cve/CVE-2017-7096" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7096/">CVE-2017-7096</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7098</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7098" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7098" ref_url="https://www.suse.com/security/cve/CVE-2017-7098" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7098/">CVE-2017-7098</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7099</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7099" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7099" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7099" ref_url="https://www.suse.com/security/cve/CVE-2017-7099" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7099/">CVE-2017-7099</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177100" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7100</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7100" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7100" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7100" ref_url="https://www.suse.com/security/cve/CVE-2017-7100" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7100/">CVE-2017-7100</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177102" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7102</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7102" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7102" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7102" ref_url="https://www.suse.com/security/cve/CVE-2017-7102" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7102/">CVE-2017-7102</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7104</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7104" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7104" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7104" ref_url="https://www.suse.com/security/cve/CVE-2017-7104" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7104/">CVE-2017-7104</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7107</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7107" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7107" ref_url="https://www.suse.com/security/cve/CVE-2017-7107" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7107/">CVE-2017-7107</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7109</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7109" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7109" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7109" ref_url="https://www.suse.com/security/cve/CVE-2017-7109" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via crafted web content that incorrectly interacts with the Application Cache policy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7109/">CVE-2017-7109</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7111</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7111" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7111" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7111" ref_url="https://www.suse.com/security/cve/CVE-2017-7111" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7111/">CVE-2017-7111</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7117</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7117" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7117" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7117" ref_url="https://www.suse.com/security/cve/CVE-2017-7117" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7117/">CVE-2017-7117</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7120</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7120" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7120" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7120" ref_url="https://www.suse.com/security/cve/CVE-2017-7120" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7120/">CVE-2017-7120</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7142</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7142" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7142" ref_url="https://www.suse.com/security/cve/CVE-2017-7142" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. Safari before 11 is affected. The issue involves the "WebKit Storage" component. It allows attackers to bypass the Safari Private Browsing protection mechanism, and consequently obtain sensitive information about visited web sites.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7142/">CVE-2017-7142</cve>
	<bugzilla href="https://bugzilla.suse.com/1066892">SUSE bug 1066892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7153</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7153" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7153" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7153" ref_url="https://www.suse.com/security/cve/CVE-2017-7153" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof user-interface information (about whether the entire content is derived from a valid TLS session) via a crafted web site that sends a 401 Unauthorized redirect.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7153/">CVE-2017-7153</cve>
	<bugzilla href="https://bugzilla.suse.com/1075775">SUSE bug 1075775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077535">SUSE bug 1077535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7156</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7156" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7156" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7156" ref_url="https://www.suse.com/security/cve/CVE-2017-7156" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7156/">CVE-2017-7156</cve>
	<bugzilla href="https://bugzilla.suse.com/1073654">SUSE bug 1073654</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7157</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7157" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7157" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7157" ref_url="https://www.suse.com/security/cve/CVE-2017-7157" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7157/">CVE-2017-7157</cve>
	<bugzilla href="https://bugzilla.suse.com/1073654">SUSE bug 1073654</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7160</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7160" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7160" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7160" ref_url="https://www.suse.com/security/cve/CVE-2017-7160" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7160/">CVE-2017-7160</cve>
	<bugzilla href="https://bugzilla.suse.com/1075775">SUSE bug 1075775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077535">SUSE bug 1077535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7161</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7161" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7161" ref_url="https://www.suse.com/security/cve/CVE-2017-7161" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. Safari before 11.0.2 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code via special characters that trigger command injection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7161/">CVE-2017-7161</cve>
	<bugzilla href="https://bugzilla.suse.com/1075775">SUSE bug 1075775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077535">SUSE bug 1077535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7165</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7165" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7165" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7165" ref_url="https://www.suse.com/security/cve/CVE-2017-7165" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7165/">CVE-2017-7165</cve>
	<bugzilla href="https://bugzilla.suse.com/1075775">SUSE bug 1075775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077535">SUSE bug 1077535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7186</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7186" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7186" ref_url="https://www.suse.com/security/cve/CVE-2017-7186" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009718.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3652-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009715.html" source="SUSE-SU"/>
    <description>
    libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode property lookup.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7186/">CVE-2017-7186</cve>
	<bugzilla href="https://bugzilla.suse.com/1030066">SUSE bug 1030066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1037164">SUSE bug 1037164</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480665" comment="libpcre2-16-0-10.31-1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153649" comment="libpcre2-16-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480667" comment="libpcre2-8-0-10.31-1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153653" comment="libpcre2-8-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7207</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7207" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7207" ref_url="https://www.suse.com/security/cve/CVE-2017-7207" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003973.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00014.html" source="SUSE-SU"/>
    <description>
    The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PostScript document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7207/">CVE-2017-7207</cve>
	<bugzilla href="https://bugzilla.suse.com/1030263">SUSE bug 1030263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036453">SUSE bug 1036453</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7209</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7209" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7209" ref_url="https://www.suse.com/security/cve/CVE-2017-7209" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7209/">CVE-2017-7209</cve>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030298">SUSE bug 1030298</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7210</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7210" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7210" ref_url="https://www.suse.com/security/cve/CVE-2017-7210" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file, leading to program crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7210/">CVE-2017-7210</cve>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030297">SUSE bug 1030297</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7223</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7223" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7223" ref_url="https://www.suse.com/security/cve/CVE-2017-7223" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a program crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7223/">CVE-2017-7223</cve>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030589">SUSE bug 1030589</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177224" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7224</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7224" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7224" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7224" ref_url="https://www.suse.com/security/cve/CVE-2017-7224" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt binary that contains an empty function name, leading to a program crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7224/">CVE-2017-7224</cve>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030588">SUSE bug 1030588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7225</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7225" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7225" ref_url="https://www.suse.com/security/cve/CVE-2017-7225" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer dereference and an invalid write, and leading to a program crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7225/">CVE-2017-7225</cve>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030585">SUSE bug 1030585</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7226</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7226" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7226" ref_url="https://www.suse.com/security/cve/CVE-2017-7226" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2line, size, and strings. It could lead to information disclosure as well.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7226/">CVE-2017-7226</cve>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030584">SUSE bug 1030584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105209">SUSE bug 1105209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7244</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7244" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7244" ref_url="https://www.suse.com/security/cve/CVE-2017-7244" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009718.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3652-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009715.html" source="SUSE-SU"/>
    <description>
    The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7244/">CVE-2017-7244</cve>
	<bugzilla href="https://bugzilla.suse.com/1030807">SUSE bug 1030807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177245" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7245</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7245" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7245" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7245" ref_url="https://www.suse.com/security/cve/CVE-2017-7245" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009718.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3652-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009715.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7245/">CVE-2017-7245</cve>
	<bugzilla href="https://bugzilla.suse.com/1030805">SUSE bug 1030805</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177246" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7246</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7246" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7246" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7246" ref_url="https://www.suse.com/security/cve/CVE-2017-7246" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009718.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3652-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009715.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified other impact via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7246/">CVE-2017-7246</cve>
	<bugzilla href="https://bugzilla.suse.com/1030803">SUSE bug 1030803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030805">SUSE bug 1030805</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177299" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7299</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7299" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7299" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7299" ref_url="https://www.suse.com/security/cve/CVE-2017-7299" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit relocs (bfd_elf_final_link function in bfd/elflink.c) does not check the format of the input file before trying to read the ELF reloc section header. The vulnerability leads to a GNU linker (ld) program crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7299/">CVE-2017-7299</cve>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1031644">SUSE bug 1031644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7300</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7300" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7300" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7300" ref_url="https://www.suse.com/security/cve/CVE-2017-7300" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that is vulnerable to a heap-based buffer over-read (off-by-one) because of an incomplete check for invalid string offsets while loading symbols, leading to a GNU linker (ld) program crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7300/">CVE-2017-7300</cve>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1031656">SUSE bug 1031656</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7301</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7301" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7301" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7301" ref_url="https://www.suse.com/security/cve/CVE-2017-7301" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that has an off-by-one vulnerability because it does not carefully check the string offset. The vulnerability could lead to a GNU linker (ld) program crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7301/">CVE-2017-7301</cve>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1031638">SUSE bug 1031638</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7302</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7302" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7302" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7302" ref_url="https://www.suse.com/security/cve/CVE-2017-7302" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.h that is vulnerable to an invalid read (of size 4) because of missing checks for relocs that could not be recognised. This vulnerability causes Binutils utilities like strip to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7302/">CVE-2017-7302</cve>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1031595">SUSE bug 1031595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177303" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7303</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7303" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7303" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7303" ref_url="https://www.suse.com/security/cve/CVE-2017-7303" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 4) because of missing a check (in the find_link function) for null headers before attempting to match them. This vulnerability causes Binutils utilities like strip to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7303/">CVE-2017-7303</cve>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1031593">SUSE bug 1031593</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7304</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7304" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7304" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7304" ref_url="https://www.suse.com/security/cve/CVE-2017-7304" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8) because of missing a check (in the copy_special_section_fields function) for an invalid sh_link field before attempting to follow it. This vulnerability causes Binutils utilities like strip to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7304/">CVE-2017-7304</cve>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1031590">SUSE bug 1031590</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7435</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7435" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7435" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7435" ref_url="https://www.suse.com/security/cve/CVE-2017-7435" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2264-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004510.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2688-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004553.html" source="SUSE-SU"/>
		<reference ref_id="TID000018998" ref_url="https://www.suse.com/support/kb/doc/?id=000018998" source="SUSE-SU"/>
		<reference ref_id="TID7021171" ref_url="https://www.suse.com/support/kb/doc/?id=7021171" source="SUSE-SU"/>
		<reference ref_id="TID7021201" ref_url="https://www.suse.com/support/kb/doc/?id=7021201" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00005.html" source="SUSE-SU"/>
    <description>
    In libzypp before 20170803 it was possible to add unsigned YUM repositories without warning to the user that could lead to man in the middle or malicious servers to inject malicious RPM packages into a users system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7435/">CVE-2017-7435</cve>
	<bugzilla href="https://bugzilla.suse.com/1009127">SUSE bug 1009127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038984">SUSE bug 1038984</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1045735">SUSE bug 1045735</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694899" comment="libzypp-17.25.10-3.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161722" comment="libzypp is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7436</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7436" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7436" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7436" ref_url="https://www.suse.com/security/cve/CVE-2017-7436" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2264-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2344-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004510.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2688-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004553.html" source="SUSE-SU"/>
		<reference ref_id="TID000018998" ref_url="https://www.suse.com/support/kb/doc/?id=000018998" source="SUSE-SU"/>
		<reference ref_id="TID7021171" ref_url="https://www.suse.com/support/kb/doc/?id=7021171" source="SUSE-SU"/>
		<reference ref_id="TID7021201" ref_url="https://www.suse.com/support/kb/doc/?id=7021201" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00014.html" source="SUSE-SU"/>
    <description>
    In libzypp before 20170803 it was possible to retrieve unsigned packages without a warning to the user which could lead to man in the middle or malicious servers to inject malicious RPM packages into a users system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7436/">CVE-2017-7436</cve>
	<bugzilla href="https://bugzilla.suse.com/1008325">SUSE bug 1008325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1009127">SUSE bug 1009127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038984">SUSE bug 1038984</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1045735">SUSE bug 1045735</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694899" comment="libzypp-17.25.10-3.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161722" comment="libzypp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629062" comment="zypper-1.14.43-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251910" comment="zypper is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629063" comment="zypper-log-1.14.43-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251912" comment="zypper-log is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629064" comment="zypper-needs-restarting-1.14.43-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009262480" comment="zypper-needs-restarting is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177468" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7468</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7468" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7468" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7468" ref_url="https://www.suse.com/security/cve/CVE-2017-7468" source="SUSE CVE"/>
    <description>
    In curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session even if the client certificate had changed. That is unacceptable since a server by specification is allowed to skip the client certificate check on resume, and may instead use the old identity which was established by the previous certificate (or no certificate). libcurl supports by default the use of TLS session id/ticket to resume previous TLS sessions to speed up subsequent TLS handshakes. They are used when for any reason an existing TLS connection couldn't be kept alive to make the next handshake faster. This flaw is a regression and identical to CVE-2016-5419 reported on August 3rd 2016, but affecting a different version range.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-7468/">CVE-2017-7468</cve>
	<bugzilla href="https://bugzilla.suse.com/1033413">SUSE bug 1033413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033442">SUSE bug 1033442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042181">SUSE bug 1042181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991389">SUSE bug 991389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177471" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7471</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7471" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7471" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7471" ref_url="https://www.suse.com/security/cve/CVE-2017-7471" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7471/">CVE-2017-7471</cve>
	<bugzilla href="https://bugzilla.suse.com/1034866">SUSE bug 1034866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1034990">SUSE bug 1034990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7475</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7475" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7475" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7475" ref_url="https://www.suse.com/security/cve/CVE-2017-7475" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002978.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004095.html" source="SUSE-SU"/>
    <description>
    Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7475/">CVE-2017-7475</cve>
	<bugzilla href="https://bugzilla.suse.com/1036789">SUSE bug 1036789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481781" comment="libcairo-gobject2-1.16.0-1.55 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158152" comment="libcairo-gobject2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481783" comment="libcairo2-1.16.0-1.55 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158156" comment="libcairo2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7476</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7476" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7476" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7476" ref_url="https://www.suse.com/security/cve/CVE-2017-7476" source="SUSE CVE"/>
    <description>
    Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the save_abbr function in time_rz.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7476/">CVE-2017-7476</cve>
	<bugzilla href="https://bugzilla.suse.com/1036636">SUSE bug 1036636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1037124">SUSE bug 1037124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1037125">SUSE bug 1037125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1037142">SUSE bug 1037142</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628358" comment="coreutils-8.32-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151803" comment="coreutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694732" comment="coreutils-doc-8.32-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695525" comment="coreutils-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628359" comment="coreutils-lang-8.32-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151804" comment="coreutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628430" comment="emacs-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151668" comment="emacs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628432" comment="emacs-info-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151669" comment="emacs-info is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628433" comment="emacs-nox-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151670" comment="emacs-nox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628434" comment="etags-25.3-3.6.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151672" comment="etags is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7493</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7493" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7493" ref_url="https://www.suse.com/security/cve/CVE-2017-7493" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges inside guest.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7493/">CVE-2017-7493</cve>
	<bugzilla href="https://bugzilla.suse.com/1039495">SUSE bug 1039495</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7494</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7494" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7494" ref_url="https://www.suse.com/security/cve/CVE-2017-7494" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1396-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002918.html" source="SUSE-SU"/>
		<reference ref_id="TID7014420" ref_url="https://www.suse.com/support/kb/doc/?id=7014420" source="SUSE-SU"/>
		<reference ref_id="TID7017947" ref_url="https://www.suse.com/support/kb/doc/?id=7017947" source="SUSE-SU"/>
		<reference ref_id="TID7019508" ref_url="https://www.suse.com/support/kb/doc/?id=7019508" source="SUSE-SU"/>
		<reference ref_id="TID7021068" ref_url="https://www.suse.com/support/kb/doc/?id=7021068" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1401-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00072.html" source="SUSE-SU"/>
    <description>
    Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7494/">CVE-2017-7494</cve>
	<bugzilla href="https://bugzilla.suse.com/1038231">SUSE bug 1038231</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7500</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7500" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7500" ref_url="https://www.suse.com/security/cve/CVE-2017-7500" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004319.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3286-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004757.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3884-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3884-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005393.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3373-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00058.html" source="SUSE-SU"/>
    <description>
    It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory in which a subdirectory will be installed, could redirect that directory to an arbitrary location and gain root privilege.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7500/">CVE-2017-7500</cve>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135195">SUSE bug 1135195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157882">SUSE bug 1157882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157883">SUSE bug 1157883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943457">SUSE bug 943457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964063">SUSE bug 964063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629008" comment="rpm-4.14.1-29.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151943" comment="rpm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629009" comment="rpm-32bit-4.14.1-29.46 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151944" comment="rpm-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7511</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7511" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7511" ref_url="https://www.suse.com/security/cve/CVE-2017-7511" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2056-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00015.html" source="SUSE-SU"/>
    <description>
    poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7511/">CVE-2017-7511</cve>
	<bugzilla href="https://bugzilla.suse.com/1041783">SUSE bug 1041783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628826" comment="libpoppler-cpp0-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628829" comment="libpoppler-glib8-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630169" comment="libpoppler-qt5-1-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628830" comment="libpoppler89-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695546" comment="libpoppler89 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628831" comment="poppler-tools-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7515</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7515" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7515" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7515" ref_url="https://www.suse.com/security/cve/CVE-2017-7515" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2056-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00015.html" source="SUSE-SU"/>
    <description>
    poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7515/">CVE-2017-7515</cve>
	<bugzilla href="https://bugzilla.suse.com/1043088">SUSE bug 1043088</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628826" comment="libpoppler-cpp0-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628829" comment="libpoppler-glib8-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630169" comment="libpoppler-qt5-1-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628830" comment="libpoppler89-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695546" comment="libpoppler89 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628831" comment="poppler-tools-0.79.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7521</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7521" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7521" ref_url="https://www.suse.com/security/cve/CVE-2017-7521" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1635-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00031.html" source="SUSE-SU"/>
    <description>
    OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extract_x509_extension().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7521/">CVE-2017-7521</cve>
	<bugzilla href="https://bugzilla.suse.com/1044947">SUSE bug 1044947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694906" comment="openvpn-2.4.3-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152221" comment="openvpn is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7522</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7522" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7522" ref_url="https://www.suse.com/security/cve/CVE-2017-7522" source="SUSE CVE"/>
    <description>
    OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7522/">CVE-2017-7522</cve>
	<bugzilla href="https://bugzilla.suse.com/1044947">SUSE bug 1044947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694906" comment="openvpn-2.4.3-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152221" comment="openvpn is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7526</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7526" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7526" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7526" ref_url="https://www.suse.com/security/cve/CVE-2017-7526" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1866-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1822-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00043.html" source="SUSE-SU"/>
    <description>
    libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7526/">CVE-2017-7526</cve>
	<bugzilla href="https://bugzilla.suse.com/1046607">SUSE bug 1046607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047462">SUSE bug 1047462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123792">SUSE bug 1123792</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482233" comment="libgcrypt20-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482234" comment="libgcrypt20-32bit-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7544</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7544" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7544" ref_url="https://www.suse.com/security/cve/CVE-2017-7544" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003625.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007105.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0211-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html" source="SUSE-SU"/>
    <description>
    libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7544/">CVE-2017-7544</cve>
	<bugzilla href="https://bugzilla.suse.com/1059893">SUSE bug 1059893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629201" comment="libexif12-0.6.22-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7555</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7555" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7555" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7555" ref_url="https://www.suse.com/security/cve/CVE-2017-7555" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0652-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003801.html" source="SUSE-SU"/>
    <description>
    Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. Attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7555/">CVE-2017-7555</cve>
	<bugzilla href="https://bugzilla.suse.com/1054171">SUSE bug 1054171</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480071" comment="augeas-1.10.1-1.11 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154101" comment="augeas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480073" comment="augeas-lenses-1.10.1-1.11 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151682" comment="augeas-lenses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480074" comment="libaugeas0-1.10.1-1.11 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151683" comment="libaugeas0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177585" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7585</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7585" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7585" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7585" ref_url="https://www.suse.com/security/cve/CVE-2017-7585" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002804.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1040-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002906.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1107-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1427-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00095.html" source="SUSE-SU"/>
    <description>
    In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7585/">CVE-2017-7585</cve>
	<bugzilla href="https://bugzilla.suse.com/1033054">SUSE bug 1033054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033914">SUSE bug 1033914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033915">SUSE bug 1033915</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7586</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7586" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7586" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7586" ref_url="https://www.suse.com/security/cve/CVE-2017-7586" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1040-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002806.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1107-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00096.html" source="SUSE-SU"/>
    <description>
    In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7586/">CVE-2017-7586</cve>
	<bugzilla href="https://bugzilla.suse.com/1033053">SUSE bug 1033053</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7592</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7592" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7592" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7592" ref_url="https://www.suse.com/security/cve/CVE-2017-7592" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003259.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7592/">CVE-2017-7592</cve>
	<bugzilla href="https://bugzilla.suse.com/1033131">SUSE bug 1033131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7593</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7593" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7593" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7593" ref_url="https://www.suse.com/security/cve/CVE-2017-7593" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7593/">CVE-2017-7593</cve>
	<bugzilla href="https://bugzilla.suse.com/1033129">SUSE bug 1033129</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7594</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7594" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7594" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7594" ref_url="https://www.suse.com/security/cve/CVE-2017-7594" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003259.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7594/">CVE-2017-7594</cve>
	<bugzilla href="https://bugzilla.suse.com/1033128">SUSE bug 1033128</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177595" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7595</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7595" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7595" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7595" ref_url="https://www.suse.com/security/cve/CVE-2017-7595" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7595/">CVE-2017-7595</cve>
	<bugzilla href="https://bugzilla.suse.com/1033111">SUSE bug 1033111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033127">SUSE bug 1033127</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7596</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7596" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7596" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7596" ref_url="https://www.suse.com/security/cve/CVE-2017-7596" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7596/">CVE-2017-7596</cve>
	<bugzilla href="https://bugzilla.suse.com/1033112">SUSE bug 1033112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033113">SUSE bug 1033113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033120">SUSE bug 1033120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033126">SUSE bug 1033126</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7597</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7597" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7597" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7597" ref_url="https://www.suse.com/security/cve/CVE-2017-7597" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7597/">CVE-2017-7597</cve>
	<bugzilla href="https://bugzilla.suse.com/1033112">SUSE bug 1033112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033113">SUSE bug 1033113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033120">SUSE bug 1033120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033126">SUSE bug 1033126</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7598</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7598" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7598" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7598" ref_url="https://www.suse.com/security/cve/CVE-2017-7598" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003259.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7598/">CVE-2017-7598</cve>
	<bugzilla href="https://bugzilla.suse.com/1033118">SUSE bug 1033118</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7599</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7599" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7599" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7599" ref_url="https://www.suse.com/security/cve/CVE-2017-7599" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7599/">CVE-2017-7599</cve>
	<bugzilla href="https://bugzilla.suse.com/1033112">SUSE bug 1033112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033113">SUSE bug 1033113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033120">SUSE bug 1033120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033126">SUSE bug 1033126</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7600</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7600" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7600" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7600" ref_url="https://www.suse.com/security/cve/CVE-2017-7600" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7600/">CVE-2017-7600</cve>
	<bugzilla href="https://bugzilla.suse.com/1033112">SUSE bug 1033112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033113">SUSE bug 1033113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033120">SUSE bug 1033120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033126">SUSE bug 1033126</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7601</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7601" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7601" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7601" ref_url="https://www.suse.com/security/cve/CVE-2017-7601" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7601/">CVE-2017-7601</cve>
	<bugzilla href="https://bugzilla.suse.com/1033111">SUSE bug 1033111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033127">SUSE bug 1033127</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7602</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7602" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7602" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7602" ref_url="https://www.suse.com/security/cve/CVE-2017-7602" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7602/">CVE-2017-7602</cve>
	<bugzilla href="https://bugzilla.suse.com/1033109">SUSE bug 1033109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7607</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7607" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7607" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7607" ref_url="https://www.suse.com/security/cve/CVE-2017-7607" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html" source="SUSE-SU"/>
    <description>
    The handle_gnu_hash function in readelf.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7607/">CVE-2017-7607</cve>
	<bugzilla href="https://bugzilla.suse.com/1033084">SUSE bug 1033084</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490191" comment="elfutils-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490192" comment="elfutils-lang-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490194" comment="libasm1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490196" comment="libdw1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490197" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490199" comment="libebl-plugins-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490200" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490202" comment="libelf1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490203" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177608" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7608</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7608" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7608" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7608" ref_url="https://www.suse.com/security/cve/CVE-2017-7608" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html" source="SUSE-SU"/>
    <description>
    The ebl_object_note_type_name function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7608/">CVE-2017-7608</cve>
	<bugzilla href="https://bugzilla.suse.com/1033085">SUSE bug 1033085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490191" comment="elfutils-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490192" comment="elfutils-lang-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490194" comment="libasm1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490196" comment="libdw1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490197" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490199" comment="libebl-plugins-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490200" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490202" comment="libelf1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490203" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177609" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7609</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7609" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7609" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7609" ref_url="https://www.suse.com/security/cve/CVE-2017-7609" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html" source="SUSE-SU"/>
    <description>
    elf_compress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7609/">CVE-2017-7609</cve>
	<bugzilla href="https://bugzilla.suse.com/1033086">SUSE bug 1033086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490191" comment="elfutils-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490192" comment="elfutils-lang-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490194" comment="libasm1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490196" comment="libdw1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490197" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490199" comment="libebl-plugins-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490200" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490202" comment="libelf1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490203" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177610" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7610</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7610" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7610" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7610" ref_url="https://www.suse.com/security/cve/CVE-2017-7610" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html" source="SUSE-SU"/>
    <description>
    The check_group function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7610/">CVE-2017-7610</cve>
	<bugzilla href="https://bugzilla.suse.com/1033087">SUSE bug 1033087</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490191" comment="elfutils-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490192" comment="elfutils-lang-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490194" comment="libasm1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490196" comment="libdw1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490197" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490199" comment="libebl-plugins-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490200" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490202" comment="libelf1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490203" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177611" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7611</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7611" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7611" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7611" ref_url="https://www.suse.com/security/cve/CVE-2017-7611" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html" source="SUSE-SU"/>
    <description>
    The check_symtab_shndx function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7611/">CVE-2017-7611</cve>
	<bugzilla href="https://bugzilla.suse.com/1033088">SUSE bug 1033088</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490191" comment="elfutils-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490192" comment="elfutils-lang-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490194" comment="libasm1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490196" comment="libdw1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490197" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490199" comment="libebl-plugins-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490200" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490202" comment="libelf1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490203" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177612" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7612</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7612" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7612" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7612" ref_url="https://www.suse.com/security/cve/CVE-2017-7612" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html" source="SUSE-SU"/>
    <description>
    The check_sysv_hash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7612/">CVE-2017-7612</cve>
	<bugzilla href="https://bugzilla.suse.com/1033089">SUSE bug 1033089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490191" comment="elfutils-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490192" comment="elfutils-lang-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490194" comment="libasm1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490196" comment="libdw1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490197" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490199" comment="libebl-plugins-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490200" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490202" comment="libelf1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490203" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7613</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7613" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7613" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7613" ref_url="https://www.suse.com/security/cve/CVE-2017-7613" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html" source="SUSE-SU"/>
    <description>
    elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7613/">CVE-2017-7613</cve>
	<bugzilla href="https://bugzilla.suse.com/1033090">SUSE bug 1033090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490191" comment="elfutils-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490192" comment="elfutils-lang-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490194" comment="libasm1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490196" comment="libdw1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490197" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490199" comment="libebl-plugins-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490200" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490202" comment="libelf1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490203" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7749</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7749" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7749" ref_url="https://www.suse.com/security/cve/CVE-2017-7749" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potentially exploitable crash. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7749/">CVE-2017-7749</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7750</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7750" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7750" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7750" ref_url="https://www.suse.com/security/cve/CVE-2017-7750" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability during video control operations when a "&lt;track&gt;" element holds a reference to an older window if that window has been replaced in the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7750/">CVE-2017-7750</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7751</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7751" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7751" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7751" ref_url="https://www.suse.com/security/cve/CVE-2017-7751" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7751/">CVE-2017-7751</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7752</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7752" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7752" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7752" ref_url="https://www.suse.com/security/cve/CVE-2017-7752" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages due to how events are handled. This results in a potentially exploitable crash but would require specific user interaction to trigger. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7752/">CVE-2017-7752</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7753</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7753" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7753" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7753" ref_url="https://www.suse.com/security/cve/CVE-2017-7753" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00056.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird &lt; 52.3, Firefox ESR &lt; 52.3, and Firefox &lt; 55.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7753/">CVE-2017-7753</cve>
	<bugzilla href="https://bugzilla.suse.com/1052829">SUSE bug 1052829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7754</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7754" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7754" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7754" ref_url="https://www.suse.com/security/cve/CVE-2017-7754" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7754/">CVE-2017-7754</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7755</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7755" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7755" ref_url="https://www.suse.com/security/cve/CVE-2017-7755" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer when it is run. This allows privileged execution if the installer is run with elevated privileges. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7755/">CVE-2017-7755</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7756</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7756" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7756" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7756" ref_url="https://www.suse.com/security/cve/CVE-2017-7756" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). This could result in a potentially exploitable crash. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7756/">CVE-2017-7756</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177757" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7757</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7757" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7757" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7757" ref_url="https://www.suse.com/security/cve/CVE-2017-7757" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. This results in a potentially exploitable crash. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7757/">CVE-2017-7757</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7758</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7758" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7758" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7758" ref_url="https://www.suse.com/security/cve/CVE-2017-7758" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while the encoder is in use. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7758/">CVE-2017-7758</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7760</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7760" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7760" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7760" ref_url="https://www.suse.com/security/cve/CVE-2017-7760" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    The Mozilla Windows updater modifies some files to be updated by reading the original file and applying changes to it. The location of the original file can be altered by a malicious user by passing a special path to the callback parameter through the Mozilla Maintenance Service, allowing the manipulation of files in the installation directory and privilege escalation by manipulating the Mozilla Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR &lt; 52.2 and Firefox &lt; 54.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7760/">CVE-2017-7760</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7761</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7761" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7761" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7761" ref_url="https://www.suse.com/security/cve/CVE-2017-7761" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    The Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable by non-privileged users. When this is combined with creation of a junction (a form of symbolic link), protected files in the target directory of the junction can be deleted by the Mozilla Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR &lt; 52.2 and Firefox &lt; 54.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-7761/">CVE-2017-7761</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7763</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7763" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7763" ref_url="https://www.suse.com/security/cve/CVE-2017-7763" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
    <description>
    Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7763/">CVE-2017-7763</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7764</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7764" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7764" ref_url="https://www.suse.com/security/cve/CVE-2017-7764" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw "punycode" form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows characters from "Aspirational Use Scripts" such as Canadian Syllabics to be mixed with Latin characters in the "moderately restrictive" IDN profile. We have changed Firefox behavior to match the upcoming Unicode version 10.0 which removes this category and treats them as "Limited Use Scripts.". This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.2/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7764/">CVE-2017-7764</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7765</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7765" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7765" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7765" ref_url="https://www.suse.com/security/cve/CVE-2017-7765" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-7765/">CVE-2017-7765</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7766</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7766" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7766" ref_url="https://www.suse.com/security/cve/CVE-2017-7766" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    An attack using manipulation of "updater.ini" contents, used by the Mozilla Windows Updater, and privilege escalation through the Mozilla Maintenance Service to allow for arbitrary file execution and deletion by the Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR &lt; 52.2 and Firefox &lt; 54.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7766/">CVE-2017-7766</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7767</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7767" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7767" ref_url="https://www.suse.com/security/cve/CVE-2017-7767" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    The Mozilla Maintenance Service can be invoked by an unprivileged user to overwrite arbitrary files with junk data using the Mozilla Windows Updater, which runs with the Maintenance Service's privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR &lt; 52.2 and Firefox &lt; 54.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-7767/">CVE-2017-7767</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7768</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7768" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7768" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7768" ref_url="https://www.suse.com/security/cve/CVE-2017-7768" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the local system by convincing the service that it is reading a status file provided by the Mozilla Windows Updater. The Mozilla Maintenance Service executes with privileged access, bypassing system protections against unprivileged users. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR &lt; 52.2 and Firefox &lt; 54.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7768/">CVE-2017-7768</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7771</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7771" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7771" ref_url="https://www.suse.com/security/cve/CVE-2017-7771" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7771/">CVE-2017-7771</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7772</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7772" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7772" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7772" ref_url="https://www.suse.com/security/cve/CVE-2017-7772" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7772/">CVE-2017-7772</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7773</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7773" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7773" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7773" ref_url="https://www.suse.com/security/cve/CVE-2017-7773" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7773/">CVE-2017-7773</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7774</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7774" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7774" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7774" ref_url="https://www.suse.com/security/cve/CVE-2017-7774" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7774/">CVE-2017-7774</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7775</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7775" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7775" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7775" ref_url="https://www.suse.com/security/cve/CVE-2017-7775" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7775/">CVE-2017-7775</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7776</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7776" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7776" ref_url="https://www.suse.com/security/cve/CVE-2017-7776" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7776/">CVE-2017-7776</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7777</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7777" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7777" ref_url="https://www.suse.com/security/cve/CVE-2017-7777" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7777/">CVE-2017-7777</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7778</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7778" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7778" ref_url="https://www.suse.com/security/cve/CVE-2017-7778" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2 version 1.3.10. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7778/">CVE-2017-7778</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7779</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7779" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7779" ref_url="https://www.suse.com/security/cve/CVE-2017-7779" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00056.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 52.3, Firefox ESR &lt; 52.3, and Firefox &lt; 55.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7779/">CVE-2017-7779</cve>
	<bugzilla href="https://bugzilla.suse.com/1052829">SUSE bug 1052829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7782</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7782" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7782" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7782" ref_url="https://www.suse.com/security/cve/CVE-2017-7782" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00056.html" source="SUSE-SU"/>
    <description>
    An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never protected, violating DEP protections. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird &lt; 52.3, Firefox ESR &lt; 52.3, and Firefox &lt; 55.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7782/">CVE-2017-7782</cve>
	<bugzilla href="https://bugzilla.suse.com/1052829">SUSE bug 1052829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177784" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7784</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7784" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7784" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7784" ref_url="https://www.suse.com/security/cve/CVE-2017-7784" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00056.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.3, Firefox ESR &lt; 52.3, and Firefox &lt; 55.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7784/">CVE-2017-7784</cve>
	<bugzilla href="https://bugzilla.suse.com/1052829">SUSE bug 1052829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177785" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7785</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7785" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7785" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7785" ref_url="https://www.suse.com/security/cve/CVE-2017-7785" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00056.html" source="SUSE-SU"/>
    <description>
    A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.3, Firefox ESR &lt; 52.3, and Firefox &lt; 55.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7785/">CVE-2017-7785</cve>
	<bugzilla href="https://bugzilla.suse.com/1052829">SUSE bug 1052829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177786" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7786</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7786" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7786" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7786" ref_url="https://www.suse.com/security/cve/CVE-2017-7786" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00056.html" source="SUSE-SU"/>
    <description>
    A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.3, Firefox ESR &lt; 52.3, and Firefox &lt; 55.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7786/">CVE-2017-7786</cve>
	<bugzilla href="https://bugzilla.suse.com/1052829">SUSE bug 1052829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7787</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7787" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7787" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7787" ref_url="https://www.suse.com/security/cve/CVE-2017-7787" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00056.html" source="SUSE-SU"/>
    <description>
    Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird &lt; 52.3, Firefox ESR &lt; 52.3, and Firefox &lt; 55.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7787/">CVE-2017-7787</cve>
	<bugzilla href="https://bugzilla.suse.com/1052829">SUSE bug 1052829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7791</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7791" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7791" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7791" ref_url="https://www.suse.com/security/cve/CVE-2017-7791" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00056.html" source="SUSE-SU"/>
    <description>
    On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird &lt; 52.3, Firefox ESR &lt; 52.3, and Firefox &lt; 55.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.2/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7791/">CVE-2017-7791</cve>
	<bugzilla href="https://bugzilla.suse.com/1052829">SUSE bug 1052829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7792</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7792" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7792" ref_url="https://www.suse.com/security/cve/CVE-2017-7792" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00056.html" source="SUSE-SU"/>
    <description>
    A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.3, Firefox ESR &lt; 52.3, and Firefox &lt; 55.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7792/">CVE-2017-7792</cve>
	<bugzilla href="https://bugzilla.suse.com/1052829">SUSE bug 1052829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7793</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7793" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7793" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7793" ref_url="https://www.suse.com/security/cve/CVE-2017-7793" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2688-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00014.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. This vulnerability affects Firefox &lt; 56, Firefox ESR &lt; 52.4, and Thunderbird &lt; 52.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7793/">CVE-2017-7793</cve>
	<bugzilla href="https://bugzilla.suse.com/1060445">SUSE bug 1060445</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7798</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7798" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7798" ref_url="https://www.suse.com/security/cve/CVE-2017-7798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00056.html" source="SUSE-SU"/>
    <description>
    The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR &lt; 52.3 and Firefox &lt; 55.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7798/">CVE-2017-7798</cve>
	<bugzilla href="https://bugzilla.suse.com/1052829">SUSE bug 1052829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7800</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7800" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7800" ref_url="https://www.suse.com/security/cve/CVE-2017-7800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00056.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird &lt; 52.3, Firefox ESR &lt; 52.3, and Firefox &lt; 55.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7800/">CVE-2017-7800</cve>
	<bugzilla href="https://bugzilla.suse.com/1052829">SUSE bug 1052829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7801</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7801" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7801" ref_url="https://www.suse.com/security/cve/CVE-2017-7801" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00056.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style object is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.3, Firefox ESR &lt; 52.3, and Firefox &lt; 55.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7801/">CVE-2017-7801</cve>
	<bugzilla href="https://bugzilla.suse.com/1052829">SUSE bug 1052829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7802</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7802" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7802" ref_url="https://www.suse.com/security/cve/CVE-2017-7802" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00056.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird &lt; 52.3, Firefox ESR &lt; 52.3, and Firefox &lt; 55.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7802/">CVE-2017-7802</cve>
	<bugzilla href="https://bugzilla.suse.com/1052829">SUSE bug 1052829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7803</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7803" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7803" ref_url="https://www.suse.com/security/cve/CVE-2017-7803" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00056.html" source="SUSE-SU"/>
    <description>
    When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored. This results in the incorrect enforcement of CSP. This vulnerability affects Thunderbird &lt; 52.3, Firefox ESR &lt; 52.3, and Firefox &lt; 55.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7803/">CVE-2017-7803</cve>
	<bugzilla href="https://bugzilla.suse.com/1052829">SUSE bug 1052829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7804</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7804" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7804" ref_url="https://www.suse.com/security/cve/CVE-2017-7804" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00056.html" source="SUSE-SU"/>
    <description>
    The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with another vulnerability to write arbitrary data to an attacker controlled location in memory. This can be used to bypass existing memory protections in this situation. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird &lt; 52.3, Firefox ESR &lt; 52.3, and Firefox &lt; 55.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-7804/">CVE-2017-7804</cve>
	<bugzilla href="https://bugzilla.suse.com/1052829">SUSE bug 1052829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7805</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7805" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7805" ref_url="https://www.suse.com/security/cve/CVE-2017-7805" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2688-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00014.html" source="SUSE-SU"/>
    <description>
    During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in some cases, the handshake transcript can exceed the space available in the current buffer, causing the allocation of a new buffer. This leaves a pointer pointing to the old, freed buffer, resulting in a use-after-free when handshake hashes are then calculated afterwards. This can result in a potentially exploitable crash. This vulnerability affects Firefox &lt; 56, Firefox ESR &lt; 52.4, and Thunderbird &lt; 52.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7805/">CVE-2017-7805</cve>
	<bugzilla href="https://bugzilla.suse.com/1060445">SUSE bug 1060445</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061005">SUSE bug 1061005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7807</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7807" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7807" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7807" ref_url="https://www.suse.com/security/cve/CVE-2017-7807" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00056.html" source="SUSE-SU"/>
    <description>
    A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird &lt; 52.3, Firefox ESR &lt; 52.3, and Firefox &lt; 55.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7807/">CVE-2017-7807</cve>
	<bugzilla href="https://bugzilla.suse.com/1052829">SUSE bug 1052829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7810</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7810" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7810" ref_url="https://www.suse.com/security/cve/CVE-2017-7810" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2688-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00014.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 56, Firefox ESR &lt; 52.4, and Thunderbird &lt; 52.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7810/">CVE-2017-7810</cve>
	<bugzilla href="https://bugzilla.suse.com/1060445">SUSE bug 1060445</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7814</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7814" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7814" ref_url="https://www.suse.com/security/cve/CVE-2017-7814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2688-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00014.html" source="SUSE-SU"/>
    <description>
    File downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks though the Phishing and Malware Protection feature and its block lists of suspicious sites and files. This would allow malicious sites to lure users into downloading executables that would otherwise be detected as suspicious. This vulnerability affects Firefox &lt; 56, Firefox ESR &lt; 52.4, and Thunderbird &lt; 52.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7814/">CVE-2017-7814</cve>
	<bugzilla href="https://bugzilla.suse.com/1060445">SUSE bug 1060445</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7818</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7818" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7818" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7818" ref_url="https://www.suse.com/security/cve/CVE-2017-7818" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2688-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00014.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within containers through the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox &lt; 56, Firefox ESR &lt; 52.4, and Thunderbird &lt; 52.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7818/">CVE-2017-7818</cve>
	<bugzilla href="https://bugzilla.suse.com/1060445">SUSE bug 1060445</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7819</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7819" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7819" ref_url="https://www.suse.com/security/cve/CVE-2017-7819" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2688-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00014.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the resizing have been freed from memory. This results in a potentially exploitable crash. This vulnerability affects Firefox &lt; 56, Firefox ESR &lt; 52.4, and Thunderbird &lt; 52.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7819/">CVE-2017-7819</cve>
	<bugzilla href="https://bugzilla.suse.com/1060445">SUSE bug 1060445</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7823</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7823" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7823" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7823" ref_url="https://www.suse.com/security/cve/CVE-2017-7823" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2688-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00014.html" source="SUSE-SU"/>
    <description>
    The content security policy (CSP) "sandbox" directive did not create a unique origin for the document, causing it to behave as if the "allow-same-origin" keyword were always specified. This could allow a Cross-Site Scripting (XSS) attack to be launched from unsafe content. This vulnerability affects Firefox &lt; 56, Firefox ESR &lt; 52.4, and Thunderbird &lt; 52.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7823/">CVE-2017-7823</cve>
	<bugzilla href="https://bugzilla.suse.com/1060445">SUSE bug 1060445</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7824</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7824" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7824" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7824" ref_url="https://www.suse.com/security/cve/CVE-2017-7824" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2688-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00014.html" source="SUSE-SU"/>
    <description>
    A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. This vulnerability affects Firefox &lt; 56, Firefox ESR &lt; 52.4, and Thunderbird &lt; 52.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7824/">CVE-2017-7824</cve>
	<bugzilla href="https://bugzilla.suse.com/1060445">SUSE bug 1060445</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7825</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7825" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7825" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7825" ref_url="https://www.suse.com/security/cve/CVE-2017-7825" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2688-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2872-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00014.html" source="SUSE-SU"/>
    <description>
    Several fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox &lt; 56, Firefox ESR &lt; 52.4, and Thunderbird &lt; 52.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7825/">CVE-2017-7825</cve>
	<bugzilla href="https://bugzilla.suse.com/1060445">SUSE bug 1060445</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7826</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7826" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7826" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7826" ref_url="https://www.suse.com/security/cve/CVE-2017-7826" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3027-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3108-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3110-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00087.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 57, Firefox ESR &lt; 52.5, and Thunderbird &lt; 52.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7826/">CVE-2017-7826</cve>
	<bugzilla href="https://bugzilla.suse.com/1068101">SUSE bug 1068101</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7828</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7828" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7828" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7828" ref_url="https://www.suse.com/security/cve/CVE-2017-7828" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3027-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3108-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3110-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00087.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been freed while still in use. This results in a potentially exploitable crash during these operations. This vulnerability affects Firefox &lt; 57, Firefox ESR &lt; 52.5, and Thunderbird &lt; 52.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7828/">CVE-2017-7828</cve>
	<bugzilla href="https://bugzilla.suse.com/1068101">SUSE bug 1068101</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7829</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7829" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7829" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7829" ref_url="https://www.suse.com/security/cve/CVE-2017-7829" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00092.html" source="SUSE-SU"/>
    <description>
    It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed if preceded by a null character in the display string. This vulnerability affects Thunderbird &lt; 52.5.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7829/">CVE-2017-7829</cve>
	<bugzilla href="https://bugzilla.suse.com/1071236">SUSE bug 1071236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074046">SUSE bug 1074046</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7830</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7830" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7830" ref_url="https://www.suse.com/security/cve/CVE-2017-7830" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3027-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3108-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3110-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00087.html" source="SUSE-SU"/>
    <description>
    The Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same-origin policy violation and could allow for data theft of URLs loaded by users. This vulnerability affects Firefox &lt; 57, Firefox ESR &lt; 52.5, and Thunderbird &lt; 52.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7830/">CVE-2017-7830</cve>
	<bugzilla href="https://bugzilla.suse.com/1068101">SUSE bug 1068101</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7843</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7843" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7843" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7843" ref_url="https://www.suse.com/security/cve/CVE-2017-7843" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3272-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00047.html" source="SUSE-SU"/>
    <description>
    When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely. IndexedDB should not be available in Private Browsing mode and this stored data will persist across multiple private browsing mode sessions because it is not cleared when exiting. This vulnerability affects Firefox ESR &lt; 52.5.2 and Firefox &lt; 57.0.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7843/">CVE-2017-7843</cve>
	<bugzilla href="https://bugzilla.suse.com/1072034">SUSE bug 1072034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7845</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7845" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7845" ref_url="https://www.suse.com/security/cve/CVE-2017-7845" source="SUSE CVE"/>
    <description>
    A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Thunderbird &lt; 52.5.2, Firefox ESR &lt; 52.5.2, and Firefox &lt; 57.0.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7845/">CVE-2017-7845</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7846</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7846" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7846" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7846" ref_url="https://www.suse.com/security/cve/CVE-2017-7846" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00092.html" source="SUSE-SU"/>
    <description>
    It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g. via "View -&gt; Feed article -&gt; Website" or in the standard format of "View -&gt; Feed article -&gt; default format". This vulnerability affects Thunderbird &lt; 52.5.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7846/">CVE-2017-7846</cve>
	<bugzilla href="https://bugzilla.suse.com/1074043">SUSE bug 1074043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177847" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7847</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7847" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7847" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7847" ref_url="https://www.suse.com/security/cve/CVE-2017-7847" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00092.html" source="SUSE-SU"/>
    <description>
    Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affects Thunderbird &lt; 52.5.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7847/">CVE-2017-7847</cve>
	<bugzilla href="https://bugzilla.suse.com/1074044">SUSE bug 1074044</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7848</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7848" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7848" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7848" ref_url="https://www.suse.com/security/cve/CVE-2017-7848" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00092.html" source="SUSE-SU"/>
    <description>
    RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird &lt; 52.5.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7848/">CVE-2017-7848</cve>
	<bugzilla href="https://bugzilla.suse.com/1074045">SUSE bug 1074045</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177859" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7859</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7859" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7859" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7859" ref_url="https://www.suse.com/security/cve/CVE-2017-7859" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00106.html" source="SUSE-SU"/>
    <description>
    FFmpeg before 2017-03-05 has an out-of-bounds write caused by a heap-based buffer overflow related to the ff_h264_slice_context_init function in libavcodec/h264dec.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7859/">CVE-2017-7859</cve>
	<bugzilla href="https://bugzilla.suse.com/1034183">SUSE bug 1034183</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7862</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7862" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7862" ref_url="https://www.suse.com/security/cve/CVE-2017-7862" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00106.html" source="SUSE-SU"/>
    <description>
    FFmpeg before 2017-02-07 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame function in libavcodec/pictordec.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7862/">CVE-2017-7862</cve>
	<bugzilla href="https://bugzilla.suse.com/1034181">SUSE bug 1034181</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7863</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7863" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7863" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7863" ref_url="https://www.suse.com/security/cve/CVE-2017-7863" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1433-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1532-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_common function in libavcodec/pngdec.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7863/">CVE-2017-7863</cve>
	<bugzilla href="https://bugzilla.suse.com/1034179">SUSE bug 1034179</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177865" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7865</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7865" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7865" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7865" ref_url="https://www.suse.com/security/cve/CVE-2017-7865" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1433-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1532-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decode_block_opcode_0xA function in libavcodec/interplayvideo.c and the avcodec_align_dimensions2 function in libavcodec/utils.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7865/">CVE-2017-7865</cve>
	<bugzilla href="https://bugzilla.suse.com/1034177">SUSE bug 1034177</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7866</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7866" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7866" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7866" ref_url="https://www.suse.com/security/cve/CVE-2017-7866" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1433-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1532-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    FFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow related to the decode_zbuf function in libavcodec/pngdec.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7866/">CVE-2017-7866</cve>
	<bugzilla href="https://bugzilla.suse.com/1034176">SUSE bug 1034176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177869" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7869</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7869" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7869" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7869" ref_url="https://www.suse.com/security/cve/CVE-2017-7869" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00064.html" source="SUSE-SU"/>
    <description>
    GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-27"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7869/">CVE-2017-7869</cve>
	<bugzilla href="https://bugzilla.suse.com/1034173">SUSE bug 1034173</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038337">SUSE bug 1038337</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149679">SUSE bug 1149679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628489" comment="gnutls-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628491" comment="libgnutls30-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177128" comment="libgnutls30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628492" comment="libgnutls30-32bit-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009235745" comment="libgnutls30-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7870</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7870" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7870" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7870" ref_url="https://www.suse.com/security/cve/CVE-2017-7870" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003174.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1851-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2488-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00065.html" source="SUSE-SU"/>
    <description>
    LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function in tools/source/generic/poly.cxx.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7870/">CVE-2017-7870</cve>
	<bugzilla href="https://bugzilla.suse.com/1034568">SUSE bug 1034568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177882" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7882</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7882" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7882" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7882" ref_url="https://www.suse.com/security/cve/CVE-2017-7882" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003174.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1851-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2488-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00065.html" source="SUSE-SU"/>
    <description>
    LibreOffice before 2017-03-14 has an out-of-bounds write related to the HWPFile::TagsRead function in hwpfilter/source/hwpfile.cxx.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7882/">CVE-2017-7882</cve>
	<bugzilla href="https://bugzilla.suse.com/1034329">SUSE bug 1034329</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177890" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7890</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7890" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7890" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7890" ref_url="https://www.suse.com/security/cve/CVE-2017-7890" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006586.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2337-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2366-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00016.html" source="SUSE-SU"/>
    <description>
    The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read ~700 bytes from the top of the stack, potentially disclosing sensitive information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7890/">CVE-2017-7890</cve>
	<bugzilla href="https://bugzilla.suse.com/1050241">SUSE bug 1050241</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7960</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7960" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7960" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7960" ref_url="https://www.suse.com/security/cve/CVE-2017-7960" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005549.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1575-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html" source="SUSE-SU"/>
    <description>
    The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted CSS file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7960/">CVE-2017-7960</cve>
	<bugzilla href="https://bugzilla.suse.com/1034481">SUSE bug 1034481</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482151" comment="libcroco-0_6-3-0.6.13-1.26 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177260" comment="libcroco-0_6-3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7961</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7961" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7961" ref_url="https://www.suse.com/security/cve/CVE-2017-7961" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005549.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1575-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CSS file. NOTE: third-party analysis reports "This is not a security issue in my view. The conversion surely is truncating the double into a long value, but there is no impact as the value is one of the RGB components."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7961/">CVE-2017-7961</cve>
	<bugzilla href="https://bugzilla.suse.com/1034482">SUSE bug 1034482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132069">SUSE bug 1132069</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482151" comment="libcroco-0_6-3-0.6.13-1.26 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177260" comment="libcroco-0_6-3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7982</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7982" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7982" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7982" ref_url="https://www.suse.com/security/cve/CVE-2017-7982" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002908.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00094.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7982/">CVE-2017-7982</cve>
	<bugzilla href="https://bugzilla.suse.com/1035312">SUSE bug 1035312</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8105</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8105" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8105" ref_url="https://www.suse.com/security/cve/CVE-2017-8105" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0414-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0462-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003736.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00016.html" source="SUSE-SU"/>
    <description>
    FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in psaux/t1decode.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-8105/">CVE-2017-8105</cve>
	<bugzilla href="https://bugzilla.suse.com/1034186">SUSE bug 1034186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035807">SUSE bug 1035807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036457">SUSE bug 1036457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1079459">SUSE bug 1079459</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8112</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8112" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8112" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8112" ref_url="https://www.suse.com/security/cve/CVE-2017-8112" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1795-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8112/">CVE-2017-8112</cve>
	<bugzilla href="https://bugzilla.suse.com/1036211">SUSE bug 1036211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036470">SUSE bug 1036470</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178287" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8287</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8287" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8287" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8287" ref_url="https://www.suse.com/security/cve/CVE-2017-8287" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0414-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0462-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003736.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00016.html" source="SUSE-SU"/>
    <description>
    FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour function in psaux/psobjs.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8287/">CVE-2017-8287</cve>
	<bugzilla href="https://bugzilla.suse.com/1034186">SUSE bug 1034186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035807">SUSE bug 1035807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036457">SUSE bug 1036457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1079459">SUSE bug 1079459</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8288</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8288" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8288" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8288" ref_url="https://www.suse.com/security/cve/CVE-2017-8288" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003146.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2273-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00101.html" source="SUSE-SU"/>
    <description>
    gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications (but not interact with them), see information from the extensions (e.g., what applications you have opened or what music you were playing), or even execute arbitrary commands. It all depends on what extensions a user has enabled. The problem is caused by lack of exception handling in js/ui/extensionSystem.js.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8288/">CVE-2017-8288</cve>
	<bugzilla href="https://bugzilla.suse.com/1036494">SUSE bug 1036494</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629143" comment="gnome-shell-3.34.5-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151510" comment="gnome-shell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684231" comment="gnome-shell-calendar-3.34.5-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151512" comment="gnome-shell-calendar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629145" comment="gnome-shell-lang-3.34.5-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151513" comment="gnome-shell-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8291</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8291" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8291" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8291" ref_url="https://www.suse.com/security/cve/CVE-2017-8291" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00014.html" source="SUSE-SU"/>
    <description>
    Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8291/">CVE-2017-8291</cve>
	<bugzilla href="https://bugzilla.suse.com/1036453">SUSE bug 1036453</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8309</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8309" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8309" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8309" ref_url="https://www.suse.com/security/cve/CVE-2017-8309" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1742-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1795-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1826-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8309/">CVE-2017-8309</cve>
	<bugzilla href="https://bugzilla.suse.com/1037242">SUSE bug 1037242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1037243">SUSE bug 1037243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178358" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8358</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8358" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8358" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8358" ref_url="https://www.suse.com/security/cve/CVE-2017-8358" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003174.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1851-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2488-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00065.html" source="SUSE-SU"/>
    <description>
    LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8358/">CVE-2017-8358</cve>
	<bugzilla href="https://bugzilla.suse.com/1036975">SUSE bug 1036975</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178361" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8361</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8361" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8361" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8361" ref_url="https://www.suse.com/security/cve/CVE-2017-8361" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002906.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1427-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00095.html" source="SUSE-SU"/>
    <description>
    The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8361/">CVE-2017-8361</cve>
	<bugzilla href="https://bugzilla.suse.com/1036944">SUSE bug 1036944</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8362</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8362" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8362" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8362" ref_url="https://www.suse.com/security/cve/CVE-2017-8362" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002906.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1427-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00095.html" source="SUSE-SU"/>
    <description>
    The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8362/">CVE-2017-8362</cve>
	<bugzilla href="https://bugzilla.suse.com/1036943">SUSE bug 1036943</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8363</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8363" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8363" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8363" ref_url="https://www.suse.com/security/cve/CVE-2017-8363" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002906.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1427-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00095.html" source="SUSE-SU"/>
    <description>
    The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8363/">CVE-2017-8363</cve>
	<bugzilla href="https://bugzilla.suse.com/1036945">SUSE bug 1036945</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8365</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8365" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8365" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8365" ref_url="https://www.suse.com/security/cve/CVE-2017-8365" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002906.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1427-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00095.html" source="SUSE-SU"/>
    <description>
    The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8365/">CVE-2017-8365</cve>
	<bugzilla href="https://bugzilla.suse.com/1036946">SUSE bug 1036946</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630093" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8372</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8372" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8372" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8372" ref_url="https://www.suse.com/security/cve/CVE-2017-8372" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012717.html" source="SUSE-SU"/>
    <description>
    The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-27"/>
	<updated date="2022-10-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8372/">CVE-2017-8372</cve>
	<bugzilla href="https://bugzilla.suse.com/1036969">SUSE bug 1036969</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009719714" comment="libmad-devel-0.15.1b-150000.5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172320" comment="libmad-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009719715" comment="libmad0-0.15.1b-150000.5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172321" comment="libmad0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721509" comment="libmad0-32bit-0.15.1b-150000.5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172322" comment="libmad0-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8373</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8373" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8373" ref_url="https://www.suse.com/security/cve/CVE-2017-8373" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012717.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10169-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VCNY4VP6K2IPA4XBKWZSW3O3JC54PRRV/" source="SUSE-SU"/>
    <description>
    The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-27"/>
	<updated date="2022-10-31"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8373/">CVE-2017-8373</cve>
	<bugzilla href="https://bugzilla.suse.com/1036968">SUSE bug 1036968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009719714" comment="libmad-devel-0.15.1b-150000.5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172320" comment="libmad-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009719715" comment="libmad0-0.15.1b-150000.5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172321" comment="libmad0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721509" comment="libmad0-32bit-0.15.1b-150000.5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172322" comment="libmad0-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8374</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8374" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8374" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8374" ref_url="https://www.suse.com/security/cve/CVE-2017-8374" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0528-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00096.html" source="SUSE-SU"/>
    <description>
    The mad_bit_skip function in bit.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8374/">CVE-2017-8374</cve>
	<bugzilla href="https://bugzilla.suse.com/1036967">SUSE bug 1036967</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486459" comment="libmad0-0.15.1b-3.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172321" comment="libmad0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8379</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8379" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8379" ref_url="https://www.suse.com/security/cve/CVE-2017-8379" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) by rapidly generating large keyboard events.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8379/">CVE-2017-8379</cve>
	<bugzilla href="https://bugzilla.suse.com/1037334">SUSE bug 1037334</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8380</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8380" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8380" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8380" ref_url="https://www.suse.com/security/cve/CVE-2017-8380" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8380/">CVE-2017-8380</cve>
	<bugzilla href="https://bugzilla.suse.com/1037336">SUSE bug 1037336</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8392</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8392" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8392" ref_url="https://www.suse.com/security/cve/CVE-2017-8392" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8 because of missing a check to determine whether symbols are NULL in the _bfd_dwarf2_find_nearest_line function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8392/">CVE-2017-8392</cve>
	<bugzilla href="https://bugzilla.suse.com/1037052">SUSE bug 1037052</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8393</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8393" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8393" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8393" ref_url="https://www.suse.com/security/cve/CVE-2017-8393" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global buffer over-read error because of an assumption made by code that runs for objcopy and strip, that SHT_REL/SHR_RELA sections are always named starting with a .rel/.rela prefix. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy and strip, to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8393/">CVE-2017-8393</cve>
	<bugzilla href="https://bugzilla.suse.com/1037057">SUSE bug 1037057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178394" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8394</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8394" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8394" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8394" ref_url="https://www.suse.com/security/cve/CVE-2017-8394" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due to NULL pointer dereferencing of _bfd_elf_large_com_section. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8394/">CVE-2017-8394</cve>
	<bugzilla href="https://bugzilla.suse.com/1037061">SUSE bug 1037061</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8396</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8396" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8396" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8396" ref_url="https://www.suse.com/security/cve/CVE-2017-8396" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 because the existing reloc offset range tests didn't catch small negative offsets less than the size of the reloc field. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8396/">CVE-2017-8396</cve>
	<bugzilla href="https://bugzilla.suse.com/1037066">SUSE bug 1037066</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8421</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8421" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8421" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8421" ref_url="https://www.suse.com/security/cve/CVE-2017-8421" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a memory leak vulnerability which can cause memory exhaustion in objdump via a crafted PE file. Additional validation in dump_relocs_in_section in objdump.c can resolve this.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8421/">CVE-2017-8421</cve>
	<bugzilla href="https://bugzilla.suse.com/1037273">SUSE bug 1037273</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8422</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8422" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8422" ref_url="https://www.suse.com/security/cve/CVE-2017-8422" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00025.html" source="SUSE-SU"/>
    <description>
    KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8422/">CVE-2017-8422</cve>
	<bugzilla href="https://bugzilla.suse.com/1033300">SUSE bug 1033300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036244">SUSE bug 1036244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1041511">SUSE bug 1041511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749065">SUSE bug 749065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/869959">SUSE bug 869959</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694832" comment="libKF5Auth5-5.76.0-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155518" comment="libKF5Auth5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694833" comment="libKF5Auth5-lang-5.76.0-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155522" comment="libKF5Auth5-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694834" comment="libKF5AuthCore5-5.76.0-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695550" comment="libKF5AuthCore5 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8779</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8779" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8779" ref_url="https://www.suse.com/security/cve/CVE-2017-8779" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1381-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00071.html" source="SUSE-SU"/>
    <description>
    rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8779/">CVE-2017-8779</cve>
	<bugzilla href="https://bugzilla.suse.com/1037559">SUSE bug 1037559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1037930">SUSE bug 1037930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101814">SUSE bug 1101814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/798028">SUSE bug 798028</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482535" comment="rpcbind-0.2.3-5.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153045" comment="rpcbind is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178786" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8786</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8786" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8786" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8786" ref_url="https://www.suse.com/security/cve/CVE-2017-8786" source="SUSE CVE"/>
    <description>
    pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8786/">CVE-2017-8786</cve>
	<bugzilla href="https://bugzilla.suse.com/1036942">SUSE bug 1036942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1037718">SUSE bug 1037718</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480665" comment="libpcre2-16-0-10.31-1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153649" comment="libpcre2-16-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480667" comment="libpcre2-8-0-10.31-1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153653" comment="libpcre2-8-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8798</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8798" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8798" ref_url="https://www.suse.com/security/cve/CVE-2017-8798" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1459-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00110.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8798/">CVE-2017-8798</cve>
	<bugzilla href="https://bugzilla.suse.com/1038601">SUSE bug 1038601</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694858" comment="libminiupnpc16-2.0.20171102-bp153.1.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177201" comment="libminiupnpc16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8816</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8816" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8816" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8816" ref_url="https://www.suse.com/security/cve/CVE-2017-8816" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003607.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0161-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00064.html" source="SUSE-SU"/>
    <description>
    The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-8816/">CVE-2017-8816</cve>
	<bugzilla href="https://bugzilla.suse.com/1069226">SUSE bug 1069226</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106019">SUSE bug 1106019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8817</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8817" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8817" ref_url="https://www.suse.com/security/cve/CVE-2017-8817" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003607.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0161-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00064.html" source="SUSE-SU"/>
    <description>
    The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.2/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-8817/">CVE-2017-8817</cve>
	<bugzilla href="https://bugzilla.suse.com/1069222">SUSE bug 1069222</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8818</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8818" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8818" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8818" ref_url="https://www.suse.com/security/cve/CVE-2017-8818" source="SUSE CVE"/>
    <description>
    curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8818/">CVE-2017-8818</cve>
	<bugzilla href="https://bugzilla.suse.com/1069714">SUSE bug 1069714</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8834</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8834" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8834" ref_url="https://www.suse.com/security/cve/CVE-2017-8834" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005549.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006883.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1575-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00007.html" source="SUSE-SU"/>
    <description>
    The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (memory allocation error) via a crafted CSS file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8834/">CVE-2017-8834</cve>
	<bugzilla href="https://bugzilla.suse.com/1043898">SUSE bug 1043898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1043899">SUSE bug 1043899</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482151" comment="libcroco-0_6-3-0.6.13-1.26 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177260" comment="libcroco-0_6-3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178871" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8871</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8871" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8871" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8871" ref_url="https://www.suse.com/security/cve/CVE-2017-8871" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005549.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006883.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1575-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00007.html" source="SUSE-SU"/>
    <description>
    The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted CSS file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8871/">CVE-2017-8871</cve>
	<bugzilla href="https://bugzilla.suse.com/1043898">SUSE bug 1043898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1043899">SUSE bug 1043899</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482151" comment="libcroco-0_6-3-0.6.13-1.26 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177260" comment="libcroco-0_6-3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178923" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8923</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8923" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8923" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8923" ref_url="https://www.suse.com/security/cve/CVE-2017-8923" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010332.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010338.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012985.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0679-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/O33XW3SB7IZV5RQWCSZCBFQE4OBWACOB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0699-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTK7KI5DNPAM32GVDSKIK3NDYP7OGBGQ/" source="SUSE-SU"/>
    <description>
    The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8923/">CVE-2017-8923</cve>
	<bugzilla href="https://bugzilla.suse.com/1038980">SUSE bug 1038980</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723657" comment="apache2-mod_php7-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723658" comment="php7-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723659" comment="php7-bcmath-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723660" comment="php7-bz2-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723661" comment="php7-calendar-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723662" comment="php7-ctype-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723663" comment="php7-curl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723664" comment="php7-dba-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723665" comment="php7-devel-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723666" comment="php7-dom-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723653" comment="php7-embed-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230509" comment="php7-embed is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723667" comment="php7-enchant-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723668" comment="php7-exif-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723669" comment="php7-fastcgi-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723670" comment="php7-fileinfo-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723624" comment="php7-firebird-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723671" comment="php7-fpm-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723672" comment="php7-ftp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723673" comment="php7-gd-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723674" comment="php7-gettext-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723675" comment="php7-gmp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723676" comment="php7-iconv-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723677" comment="php7-intl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723678" comment="php7-json-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723679" comment="php7-ldap-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723680" comment="php7-mbstring-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723681" comment="php7-mysql-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723682" comment="php7-odbc-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723683" comment="php7-opcache-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723684" comment="php7-openssl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723685" comment="php7-pcntl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723686" comment="php7-pdo-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723687" comment="php7-pgsql-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723688" comment="php7-phar-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723689" comment="php7-posix-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723690" comment="php7-readline-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723691" comment="php7-shmop-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723692" comment="php7-snmp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723693" comment="php7-soap-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723694" comment="php7-sockets-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723695" comment="php7-sodium-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230510" comment="php7-sodium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723696" comment="php7-sqlite-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723697" comment="php7-sysvmsg-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723698" comment="php7-sysvsem-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723699" comment="php7-sysvshm-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009724322" comment="php7-test-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009270016" comment="php7-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723700" comment="php7-tidy-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723701" comment="php7-tokenizer-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723702" comment="php7-xmlreader-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723703" comment="php7-xmlrpc-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723704" comment="php7-xmlwriter-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723705" comment="php7-xsl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723706" comment="php7-zip-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723707" comment="php7-zlib-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178934" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8934</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-8934" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8934" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-8934" ref_url="https://www.suse.com/security/cve/CVE-2017-8934" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:10001-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZSBBJGG6SXZDO2WPKT3GU6PVN5BSE42U/" source="SUSE-SU"/>
    <description>
    PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-01"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8934/">CVE-2017-8934</cve>
	<bugzilla href="https://bugzilla.suse.com/1039140">SUSE bug 1039140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694941" comment="pcmanfm-1.3.2-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695551" comment="pcmanfm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694942" comment="pcmanfm-devel-1.3.2-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695552" comment="pcmanfm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694943" comment="pcmanfm-lang-1.3.2-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695553" comment="pcmanfm-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179047" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9047</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9047" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9047" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9047" ref_url="https://www.suse.com/security/cve/CVE-2017-9047" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1454-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002939.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1612-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00071.html" source="SUSE-SU"/>
    <description>
    A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content-&gt;type is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content-&gt;prefix is appended to buf (if it actually fits) whereupon (ii) content-&gt;name is written to the buffer. However, the check for whether the content-&gt;name actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write about "size" many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9047/">CVE-2017-9047</cve>
	<bugzilla href="https://bugzilla.suse.com/1039063">SUSE bug 1039063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039066">SUSE bug 1039066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039657">SUSE bug 1039657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9048</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9048" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9048" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9048" ref_url="https://www.suse.com/security/cve/CVE-2017-9048" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1454-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002939.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1612-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00071.html" source="SUSE-SU"/>
    <description>
    libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 &lt; size. This vulnerability causes programs that use libxml2, such as PHP, to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9048/">CVE-2017-9048</cve>
	<bugzilla href="https://bugzilla.suse.com/1039064">SUSE bug 1039064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039066">SUSE bug 1039066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039658">SUSE bug 1039658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9049</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9049" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9049" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9049" ref_url="https://www.suse.com/security/cve/CVE-2017-9049" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1454-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002939.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1612-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00071.html" source="SUSE-SU"/>
    <description>
    libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9049/">CVE-2017-9049</cve>
	<bugzilla href="https://bugzilla.suse.com/1039063">SUSE bug 1039063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039064">SUSE bug 1039064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039066">SUSE bug 1039066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039659">SUSE bug 1039659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039661">SUSE bug 1039661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069690">SUSE bug 1069690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9110</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9110" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9110" ref_url="https://www.suse.com/security/cve/CVE-2017-9110" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003772.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003774.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0619-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00013.html" source="SUSE-SU"/>
    <description>
    In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9110/">CVE-2017-9110</cve>
	<bugzilla href="https://bugzilla.suse.com/1040107">SUSE bug 1040107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1040112">SUSE bug 1040112</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9111</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9111" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9111" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9111" ref_url="https://www.suse.com/security/cve/CVE-2017-9111" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005750.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1963-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005746.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1816-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1826-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00000.html" source="SUSE-SU"/>
    <description>
    In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-9111/">CVE-2017-9111</cve>
	<bugzilla href="https://bugzilla.suse.com/1040109">SUSE bug 1040109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9112</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9112" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9112" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9112" ref_url="https://www.suse.com/security/cve/CVE-2017-9112" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005750.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005747.html" source="SUSE-SU"/>
    <description>
    In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9112/">CVE-2017-9112</cve>
	<bugzilla href="https://bugzilla.suse.com/1040112">SUSE bug 1040112</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9113</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9113" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9113" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9113" ref_url="https://www.suse.com/security/cve/CVE-2017-9113" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005750.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1963-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005746.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1816-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1826-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00000.html" source="SUSE-SU"/>
    <description>
    In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-9113/">CVE-2017-9113</cve>
	<bugzilla href="https://bugzilla.suse.com/1040113">SUSE bug 1040113</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9114</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9114" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9114" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9114" ref_url="https://www.suse.com/security/cve/CVE-2017-9114" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003772.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003774.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0619-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00013.html" source="SUSE-SU"/>
    <description>
    In OpenEXR 2.2.0, an invalid read of size 1 in the refill function in ImfFastHuf.cpp could cause the application to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9114/">CVE-2017-9114</cve>
	<bugzilla href="https://bugzilla.suse.com/1040114">SUSE bug 1040114</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179115" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9115</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9115" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9115" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9115" ref_url="https://www.suse.com/security/cve/CVE-2017-9115" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005750.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1963-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005746.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1816-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1826-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00000.html" source="SUSE-SU"/>
    <description>
    In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-9115/">CVE-2017-9115</cve>
	<bugzilla href="https://bugzilla.suse.com/1040115">SUSE bug 1040115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9116</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9116" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9116" ref_url="https://www.suse.com/security/cve/CVE-2017-9116" source="SUSE CVE"/>
    <description>
    In OpenEXR 2.2.0, an invalid read of size 1 in the uncompress function in ImfZip.cpp could cause the application to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9116/">CVE-2017-9116</cve>
	<bugzilla href="https://bugzilla.suse.com/1040116">SUSE bug 1040116</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9120</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9120" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9120" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9120" ref_url="https://www.suse.com/security/cve/CVE-2017-9120" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004421.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00062.html" source="SUSE-SU"/>
    <description>
    PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer overflow in mysqli_real_escape_string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9120/">CVE-2017-9120</cve>
	<bugzilla href="https://bugzilla.suse.com/1103661">SUSE bug 1103661</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179122" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9122</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9122" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9122" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9122" ref_url="https://www.suse.com/security/cve/CVE-2017-9122" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1806-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00035.html" source="SUSE-SU"/>
    <description>
    The quicktime_read_moov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted mp4 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9122/">CVE-2017-9122</cve>
	<bugzilla href="https://bugzilla.suse.com/1044000">SUSE bug 1044000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044002">SUSE bug 1044002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044006">SUSE bug 1044006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044008">SUSE bug 1044008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044009">SUSE bug 1044009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044077">SUSE bug 1044077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044122">SUSE bug 1044122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051855">SUSE bug 1051855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051859">SUSE bug 1051859</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487566" comment="libquicktime0-1.2.4+git20180804.fff99cd-1.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153617" comment="libquicktime0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179123" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9123</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9123" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9123" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9123" ref_url="https://www.suse.com/security/cve/CVE-2017-9123" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1806-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00035.html" source="SUSE-SU"/>
    <description>
    The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9123/">CVE-2017-9123</cve>
	<bugzilla href="https://bugzilla.suse.com/1044009">SUSE bug 1044009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487566" comment="libquicktime0-1.2.4+git20180804.fff99cd-1.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153617" comment="libquicktime0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179124" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9124</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9124" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9124" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9124" ref_url="https://www.suse.com/security/cve/CVE-2017-9124" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1806-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00035.html" source="SUSE-SU"/>
    <description>
    The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9124/">CVE-2017-9124</cve>
	<bugzilla href="https://bugzilla.suse.com/1044008">SUSE bug 1044008</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487566" comment="libquicktime0-1.2.4+git20180804.fff99cd-1.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153617" comment="libquicktime0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9125</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9125" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9125" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9125" ref_url="https://www.suse.com/security/cve/CVE-2017-9125" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1806-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00035.html" source="SUSE-SU"/>
    <description>
    The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9125/">CVE-2017-9125</cve>
	<bugzilla href="https://bugzilla.suse.com/1044122">SUSE bug 1044122</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487566" comment="libquicktime0-1.2.4+git20180804.fff99cd-1.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153617" comment="libquicktime0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9126" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9126" ref_url="https://www.suse.com/security/cve/CVE-2017-9126" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1806-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00035.html" source="SUSE-SU"/>
    <description>
    The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9126/">CVE-2017-9126</cve>
	<bugzilla href="https://bugzilla.suse.com/1044006">SUSE bug 1044006</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487566" comment="libquicktime0-1.2.4+git20180804.fff99cd-1.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153617" comment="libquicktime0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9127</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9127" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9127" ref_url="https://www.suse.com/security/cve/CVE-2017-9127" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1806-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00035.html" source="SUSE-SU"/>
    <description>
    The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9127/">CVE-2017-9127</cve>
	<bugzilla href="https://bugzilla.suse.com/1044002">SUSE bug 1044002</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487566" comment="libquicktime0-1.2.4+git20180804.fff99cd-1.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153617" comment="libquicktime0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9128</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9128" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9128" ref_url="https://www.suse.com/security/cve/CVE-2017-9128" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1806-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00035.html" source="SUSE-SU"/>
    <description>
    The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted mp4 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9128/">CVE-2017-9128</cve>
	<bugzilla href="https://bugzilla.suse.com/1044000">SUSE bug 1044000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044002">SUSE bug 1044002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044006">SUSE bug 1044006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044008">SUSE bug 1044008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044009">SUSE bug 1044009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044077">SUSE bug 1044077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044122">SUSE bug 1044122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051855">SUSE bug 1051855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051859">SUSE bug 1051859</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487566" comment="libquicktime0-1.2.4+git20180804.fff99cd-1.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153617" comment="libquicktime0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9182</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9182" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9182" ref_url="https://www.suse.com/security/cve/CVE-2017-9182" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:0141-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DLYT44LA5ZMWEXSKKLL4QK25G4FZSHQA/" source="SUSE-SU"/>
    <description>
    libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (use-after-free and invalid heap read), related to the GET_COLOR function in color.c:16:11.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9182/">CVE-2017-9182</cve>
	<bugzilla href="https://bugzilla.suse.com/1040278">SUSE bug 1040278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182159">SUSE bug 1182159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684132" comment="autotrace-0.31.1-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009684175" comment="autotrace is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684133" comment="autotrace-devel-0.31.1-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009684176" comment="autotrace-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684134" comment="libautotrace3-0.31.1-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009684177" comment="libautotrace3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9190</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9190" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9190" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9190" ref_url="https://www.suse.com/security/cve/CVE-2017-9190" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:0141-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DLYT44LA5ZMWEXSKKLL4QK25G4FZSHQA/" source="SUSE-SU"/>
    <description>
    libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid free), related to the free_bitmap function in bitmap.c:24:5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9190/">CVE-2017-9190</cve>
	<bugzilla href="https://bugzilla.suse.com/1040278">SUSE bug 1040278</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684132" comment="autotrace-0.31.1-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009684175" comment="autotrace is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684133" comment="autotrace-devel-0.31.1-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009684176" comment="autotrace-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684134" comment="libautotrace3-0.31.1-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009684177" comment="libautotrace3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9208</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9208" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9208" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9208" ref_url="https://www.suse.com/security/cve/CVE-2017-9208" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3066-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004714.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0469-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00056.html" source="SUSE-SU"/>
    <description>
    libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to releaseResolved functions, aka qpdf-infiniteloop1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9208/">CVE-2017-9208</cve>
	<bugzilla href="https://bugzilla.suse.com/1040311">SUSE bug 1040311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482383" comment="libqpdf26-9.0.2-1.36 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695543" comment="libqpdf26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9209</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9209" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9209" ref_url="https://www.suse.com/security/cve/CVE-2017-9209" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3066-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004714.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0469-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00056.html" source="SUSE-SU"/>
    <description>
    libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to QPDFObjectHandle::parseInternal, aka qpdf-infiniteloop2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9209/">CVE-2017-9209</cve>
	<bugzilla href="https://bugzilla.suse.com/1040312">SUSE bug 1040312</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482383" comment="libqpdf26-9.0.2-1.36 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695543" comment="libqpdf26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9210</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9210" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9210" ref_url="https://www.suse.com/security/cve/CVE-2017-9210" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3066-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004714.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0469-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00056.html" source="SUSE-SU"/>
    <description>
    libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to unparse functions, aka qpdf-infiniteloop3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9210/">CVE-2017-9210</cve>
	<bugzilla href="https://bugzilla.suse.com/1040313">SUSE bug 1040313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482383" comment="libqpdf26-9.0.2-1.36 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695543" comment="libqpdf26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9216</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9216" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9216" ref_url="https://www.suse.com/security/cve/CVE-2017-9216" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003973.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0421-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00039.html" source="SUSE-SU"/>
    <description>
    libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c. For example, the jbig2dec utility will crash (segmentation fault) when parsing an invalid file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9216/">CVE-2017-9216</cve>
	<bugzilla href="https://bugzilla.suse.com/1040643">SUSE bug 1040643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179233" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9233</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9233" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9233" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9233" ref_url="https://www.suse.com/security/cve/CVE-2017-9233" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003169.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2375-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00004.html" source="SUSE-SU"/>
    <description>
    XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9233/">CVE-2017-9233</cve>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047236">SUSE bug 1047236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073350">SUSE bug 1073350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123115">SUSE bug 1123115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983216">SUSE bug 983216</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481942" comment="expat-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481944" comment="libexpat1-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481945" comment="libexpat1-32bit-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179239" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9239</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9239" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9239" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9239" ref_url="https://www.suse.com/security/cve/CVE-2017-9239" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006676.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of pValue() to cause a segmentation fault. To exploit this vulnerability, someone must open a crafted tiff file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9239/">CVE-2017-9239</cve>
	<bugzilla href="https://bugzilla.suse.com/1040973">SUSE bug 1040973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179269" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9269</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9269" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9269" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9269" ref_url="https://www.suse.com/security/cve/CVE-2017-9269" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2264-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004510.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2688-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2716-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004582.html" source="SUSE-SU"/>
		<reference ref_id="TID000018998" ref_url="https://www.suse.com/support/kb/doc/?id=000018998" source="SUSE-SU"/>
		<reference ref_id="TID7021171" ref_url="https://www.suse.com/support/kb/doc/?id=7021171" source="SUSE-SU"/>
		<reference ref_id="TID7021201" ref_url="https://www.suse.com/support/kb/doc/?id=7021201" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2739-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00035.html" source="SUSE-SU"/>
    <description>
    In libzypp before August 2018 GPG keys attached to YUM repositories were not correctly pinned, allowing malicious repository mirrors to silently downgrade to unsigned repositories with potential malicious content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2017-9269/">CVE-2017-9269</cve>
	<bugzilla href="https://bugzilla.suse.com/1038984">SUSE bug 1038984</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1045735">SUSE bug 1045735</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694899" comment="libzypp-17.25.10-3.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161722" comment="libzypp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629062" comment="zypper-1.14.43-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251910" comment="zypper is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629063" comment="zypper-log-1.14.43-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251912" comment="zypper-log is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629064" comment="zypper-needs-restarting-1.14.43-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009262480" comment="zypper-needs-restarting is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9271</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9271" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9271" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9271" ref_url="https://www.suse.com/security/cve/CVE-2017-9271" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008768.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:21-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:50-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:51-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008286.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008193.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008472.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008560.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FB5G3FIS4OQH3FX723SLMBOC4P37HKHV/" source="SUSE-SU"/>
    <description>
    The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-9271/">CVE-2017-9271</cve>
	<bugzilla href="https://bugzilla.suse.com/1050625">SUSE bug 1050625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694899" comment="libzypp-17.25.10-3.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161722" comment="libzypp is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9300</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9300" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9300" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9300" ref_url="https://www.suse.com/security/cve/CVE-2017-9300" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2595-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00115.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2597-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00117.html" source="SUSE-SU"/>
    <description>
    plugins\codec\libflac_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted FLAC file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-9300/">CVE-2017-9300</cve>
	<bugzilla href="https://bugzilla.suse.com/1041907">SUSE bug 1041907</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179330" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9330</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9330" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9330" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9330" ref_url="https://www.suse.com/security/cve/CVE-2017-9330" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1742-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1795-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1826-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9330/">CVE-2017-9330</cve>
	<bugzilla href="https://bugzilla.suse.com/1042159">SUSE bug 1042159</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042160">SUSE bug 1042160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1043157">SUSE bug 1043157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179403" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9403</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9403" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9403" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9403" ref_url="https://www.suse.com/security/cve/CVE-2017-9403" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003259.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    In LibTIFF 4.0.7, a memory leak vulnerability was found in the function TIFFReadDirEntryLong8Array in tif_dirread.c, which allows attackers to cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9403/">CVE-2017-9403</cve>
	<bugzilla href="https://bugzilla.suse.com/1042805">SUSE bug 1042805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1045688">SUSE bug 1045688</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179404" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9404</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9404" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9404" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9404" ref_url="https://www.suse.com/security/cve/CVE-2017-9404" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003259.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    In LibTIFF 4.0.7, a memory leak vulnerability was found in the function OJPEGReadHeaderInfoSecTablesQTable in tif_ojpeg.c, which allows attackers to cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9404/">CVE-2017-9404</cve>
	<bugzilla href="https://bugzilla.suse.com/1042804">SUSE bug 1042804</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9410</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9410" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9410" ref_url="https://www.suse.com/security/cve/CVE-2017-9410" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0543-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0544-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00046.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9101. Reason: This candidate is a duplicate of CVE-2015-9101. Notes: All CVE users should reference CVE-2015-9101 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9410/">CVE-2017-9410</cve>
	<bugzilla href="https://bugzilla.suse.com/1061970">SUSE bug 1061970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082333">SUSE bug 1082333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482307" comment="libmp3lame0-3.100-1.33 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164118" comment="libmp3lame0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9411</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9411" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9411" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9411" ref_url="https://www.suse.com/security/cve/CVE-2017-9411" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0543-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0544-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00046.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9100. Reason: This candidate is a duplicate of CVE-2015-9100. Notes: All CVE users should reference CVE-2015-9100 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9411/">CVE-2017-9411</cve>
	<bugzilla href="https://bugzilla.suse.com/1082397">SUSE bug 1082397</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482307" comment="libmp3lame0-3.100-1.33 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164118" comment="libmp3lame0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9412</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9412" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9412" ref_url="https://www.suse.com/security/cve/CVE-2017-9412" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0543-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0544-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00046.html" source="SUSE-SU"/>
    <description>
    The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted wav file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9412/">CVE-2017-9412</cve>
	<bugzilla href="https://bugzilla.suse.com/1061973">SUSE bug 1061973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082340">SUSE bug 1082340</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482307" comment="libmp3lame0-3.100-1.33 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164118" comment="libmp3lame0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179432" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9432</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9432" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9432" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9432" ref_url="https://www.suse.com/security/cve/CVE-2017-9432" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003960.html" source="SUSE-SU"/>
    <description>
    Document Liberation Project libstaroffice before 2017-04-07 has an out-of-bounds write caused by a stack-based buffer overflow related to the DatabaseName::read function in lib/StarWriterStruct.cxx.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-9432/">CVE-2017-9432</cve>
	<bugzilla href="https://bugzilla.suse.com/1042829">SUSE bug 1042829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630314" comment="libstaroffice-0_0-0-0.0.7-7.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158763" comment="libstaroffice-0_0-0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9433</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9433" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9433" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9433" ref_url="https://www.suse.com/security/cve/CVE-2017-9433" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003960.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1851-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2488-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00065.html" source="SUSE-SU"/>
    <description>
    Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9433/">CVE-2017-9433</cve>
	<bugzilla href="https://bugzilla.suse.com/1042828">SUSE bug 1042828</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630164" comment="libmwaw-0_3-3-0.3.17-4.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158753" comment="libmwaw-0_3-3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9445</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9445" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9445" ref_url="https://www.suse.com/security/cve/CVE-2017-9445" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2031-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
    <description>
    In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small. A malicious DNS server can exploit this via a response with a specially crafted TCP payload to trick systemd-resolved into allocating a buffer that's too small, and subsequently write arbitrary data beyond the end of it.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-9445/">CVE-2017-9445</cve>
	<bugzilla href="https://bugzilla.suse.com/1045290">SUSE bug 1045290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063249">SUSE bug 1063249</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9502</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9502" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9502" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9502" ref_url="https://www.suse.com/security/cve/CVE-2017-9502" source="SUSE CVE"/>
    <description>
    In curl before 7.54.1 on Windows and DOS, libcurl's default protocol function, which is the logic that allows an application to set which protocol libcurl should attempt to use when given a URL without a scheme part, had a flaw that could lead to it overwriting a heap based memory buffer with seven bytes. If the default protocol is specified to be FILE or a file: URL lacks two slashes, the given "URL" starts with a drive letter, and libcurl is built for Windows or DOS, then libcurl would copy the path 7 bytes off, so that the end of the given path would write beyond the malloc buffer (7 bytes being the length in bytes of the ascii string "file://").
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9502/">CVE-2017-9502</cve>
	<bugzilla href="https://bugzilla.suse.com/1044243">SUSE bug 1044243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9503</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9503" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9503" ref_url="https://www.suse.com/security/cve/CVE-2017-9503" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1795-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9503/">CVE-2017-9503</cve>
	<bugzilla href="https://bugzilla.suse.com/1043296">SUSE bug 1043296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1043297">SUSE bug 1043297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1043312">SUSE bug 1043312</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9524</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9524" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9524" ref_url="https://www.suse.com/security/cve/CVE-2017-9524" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
    <description>
    The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows remote attackers to cause a denial of service (segmentation fault and server crash) by leveraging failure to ensure that all initialization occurs before talking to a client in the nbd_negotiate function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9524/">CVE-2017-9524</cve>
	<bugzilla href="https://bugzilla.suse.com/1043808">SUSE bug 1043808</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9746</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9746" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9746" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9746" ref_url="https://www.suse.com/security/cve/CVE-2017-9746" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of rae insns printing for this file during "objdump -D" execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9746/">CVE-2017-9746</cve>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044891">SUSE bug 1044891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179747" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9747</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9747" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9747" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9747" ref_url="https://www.suse.com/security/cve/CVE-2017-9747" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9747/">CVE-2017-9747</cve>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044897">SUSE bug 1044897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9748</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9748" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9748" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9748" ref_url="https://www.suse.com/security/cve/CVE-2017-9748" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9748/">CVE-2017-9748</cve>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044901">SUSE bug 1044901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9750</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9750" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9750" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9750" ref_url="https://www.suse.com/security/cve/CVE-2017-9750" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9750/">CVE-2017-9750</cve>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044909">SUSE bug 1044909</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9755</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9755" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9755" ref_url="https://www.suse.com/security/cve/CVE-2017-9755" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9755/">CVE-2017-9755</cve>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044925">SUSE bug 1044925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9756</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9756" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9756" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9756" ref_url="https://www.suse.com/security/cve/CVE-2017-9756" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9756/">CVE-2017-9756</cve>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044927">SUSE bug 1044927</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9782</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9782" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9782" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9782" ref_url="https://www.suse.com/security/cve/CVE-2017-9782" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9782/">CVE-2017-9782</cve>
	<bugzilla href="https://bugzilla.suse.com/1045450">SUSE bug 1045450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117328">SUSE bug 1117328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9798</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9798" ref_url="https://www.suse.com/security/cve/CVE-2017-9798" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003254.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2756-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003305.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003365.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2549-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00069.html" source="SUSE-SU"/>
    <description>
    Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors including configuration. Exploitation with .htaccess can be blocked with a patch to the ap_limit_section function in server/core.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-9798/">CVE-2017-9798</cve>
	<bugzilla href="https://bugzilla.suse.com/1058058">SUSE bug 1058058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060757">SUSE bug 1060757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077582">SUSE bug 1077582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078450">SUSE bug 1078450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089997">SUSE bug 1089997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9814</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9814" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9814" ref_url="https://www.suse.com/security/cve/CVE-2017-9814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1873-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1937-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007144.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1215-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00042.html" source="SUSE-SU"/>
    <description>
    cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9814/">CVE-2017-9814</cve>
	<bugzilla href="https://bugzilla.suse.com/1049092">SUSE bug 1049092</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481781" comment="libcairo-gobject2-1.16.0-1.55 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158152" comment="libcairo-gobject2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481783" comment="libcairo2-1.16.0-1.55 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158156" comment="libcairo2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9935</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9935" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9935" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9935" ref_url="https://www.suse.com/security/cve/CVE-2017-9935" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004759.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004784.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3371-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00056.html" source="SUSE-SU"/>
    <description>
    In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2p_free, memory corruption in t2p_readwrite_pdf_image, or a double free in t2p_free. Given these possibilities, it probably could cause arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-9935/">CVE-2017-9935</cve>
	<bugzilla href="https://bugzilla.suse.com/1046077">SUSE bug 1046077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074318">SUSE bug 1074318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108606">SUSE bug 1108606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110358">SUSE bug 1110358</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179936" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9936</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-9936" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9936" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-9936" ref_url="https://www.suse.com/security/cve/CVE-2017-9936" source="SUSE CVE"/>
    <description>
    In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9936/">CVE-2017-9936</cve>
	<bugzilla href="https://bugzilla.suse.com/1046073">SUSE bug 1046073</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20180494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-0494</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-0494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0494" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-0494" ref_url="https://www.suse.com/security/cve/CVE-2018-0494" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1373-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1383-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00092.html" source="SUSE-SU"/>
    <description>
    GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-0494/">CVE-2018-0494</cve>
	<bugzilla href="https://bugzilla.suse.com/1092061">SUSE bug 1092061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123797">SUSE bug 1123797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159418">SUSE bug 1159418</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482565" comment="wget-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694929" comment="wget-lang-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695522" comment="wget-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20180495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-0495</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-0495" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0495" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-0495" ref_url="https://www.suse.com/security/cve/CVE-2018-0495" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1993-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2452-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005339.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2178-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4283-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00070.html" source="SUSE-SU"/>
    <description>
    Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-0495/">CVE-2018-0495</cve>
	<bugzilla href="https://bugzilla.suse.com/1097410">SUSE bug 1097410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121207">SUSE bug 1121207</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482233" comment="libgcrypt20-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482234" comment="libgcrypt20-32bit-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20180499" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-0499</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-0499" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0499" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-0499" ref_url="https://www.suse.com/security/cve/CVE-2018-0499" source="SUSE CVE"/>
    <description>
    A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-0499/">CVE-2018-0499</cve>
	<bugzilla href="https://bugzilla.suse.com/1099925">SUSE bug 1099925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694894" comment="libxapian30-1.4.17-bp153.1.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695554" comment="libxapian30 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20180500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-0500</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-0500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0500" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-0500" ref_url="https://www.suse.com/security/cve/CVE-2018-0500" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2423-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004471.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00065.html" source="SUSE-SU"/>
    <description>
    Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who can control the data that curl transmits over SMTP with certain settings (i.e., use of a nonstandard --limit-rate argument or CURLOPT_BUFFERSIZE value).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-0500/">CVE-2018-0500</cve>
	<bugzilla href="https://bugzilla.suse.com/1099793">SUSE bug 1099793</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20180732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-0732</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-0732" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0732" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-0732" ref_url="https://www.suse.com/security/cve/CVE-2018-0732" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1887-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1968-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2036-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2449-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2534-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20182534-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004540.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004549.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004581.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2965-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005586.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2117-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2129-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2667-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2816-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2855-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3013-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00009.html" source="SUSE-SU"/>
    <description>
    During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-0732/">CVE-2018-0732</cve>
	<bugzilla href="https://bugzilla.suse.com/1077628">SUSE bug 1077628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097158">SUSE bug 1097158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099502">SUSE bug 1099502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106692">SUSE bug 1106692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108542">SUSE bug 1108542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110163">SUSE bug 1110163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112097">SUSE bug 1112097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122198">SUSE bug 1122198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148697">SUSE bug 1148697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20180734" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-0734</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-0734" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0734" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-0734" ref_url="https://www.suse.com/security/cve/CVE-2018-0734" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3863-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004872.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004873.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3864-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3866-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004875.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3945-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183945-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3964-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183964-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3989-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004930.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005586.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3890-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4104-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0088-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-0734/">CVE-2018-0734</cve>
	<bugzilla href="https://bugzilla.suse.com/1113534">SUSE bug 1113534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113652">SUSE bug 1113652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113742">SUSE bug 1113742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122198">SUSE bug 1122198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148697">SUSE bug 1148697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20180735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-0735</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-0735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0735" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-0735" ref_url="https://www.suse.com/security/cve/CVE-2018-0735" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3863-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004872.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3945-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183945-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3890-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00043.html" source="SUSE-SU"/>
    <description>
    The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-0735/">CVE-2018-0735</cve>
	<bugzilla href="https://bugzilla.suse.com/1113534">SUSE bug 1113534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113651">SUSE bug 1113651</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20180737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-0737</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-0737" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0737" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-0737" ref_url="https://www.suse.com/security/cve/CVE-2018-0737" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004495.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004549.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004619.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2928-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004729.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2965-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004873.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3864-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005586.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00009.html" source="SUSE-SU"/>
    <description>
    The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-0737/">CVE-2018-0737</cve>
	<bugzilla href="https://bugzilla.suse.com/1089039">SUSE bug 1089039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089041">SUSE bug 1089041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089044">SUSE bug 1089044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089045">SUSE bug 1089045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108542">SUSE bug 1108542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123780">SUSE bug 1123780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20180739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-0739</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-0739" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0739" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-0739" ref_url="https://www.suse.com/security/cve/CVE-2018-0739" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0975-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2072-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2534-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20182534-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004549.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006535.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0936-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2238-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00023.html" source="SUSE-SU"/>
    <description>
    Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-0739/">CVE-2018-0739</cve>
	<bugzilla href="https://bugzilla.suse.com/1087102">SUSE bug 1087102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089997">SUSE bug 1089997</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108542">SUSE bug 1108542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20180886" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-0886</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-0886" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0886" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-0886" ref_url="https://www.suse.com/security/cve/CVE-2018-0886" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0539-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0096-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00022.html" source="SUSE-SU"/>
    <description>
    The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how CredSSP validates request during the authentication process, aka "CredSSP Remote Code Execution Vulnerability".
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-0886/">CVE-2018-0886</cve>
	<bugzilla href="https://bugzilla.suse.com/1085416">SUSE bug 1085416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087240">SUSE bug 1087240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117963">SUSE bug 1117963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131873">SUSE bug 1131873</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000001</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000001" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000001" ref_url="https://www.suse.com/security/cve/CVE-2018-1000001" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0071-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0075-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0076-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004372.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00039.html" source="SUSE-SU"/>
    <description>
    In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000001/">CVE-2018-1000001</cve>
	<bugzilla href="https://bugzilla.suse.com/1074293">SUSE bug 1074293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099047">SUSE bug 1099047</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000005</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000005" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000005" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000005" ref_url="https://www.suse.com/security/cve/CVE-2018-1000005" source="SUSE CVE"/>
    <description>
    libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pull/2231) that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the code that creates HTTP/1-like headers from the HTTP/2 trailer data once appended a string like `:` to the target buffer, while this was recently changed to `: ` (a space was added after the colon) but the following math wasn't updated correspondingly. When accessed, the data is read out of bounds and causes either a crash or that the (too large) data gets passed to client write. This could lead to a denial-of-service situation or an information disclosure if someone has a service that echoes back or uses the trailers for something.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000005/">CVE-2018-1000005</cve>
	<bugzilla href="https://bugzilla.suse.com/1076360">SUSE bug 1076360</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000007" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000007</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000007" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000007" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000007" ref_url="https://www.suse.com/security/cve/CVE-2018-1000007" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003634.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0236-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00101.html" source="SUSE-SU"/>
    <description>
    libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000007/">CVE-2018-1000007</cve>
	<bugzilla href="https://bugzilla.suse.com/1077001">SUSE bug 1077001</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145903">SUSE bug 1145903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185551">SUSE bug 1185551</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192797">SUSE bug 1192797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198766">SUSE bug 1198766</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000030</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000030" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000030" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000030" ref_url="https://www.suse.com/security/cve/CVE-2018-1000030" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00098.html" source="SUSE-SU"/>
    <description>
    Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not been confirmed. The vulnerability lies when multiply threads are handling large amounts of data. In both cases there is essentially a race condition that occurs. For the Heap-Buffer-Overflow, Thread 2 is creating the size for a buffer, but Thread1 is already writing to the buffer without knowing how much to write. So when a large amount of data is being processed, it is very easy to cause memory corruption using a Heap-Buffer-Overflow. As for the Use-After-Free, Thread3-&gt;Malloc-&gt;Thread1-&gt;Free's-&gt;Thread2-Re-uses-Free'd Memory. The PSRT has stated that this is not a security vulnerability due to the fact that the attacker must be able to run code, however in some situations, such as function as a service, this vulnerability can potentially be used by an attacker to violate a trust boundary, as such the DWF feels this issue deserves a CVE.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000030/">CVE-2018-1000030</cve>
	<bugzilla href="https://bugzilla.suse.com/1079300">SUSE bug 1079300</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000035</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000035" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000035" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000035" ref_url="https://www.suse.com/security/cve/CVE-2018-1000035" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004241.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00013.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow exists in Info-Zip UnZip version &lt;= 6.00 in the processing of password-protected archives that allows an attacker to perform a denial of service or to possibly achieve code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000035/">CVE-2018-1000035</cve>
	<bugzilla href="https://bugzilla.suse.com/1076531">SUSE bug 1076531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1080074">SUSE bug 1080074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149684">SUSE bug 1149684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159417">SUSE bug 1159417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196768">SUSE bug 1196768</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152223" comment="unzip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694925" comment="unzip-doc-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152224" comment="unzip-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000073</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000073" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000073" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000073" ref_url="https://www.suse.com/security/cve/CVE-2018-1000073" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in install_location function of package.rb that can result in path traversal when writing to a symlinked basedir outside of the root. This vulnerability appears to have been fixed in 2.7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000073/">CVE-2018-1000073</cve>
	<bugzilla href="https://bugzilla.suse.com/1082007">SUSE bug 1082007</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000074</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000074" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000074" ref_url="https://www.suse.com/security/cve/CVE-2018-1000074" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Deserialization of Untrusted Data vulnerability in owner command that can result in code execution. This attack appear to be exploitable via victim must run the `gem owner` command on a gem with a specially crafted YAML file. This vulnerability appears to have been fixed in 2.7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000074/">CVE-2018-1000074</cve>
	<bugzilla href="https://bugzilla.suse.com/1082008">SUSE bug 1082008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175764">SUSE bug 1175764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000075</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000075" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000075" ref_url="https://www.suse.com/security/cve/CVE-2018-1000075" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a infinite loop caused by negative size vulnerability in ruby gem package tar header that can result in a negative size could cause an infinite loop.. This vulnerability appears to have been fixed in 2.7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000075/">CVE-2018-1000075</cve>
	<bugzilla href="https://bugzilla.suse.com/1082014">SUSE bug 1082014</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000076</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000076" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000076" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000076" ref_url="https://www.suse.com/security/cve/CVE-2018-1000076" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Improper Verification of Cryptographic Signature vulnerability in package.rb that can result in a mis-signed gem could be installed, as the tarball would contain multiple gem signatures.. This vulnerability appears to have been fixed in 2.7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000076/">CVE-2018-1000076</cve>
	<bugzilla href="https://bugzilla.suse.com/1082009">SUSE bug 1082009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000077</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000077" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000077" ref_url="https://www.suse.com/security/cve/CVE-2018-1000077" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Improper Input Validation vulnerability in ruby gems specification homepage attribute that can result in a malicious gem could set an invalid homepage URL. This vulnerability appears to have been fixed in 2.7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000077/">CVE-2018-1000077</cve>
	<bugzilla href="https://bugzilla.suse.com/1082010">SUSE bug 1082010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183937">SUSE bug 1183937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000078</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000078" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000078" ref_url="https://www.suse.com/security/cve/CVE-2018-1000078" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Cross Site Scripting (XSS) vulnerability in gem server display of homepage attribute that can result in XSS. This attack appear to be exploitable via the victim must browse to a malicious gem on a vulnerable gem server. This vulnerability appears to have been fixed in 2.7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000078/">CVE-2018-1000078</cve>
	<bugzilla href="https://bugzilla.suse.com/1082011">SUSE bug 1082011</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000079</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000079" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000079" ref_url="https://www.suse.com/security/cve/CVE-2018-1000079" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in gem installation that can result in the gem could write to arbitrary filesystem locations during installation. This attack appear to be exploitable via the victim must install a malicious gem. This vulnerability appears to have been fixed in 2.7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000079/">CVE-2018-1000079</cve>
	<bugzilla href="https://bugzilla.suse.com/1082058">SUSE bug 1082058</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000097</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000097" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000097" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000097" ref_url="https://www.suse.com/security/cve/CVE-2018-1000097" source="SUSE CVE"/>
    <description>
    Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000097/">CVE-2018-1000097</cve>
	<bugzilla href="https://bugzilla.suse.com/1085004">SUSE bug 1085004</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480924" comment="sharutils-4.15.2-2.21 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695555" comment="sharutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480925" comment="sharutils-lang-4.15.2-2.21 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695556" comment="sharutils-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000120</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000120" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000120" ref_url="https://www.suse.com/security/cve/CVE-2018-1000120" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0769-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20180769-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1323-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004533.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0794-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00084.html" source="SUSE-SU"/>
    <description>
    A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000120/">CVE-2018-1000120</cve>
	<bugzilla href="https://bugzilla.suse.com/1084521">SUSE bug 1084521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101811">SUSE bug 1101811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112526">SUSE bug 1112526</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000121</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000121" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000121" ref_url="https://www.suse.com/security/cve/CVE-2018-1000121" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0769-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20180769-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1323-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0794-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00084.html" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-20"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000121/">CVE-2018-1000121</cve>
	<bugzilla href="https://bugzilla.suse.com/1084524">SUSE bug 1084524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085215">SUSE bug 1085215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101811">SUSE bug 1101811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112526">SUSE bug 1112526</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000122" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000122</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000122" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000122" ref_url="https://www.suse.com/security/cve/CVE-2018-1000122" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0769-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20180769-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1323-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0794-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00084.html" source="SUSE-SU"/>
    <description>
    A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000122/">CVE-2018-1000122</cve>
	<bugzilla href="https://bugzilla.suse.com/1084532">SUSE bug 1084532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101811">SUSE bug 1101811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112526">SUSE bug 1112526</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000135</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000135" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000135" ref_url="https://www.suse.com/security/cve/CVE-2018-1000135" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1369-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005511.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00005.html" source="SUSE-SU"/>
    <description>
    GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local network's DNS servers, while on VPN. This vulnerability appears to have been fixed in Some Ubuntu 16.04 packages were fixed, but later updates removed the fix. cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 an upstream fix does not appear to be available at this time.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000135/">CVE-2018-1000135</cve>
	<bugzilla href="https://bugzilla.suse.com/1086263">SUSE bug 1086263</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629088" comment="NetworkManager-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152685" comment="NetworkManager is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684219" comment="NetworkManager-lang-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152687" comment="NetworkManager-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628810" comment="libnm0-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152691" comment="libnm0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628811" comment="typelib-1_0-NM-1_0-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152692" comment="typelib-1_0-NM-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000166</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000166" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000166" ref_url="https://www.suse.com/security/cve/CVE-2018-1000166" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00062.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-3848 and CVE-2018-3849. Reason: This candidate is a reservation duplicate of CVE-2018-3848 and CVE-2018-3849. Notes: All CVE users should reference CVE-2018-3848 and CVE-2018-3849 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2018-1000166/">CVE-2018-1000166</cve>
	<bugzilla href="https://bugzilla.suse.com/1088590">SUSE bug 1088590</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694846" comment="libcfitsio6-3.440-bp153.1.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695557" comment="libcfitsio6 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000168</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000168" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000168" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000168" ref_url="https://www.suse.com/security/cve/CVE-2018-1000168" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004253.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008541.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00021.html" source="SUSE-SU"/>
    <description>
    nghttp2 version &gt;= 1.10.0 and nghttp2 &lt;= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerability appears to have been fixed in &gt;= 1.31.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000168/">CVE-2018-1000168</cve>
	<bugzilla href="https://bugzilla.suse.com/1088639">SUSE bug 1088639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097401">SUSE bug 1097401</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628805" comment="libnghttp2-14-1.40.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153583" comment="libnghttp2-14 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628806" comment="libnghttp2-14-32bit-1.40.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177223" comment="libnghttp2-14-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000222</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000222" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000222" ref_url="https://www.suse.com/security/cve/CVE-2018-1000222" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2851-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00084.html" source="SUSE-SU"/>
    <description>
    Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000222/">CVE-2018-1000222</cve>
	<bugzilla href="https://bugzilla.suse.com/1105434">SUSE bug 1105434</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000223</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000223" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000223" ref_url="https://www.suse.com/security/cve/CVE-2018-1000223" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004651.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3070-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004652.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00005.html" source="SUSE-SU"/>
    <description>
    soundtouch version up to and including 2.0.0 contains a Buffer Overflow vulnerability in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() that can result in arbitrary code execution. This attack appear to be exploitable via victim must open maliocius file in soundstretch utility.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000223/">CVE-2018-1000223</cve>
	<bugzilla href="https://bugzilla.suse.com/1103676">SUSE bug 1103676</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486657" comment="libSoundTouch0-1.8.0-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009237168" comment="libSoundTouch0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000300</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000300" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000300" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000300" ref_url="https://www.suse.com/security/cve/CVE-2018-1000300" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00015.html" source="SUSE-SU"/>
    <description>
    curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl &lt; 7.54.1 and curl &gt;= 7.60.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000300/">CVE-2018-1000300</cve>
	<bugzilla href="https://bugzilla.suse.com/1092094">SUSE bug 1092094</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000301</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000301" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000301" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000301" ref_url="https://www.suse.com/security/cve/CVE-2018-1000301" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1327-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004707.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004103.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1344-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00015.html" source="SUSE-SU"/>
    <description>
    curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl &lt; 7.20.0 and curl &gt;= 7.60.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000301/">CVE-2018-1000301</cve>
	<bugzilla href="https://bugzilla.suse.com/1092098">SUSE bug 1092098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122464">SUSE bug 1122464</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000500</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000500" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000500" ref_url="https://www.suse.com/security/cve/CVE-2018-1000500" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1408-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LTZHQ6OAWXY23IUCNO7X25C5CHHCWLOM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3531-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EXGVAQ34C33F4R3O65TKB73FYUDCIM6B/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file".
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000500/">CVE-2018-1000500</cve>
	<bugzilla href="https://bugzilla.suse.com/1099263">SUSE bug 1099263</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152555" comment="busybox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653584" comment="busybox-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000517</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000517" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000517" ref_url="https://www.suse.com/security/cve/CVE-2018-1000517" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013133.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1408-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LTZHQ6OAWXY23IUCNO7X25C5CHHCWLOM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3531-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EXGVAQ34C33F4R3O65TKB73FYUDCIM6B/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Busybox wget that can result in heap buffer overflow. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in after commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000517/">CVE-2018-1000517</cve>
	<bugzilla href="https://bugzilla.suse.com/1099260">SUSE bug 1099260</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725896" comment="busybox-1.35.0-150000.4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152555" comment="busybox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725897" comment="busybox-static-1.35.0-150000.4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653584" comment="busybox-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000654</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000654" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000654" ref_url="https://www.suse.com/security/cve/CVE-2018-1000654" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005513.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1372-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005654.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005515.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012726.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1498-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00018.html" source="SUSE-SU"/>
    <description>
    GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000654/">CVE-2018-1000654</cve>
	<bugzilla href="https://bugzilla.suse.com/1105435">SUSE bug 1105435</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482427" comment="libtasn1-4.13-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152119" comment="libtasn1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482428" comment="libtasn1-6-4.13-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152120" comment="libtasn1-6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482429" comment="libtasn1-6-32bit-4.13-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152121" comment="libtasn1-6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000801</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000801" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000801" ref_url="https://www.suse.com/security/cve/CVE-2018-1000801" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2733-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00052.html" source="SUSE-SU"/>
    <description>
    okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular archive. This issue appears to have been corrected in version 18.08.1
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000801/">CVE-2018-1000801</cve>
	<bugzilla href="https://bugzilla.suse.com/1107591">SUSE bug 1107591</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694904" comment="okular-20.04.2-bp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009234588" comment="okular is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694905" comment="okular-lang-20.04.2-bp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009234592" comment="okular-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000802</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000802" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000802" ref_url="https://www.suse.com/security/cve/CVE-2018-1000802" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3002-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004640.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004809.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3554-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2053-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0302-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006445.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3052-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function. This vulnerability appears to have been fixed in after commit add531a1e55b0a739b0f42582f1c9747e5649ace.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000802/">CVE-2018-1000802</cve>
	<bugzilla href="https://bugzilla.suse.com/1109663">SUSE bug 1109663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000805</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000805" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000805" ref_url="https://www.suse.com/security/cve/CVE-2018-1000805" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0396-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190396-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006816.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0038-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012669.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0129-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00001.html" source="SUSE-SU"/>
    <description>
    Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000805/">CVE-2018-1000805</cve>
	<bugzilla href="https://bugzilla.suse.com/1111151">SUSE bug 1111151</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716329" comment="python-paramiko-doc-2.4.3-150100.6.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243759" comment="python-paramiko-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716215" comment="python2-paramiko-2.4.3-150100.6.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177264" comment="python2-paramiko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716204" comment="python3-paramiko-2.4.3-150100.6.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243760" comment="python3-paramiko is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000845</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000845" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000845" ref_url="https://www.suse.com/security/cve/CVE-2018-1000845" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0285-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0197-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00034.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultID: CVE-2017-6519.  Reason: This candidate is a duplicate of CVE-2017-6519.  Notes: All CVE users should reference CVE-2017-6519 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000845/">CVE-2018-1000845</cve>
	<bugzilla href="https://bugzilla.suse.com/1120281">SUSE bug 1120281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694719" comment="avahi-0.7-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151208" comment="avahi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694720" comment="avahi-lang-0.7-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151211" comment="avahi-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694721" comment="libavahi-client3-0.7-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151212" comment="libavahi-client3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694722" comment="libavahi-client3-32bit-0.7-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151213" comment="libavahi-client3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694723" comment="libavahi-common3-0.7-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151214" comment="libavahi-common3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694724" comment="libavahi-common3-32bit-0.7-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151215" comment="libavahi-common3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694725" comment="libavahi-core7-0.7-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151216" comment="libavahi-core7 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000852</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000852" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000852" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000852" ref_url="https://www.suse.com/security/cve/CVE-2018-1000852" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0539-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0096-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00022.html" source="SUSE-SU"/>
    <description>
    FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvc_main.c, drdynvc_process_capability_request that can result in The RDP server can read the client's memory.. This attack appear to be exploitable via RDPClient must connect the rdp server with echo option. This vulnerability appears to have been fixed in after commit 205c612820dac644d665b5bb1cdf437dc5ca01e3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000852/">CVE-2018-1000852</cve>
	<bugzilla href="https://bugzilla.suse.com/1117963">SUSE bug 1117963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120507">SUSE bug 1120507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131873">SUSE bug 1131873</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000858</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000858" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000858" ref_url="https://www.suse.com/security/cve/CVE-2018-1000858" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0023-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00009.html" source="SUSE-SU"/>
    <description>
    GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in dirmngr that can result in Attacker controlled CSRF, Information Disclosure, DoS. This attack appear to be exploitable via Victim must perform a WKD request, e.g. enter an email address in the composer window of Thunderbird/Enigmail. This vulnerability appears to have been fixed in after commit 4a4bb874f63741026bd26264c43bb32b1099f060.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000858/">CVE-2018-1000858</cve>
	<bugzilla href="https://bugzilla.suse.com/1120346">SUSE bug 1120346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628414" comment="dirmngr-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695558" comment="dirmngr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628415" comment="gpg2-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151446" comment="gpg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628416" comment="gpg2-lang-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151447" comment="gpg2-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000876" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000876</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000876" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000876" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000876" ref_url="https://www.suse.com/security/cve/CVE-2018-1000876" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc that can result in Integer overflow trigger heap overflow. Successful exploitation allows execution of arbitrary code.. This attack appear to be exploitable via Local. This vulnerability appears to have been fixed in after commit 3a551c7a1b80fca579461774860574eabfd7f18f.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000876/">CVE-2018-1000876</cve>
	<bugzilla href="https://bugzilla.suse.com/1120640">SUSE bug 1120640</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000877" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000877</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000877" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000877" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000877" ref_url="https://www.suse.com/security/cve/CVE-2018-1000877" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006196.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1196-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2632-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00015.html" source="SUSE-SU"/>
    <description>
    libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar-&gt;lzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000877/">CVE-2018-1000877</cve>
	<bugzilla href="https://bugzilla.suse.com/1120653">SUSE bug 1120653</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000878" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000878</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000878" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000878" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000878" ref_url="https://www.suse.com/security/cve/CVE-2018-1000878" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006196.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1196-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2632-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00015.html" source="SUSE-SU"/>
    <description>
    libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000878/">CVE-2018-1000878</cve>
	<bugzilla href="https://bugzilla.suse.com/1120654">SUSE bug 1120654</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000879" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000879</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000879" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000879" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000879" ref_url="https://www.suse.com/security/cve/CVE-2018-1000879" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005278.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1196-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html" source="SUSE-SU"/>
    <description>
    libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archive_acl.c, archive_acl_from_text_l() that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted archive file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000879/">CVE-2018-1000879</cve>
	<bugzilla href="https://bugzilla.suse.com/1120656">SUSE bug 1120656</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000880" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000880</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000880" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000880" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000880" ref_url="https://www.suse.com/security/cve/CVE-2018-1000880" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005278.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1196-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html" source="SUSE-SU"/>
    <description>
    libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0 onwards) contains a CWE-20: Improper Input Validation vulnerability in WARC parser - libarchive/archive_read_support_format_warc.c, _warc_read() that can result in DoS - quasi-infinite run time and disk usage from tiny file. This attack appear to be exploitable via the victim must open a specially crafted WARC file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000880/">CVE-2018-1000880</cve>
	<bugzilla href="https://bugzilla.suse.com/1120659">SUSE bug 1120659</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000888" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000888</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1000888" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000888" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1000888" ref_url="https://www.suse.com/security/cve/CVE-2018-1000888" source="SUSE CVE"/>
    <description>
    PEAR Archive_Tar version 1.4.3 and earlier contains a CWE-502, CWE-915 vulnerability in the Archive_Tar class. There are several file operations with `$v_header['filename']` as parameter (such as file_exists, is_file, is_dir, etc). When extract is called without a specific prefix path, we can trigger unserialization by crafting a tar file with `phar://[path_to_malicious_phar_file]` as path. Object injection can be used to trigger destruct in the loaded PHP classes, e.g. the Archive_Tar class itself. With Archive_Tar object injection, arbitrary file deletion can occur because `@unlink($this-&gt;_temp_tarname)` is called. If another class with useful gadget is loaded, it may possible to cause remote code execution that can result in files being deleted or possibly modified. This vulnerability appears to have been fixed in 1.4.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000888/">CVE-2018-1000888</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810017" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10017</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10017" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10017" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10017" ref_url="https://www.suse.com/security/cve/CVE-2018-10017" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1951-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004274.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00027.html" source="SUSE-SU"/>
    <description>
    soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read) via an IT or MO3 file with many nested pattern loops.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10017/">CVE-2018-10017</cve>
	<bugzilla href="https://bugzilla.suse.com/1089080">SUSE bug 1089080</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487555" comment="libopenmpt0-0.3.19-2.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230504" comment="libopenmpt0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10114</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10114" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10114" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10114" ref_url="https://www.suse.com/security/cve/CVE-2018-10114" source="SUSE CVE"/>
    <description>
    An issue was discovered in GEGL through 0.3.32. The gegl_buffer_iterate_read_simple function in buffer/gegl-buffer-access.c allows remote attackers to cause a denial of service (write access violation) or possibly have unspecified other impact via a malformed PPM file, related to improper restrictions on memory allocation in the ppm_load_read_header function in operations/external/ppm-load.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10114/">CVE-2018-10114</cve>
	<bugzilla href="https://bugzilla.suse.com/1089725">SUSE bug 1089725</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489199" comment="gegl-0_4-0.4.16-1.99 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662435" comment="gegl-0_4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489200" comment="gegl-0_4-lang-0.4.16-1.99 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662436" comment="gegl-0_4-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489202" comment="libgegl-0_4-0-0.4.16-1.99 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662437" comment="libgegl-0_4-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10119</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10119" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10119" ref_url="https://www.suse.com/security/cve/CVE-2018-10119" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00078.html" source="SUSE-SU"/>
    <description>
    sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10119/">CVE-2018-10119</cve>
	<bugzilla href="https://bugzilla.suse.com/1089705">SUSE bug 1089705</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10120</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10120" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10120" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10120" ref_url="https://www.suse.com/security/cve/CVE-2018-10120" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00078.html" source="SUSE-SU"/>
    <description>
    The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service (heap-based buffer overflow with write access) or possibly have unspecified other impact via a crafted document that contains a certain Microsoft Word record.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10120/">CVE-2018-10120</cve>
	<bugzilla href="https://bugzilla.suse.com/1089706">SUSE bug 1089706</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10194</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10194" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10194" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10194" ref_url="https://www.suse.com/security/cve/CVE-2018-10194" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1369-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1884-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004242.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00010.html" source="SUSE-SU"/>
    <description>
    The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10194/">CVE-2018-10194</cve>
	<bugzilla href="https://bugzilla.suse.com/1090099">SUSE bug 1090099</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10196</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10196" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10196" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10196" ref_url="https://www.suse.com/security/cve/CVE-2018-10196" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007677.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007306.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007668.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1294-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00073.html" source="SUSE-SU"/>
    <description>
    NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10196/">CVE-2018-10196</cve>
	<bugzilla href="https://bugzilla.suse.com/1093447">SUSE bug 1093447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628497" comment="graphviz-2.40.1-6.6.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167847" comment="graphviz is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694752" comment="graphviz-gd-2.40.1-6.6.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167853" comment="graphviz-gd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630157" comment="graphviz-gnome-2.40.1-6.6.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167855" comment="graphviz-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628499" comment="graphviz-plugins-core-2.40.1-6.6.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009254560" comment="graphviz-plugins-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628500" comment="libgraphviz6-2.40.1-6.6.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009254561" comment="libgraphviz6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810323" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10323</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10323" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10323" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10323" ref_url="https://www.suse.com/security/cve/CVE-2018-10323" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00036.html" source="SUSE-SU"/>
    <description>
    The xfs_bmap_extents_to_btree function in fs/xfs/libxfs/xfs_bmap.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_bmapi_write NULL pointer dereference) via a crafted xfs image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10323/">CVE-2018-10323</cve>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090717">SUSE bug 1090717</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810360" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10360</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10360" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10360" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10360" ref_url="https://www.suse.com/security/cve/CVE-2018-10360" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0571-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190571-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005284.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1197-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html" source="SUSE-SU"/>
    <description>
    The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10360/">CVE-2018-10360</cve>
	<bugzilla href="https://bugzilla.suse.com/1096974">SUSE bug 1096974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096984">SUSE bug 1096984</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126118">SUSE bug 1126118</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628435" comment="file-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151700" comment="file is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628437" comment="file-magic-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151702" comment="file-magic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628438" comment="libmagic1-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151703" comment="libmagic1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628439" comment="libmagic1-32bit-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151704" comment="libmagic1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810361" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10361</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10361" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10361" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10361" ref_url="https://www.suse.com/security/cve/CVE-2018-10361" source="SUSE CVE"/>
    <description>
    An issue was discovered in KTextEditor 5.34.0 through 5.45.0. Insecure handling of temporary files in the KTextEditor's kauth_ktexteditor_helper service (as utilized in the Kate text editor) can allow other unprivileged users on the local system to gain root privileges. The attack occurs when one user (who has an unprivileged account but is also able to authenticate as root) writes a text file using Kate into a directory owned by a another unprivileged user. The latter unprivileged user conducts a symlink attack to achieve privilege escalation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10361/">CVE-2018-10361</cve>
	<bugzilla href="https://bugzilla.suse.com/1033055">SUSE bug 1033055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1062040">SUSE bug 1062040</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124494">SUSE bug 1124494</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1147035">SUSE bug 1147035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1147038">SUSE bug 1147038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1147041">SUSE bug 1147041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1147043">SUSE bug 1147043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1147045">SUSE bug 1147045</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694825" comment="ktexteditor-5.76.0-bp153.1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695559" comment="ktexteditor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694826" comment="ktexteditor-lang-5.76.0-bp153.1.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695560" comment="ktexteditor-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10372</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10372" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10372" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10372" ref_url="https://www.suse.com/security/cve/CVE-2018-10372" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted binary file, as demonstrated by readelf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10372/">CVE-2018-10372</cve>
	<bugzilla href="https://bugzilla.suse.com/1091015">SUSE bug 1091015</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10373</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10373" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10373" ref_url="https://www.suse.com/security/cve/CVE-2018-10373" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted binary file, as demonstrated by nm-new.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10373/">CVE-2018-10373</cve>
	<bugzilla href="https://bugzilla.suse.com/1090997">SUSE bug 1090997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10392</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10392" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10392" ref_url="https://www.suse.com/security/cve/CVE-2018-10392" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1565-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1885-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004243.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1622-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1953-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00015.html" source="SUSE-SU"/>
    <description>
    mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10392/">CVE-2018-10392</cve>
	<bugzilla href="https://bugzilla.suse.com/1091070">SUSE bug 1091070</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481533" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151122" comment="libvorbis0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630097" comment="libvorbis0-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151123" comment="libvorbis0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481534" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151124" comment="libvorbisenc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630098" comment="libvorbisenc2-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151125" comment="libvorbisenc2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481535" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151126" comment="libvorbisfile3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10393</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10393" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10393" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10393" ref_url="https://www.suse.com/security/cve/CVE-2018-10393" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00084.html" source="SUSE-SU"/>
    <description>
    bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10393/">CVE-2018-10393</cve>
	<bugzilla href="https://bugzilla.suse.com/1091072">SUSE bug 1091072</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481533" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151122" comment="libvorbis0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630097" comment="libvorbis0-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151123" comment="libvorbis0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481534" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151124" comment="libvorbisenc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630098" comment="libvorbisenc2-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151125" comment="libvorbisenc2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481535" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151126" comment="libvorbisfile3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810471" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10471</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10471" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10471" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10471" ref_url="https://www.suse.com/security/cve/CVE-2018-10471" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1202-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004740.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00059.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10471/">CVE-2018-10471</cve>
	<bugzilla href="https://bugzilla.suse.com/1089635">SUSE bug 1089635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10472</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10472" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10472" ref_url="https://www.suse.com/security/cve/CVE-2018-10472" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1202-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004740.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00059.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users (in certain configurations) to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction with specifying the target file as the backing file of a snapshot.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10472/">CVE-2018-10472</cve>
	<bugzilla href="https://bugzilla.suse.com/1089152">SUSE bug 1089152</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1050</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1050" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1050" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1050" ref_url="https://www.suse.com/security/cve/CVE-2018-1050" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0754-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0774-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20180774-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003849.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004410.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004423.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2339-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004699.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0801-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00091.html" source="SUSE-SU"/>
    <description>
    All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1050/">CVE-2018-1050</cve>
	<bugzilla href="https://bugzilla.suse.com/1081741">SUSE bug 1081741</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10528</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10528" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10528" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10528" ref_url="https://www.suse.com/security/cve/CVE-2018-10528" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1138-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-05/msg00009.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char function in libraw_cxx.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10528/">CVE-2018-10528</cve>
	<bugzilla href="https://bugzilla.suse.com/1091345">SUSE bug 1091345</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10529</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10529" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10529" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10529" ref_url="https://www.suse.com/security/cve/CVE-2018-10529" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1138-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-05/msg00009.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in LibRaw 0.18.9. There is an out-of-bounds read affecting the X3F property table list implementation in libraw_x3f.cpp and libraw_cxx.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10529/">CVE-2018-10529</cve>
	<bugzilla href="https://bugzilla.suse.com/1091346">SUSE bug 1091346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10534</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10534" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10534" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10534" ref_url="https://www.suse.com/security/cve/CVE-2018-10534" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the value of (external_IMAGE_DEBUG_DIRECTORY) *edd so that the address exceeds its own memory region, resulting in an out-of-bounds memory write, as demonstrated by objcopy copying private info with _bfd_pex64_bfd_copy_private_bfd_data_common in pex64igen.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-10534/">CVE-2018-10534</cve>
	<bugzilla href="https://bugzilla.suse.com/1091368">SUSE bug 1091368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810535" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10535</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10535" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10535" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10535" ref_url="https://www.suse.com/security/cve/CVE-2018-10535" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab entry with a "SECTION" type that has a "0" value, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file, as demonstrated by objcopy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10535/">CVE-2018-10535</cve>
	<bugzilla href="https://bugzilla.suse.com/1091365">SUSE bug 1091365</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810536" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10536</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10536" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10536" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10536" ref_url="https://www.suse.com/security/cve/CVE-2018-10536" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0153-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EK4DH6BBB2WPBM677O7MFUOO5UBKUW37/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0154-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FD5IPNZ6LGJLORJOQVT3MAHBWF3ORQPT/" source="SUSE-SU"/>
    <description>
    An issue was discovered in WavPack 5.1.0 and earlier. The WAV parser component contains a vulnerability that allows writing to memory because ParseRiffHeaderConfig in riff.c does not reject multiple format chunks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10536/">CVE-2018-10536</cve>
	<bugzilla href="https://bugzilla.suse.com/1091344">SUSE bug 1091344</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628918" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172747" comment="libwavpack1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10537</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10537" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10537" ref_url="https://www.suse.com/security/cve/CVE-2018-10537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0153-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EK4DH6BBB2WPBM677O7MFUOO5UBKUW37/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0154-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FD5IPNZ6LGJLORJOQVT3MAHBWF3ORQPT/" source="SUSE-SU"/>
    <description>
    An issue was discovered in WavPack 5.1.0 and earlier. The W64 parser component contains a vulnerability that allows writing to memory because ParseWave64HeaderConfig in wave64.c does not reject multiple format chunks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10537/">CVE-2018-10537</cve>
	<bugzilla href="https://bugzilla.suse.com/1091343">SUSE bug 1091343</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628918" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172747" comment="libwavpack1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10538</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10538" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10538" ref_url="https://www.suse.com/security/cve/CVE-2018-10538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0153-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EK4DH6BBB2WPBM677O7MFUOO5UBKUW37/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0154-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FD5IPNZ6LGJLORJOQVT3MAHBWF3ORQPT/" source="SUSE-SU"/>
    <description>
    An issue was discovered in WavPack 5.1.0 and earlier for WAV input. Out-of-bounds writes can occur because ParseRiffHeaderConfig in riff.c does not validate the sizes of unknown chunks before attempting memory allocation, related to a lack of integer-overflow protection within a bytes_to_copy calculation and subsequent malloc call, leading to insufficient memory allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10538/">CVE-2018-10538</cve>
	<bugzilla href="https://bugzilla.suse.com/1091342">SUSE bug 1091342</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628918" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172747" comment="libwavpack1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10539</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10539" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10539" ref_url="https://www.suse.com/security/cve/CVE-2018-10539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0153-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EK4DH6BBB2WPBM677O7MFUOO5UBKUW37/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0154-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FD5IPNZ6LGJLORJOQVT3MAHBWF3ORQPT/" source="SUSE-SU"/>
    <description>
    An issue was discovered in WavPack 5.1.0 and earlier for DSDiff input. Out-of-bounds writes can occur because ParseDsdiffHeaderConfig in dsdiff.c does not validate the sizes of unknown chunks before attempting memory allocation, related to a lack of integer-overflow protection within a bytes_to_copy calculation and subsequent malloc call, leading to insufficient memory allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10539/">CVE-2018-10539</cve>
	<bugzilla href="https://bugzilla.suse.com/1091341">SUSE bug 1091341</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628918" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172747" comment="libwavpack1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10540</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10540" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10540" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10540" ref_url="https://www.suse.com/security/cve/CVE-2018-10540" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0153-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EK4DH6BBB2WPBM677O7MFUOO5UBKUW37/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0154-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FD5IPNZ6LGJLORJOQVT3MAHBWF3ORQPT/" source="SUSE-SU"/>
    <description>
    An issue was discovered in WavPack 5.1.0 and earlier for W64 input. Out-of-bounds writes can occur because ParseWave64HeaderConfig in wave64.c does not validate the sizes of unknown chunks before attempting memory allocation, related to a lack of integer-overflow protection within a bytes_to_copy calculation and subsequent malloc call, leading to insufficient memory allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10540/">CVE-2018-10540</cve>
	<bugzilla href="https://bugzilla.suse.com/1091340">SUSE bug 1091340</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628918" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172747" comment="libwavpack1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1055</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1055" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1055" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1055" ref_url="https://www.suse.com/security/cve/CVE-2018-1055" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003960.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-6871.  Reason: This candidate is a reservation duplicate of CVE-2018-6871.  Notes: All CVE users should reference CVE-2018-6871 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1055/">CVE-2018-1055</cve>
	<bugzilla href="https://bugzilla.suse.com/1080249">SUSE bug 1080249</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181057" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1057</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1057" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1057" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1057" ref_url="https://www.suse.com/security/cve/CVE-2018-1057" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004187.html" source="SUSE-SU"/>
		<reference ref_id="TID7022763" ref_url="https://www.suse.com/support/kb/doc/?id=7022763" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00035.html" source="SUSE-SU"/>
    <description>
    On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users and privileged service accounts (eg Domain Controllers).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1057/">CVE-2018-1057</cve>
	<bugzilla href="https://bugzilla.suse.com/1081024">SUSE bug 1081024</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10583</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10583" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10583" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10583" ref_url="https://www.suse.com/security/cve/CVE-2018-10583" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2485-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2485-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004933.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004840.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2532-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3796-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00019.html" source="SUSE-SU"/>
    <description>
    An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10583/">CVE-2018-10583</cve>
	<bugzilla href="https://bugzilla.suse.com/1091606">SUSE bug 1091606</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181060" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1060</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1060" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1060" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1060" ref_url="https://www.suse.com/security/cve/CVE-2018-1060" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004809.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3554-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0302-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006445.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2712-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1060/">CVE-2018-1060</cve>
	<bugzilla href="https://bugzilla.suse.com/1088009">SUSE bug 1088009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181061" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1061</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1061" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1061" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1061" ref_url="https://www.suse.com/security/cve/CVE-2018-1061" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004809.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3554-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2712-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method.  An attacker could use this flaw to cause denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1061/">CVE-2018-1061</cve>
	<bugzilla href="https://bugzilla.suse.com/1088004">SUSE bug 1088004</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1064</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1064" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1064" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1064" ref_url="https://www.suse.com/security/cve/CVE-2018-1064" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0838-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004357.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0939-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00011.html" source="SUSE-SU"/>
    <description>
    libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1064/">CVE-2018-1064</cve>
	<bugzilla href="https://bugzilla.suse.com/1076500">SUSE bug 1076500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083625">SUSE bug 1083625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087887">SUSE bug 1087887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088147">SUSE bug 1088147</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10689</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10689" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10689" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10689" ref_url="https://www.suse.com/security/cve/CVE-2018-10689" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005319.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1224-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00075.html" source="SUSE-SU"/>
    <description>
    blktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the dev_map_read function in btt/devmap.c because the device and devno arrays are too small, as demonstrated by an invalid free when using the btt program with a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-10689/">CVE-2018-10689</cve>
	<bugzilla href="https://bugzilla.suse.com/1091942">SUSE bug 1091942</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487734" comment="blktrace-1.1.0+git.20170126-3.3.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251428" comment="blktrace is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10733</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10733" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10733" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10733" ref_url="https://www.suse.com/security/cve/CVE-2018-10733" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0720-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006986.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1120-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00005.html" source="SUSE-SU"/>
    <description>
    There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-10733/">CVE-2018-10733</cve>
	<bugzilla href="https://bugzilla.suse.com/1092125">SUSE bug 1092125</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486678" comment="libgxps2-0.3.0-4.3.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009246900" comment="libgxps2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10772</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10772" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10772" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10772" ref_url="https://www.suse.com/security/cve/CVE-2018-10772" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3598-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-October/025597.html" source="SUSE-SU"/>
    <description>
    The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-18"/>
	<updated date="2022-10-18"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10772/">CVE-2018-10772</cve>
	<bugzilla href="https://bugzilla.suse.com/1092096">SUSE bug 1092096</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716317" comment="exiv2-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716318" comment="exiv2-lang-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716207" comment="libexiv2-26-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716319" comment="libexiv2-26-32bit-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716208" comment="libexiv2-devel-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716320" comment="libexiv2-doc-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10779</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10779" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10779" ref_url="https://www.suse.com/security/cve/CVE-2018-10779" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004543.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004587.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004765.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2880-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00055.html" source="SUSE-SU"/>
    <description>
    TIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10779/">CVE-2018-10779</cve>
	<bugzilla href="https://bugzilla.suse.com/1092480">SUSE bug 1092480</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10805</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10805" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10805" ref_url="https://www.suse.com/security/cve/CVE-2018-10805" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2390-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004481.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1860-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1862-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00040.html" source="SUSE-SU"/>
    <description>
    ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10805/">CVE-2018-10805</cve>
	<bugzilla href="https://bugzilla.suse.com/1095812">SUSE bug 1095812</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10839</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10839" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10839" ref_url="https://www.suse.com/security/cve/CVE-2018-10839" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004891.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3973-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183973-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3973-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005395.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3975-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183975-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3987-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13921-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913921-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14011-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005287.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4004-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00043.html" source="SUSE-SU"/>
    <description>
    An integer overflow issue was found in the NE200 NIC emulation. It could occur while receiving packets from the network, if the size value was greater than INT_MAX. Such overflow would lead to stack buffer overflow issue. A user inside guest could use this flaw to crash the QEMU process, resulting in DoS scenario.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-10839/">CVE-2018-10839</cve>
	<bugzilla href="https://bugzilla.suse.com/1110910">SUSE bug 1110910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110924">SUSE bug 1110924</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10844</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10844" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10844" ref_url="https://www.suse.com/security/cve/CVE-2018-10844" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2825-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004620.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2854-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2958-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00000.html" source="SUSE-SU"/>
    <description>
    It was found that GnuTLS's implementation of HMAC-SHA-256 was vulnerable to Lucky Thirteen-style attack. A remote attacker could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10844/">CVE-2018-10844</cve>
	<bugzilla href="https://bugzilla.suse.com/1105437">SUSE bug 1105437</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105459">SUSE bug 1105459</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628489" comment="gnutls-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628491" comment="libgnutls30-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177128" comment="libgnutls30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628492" comment="libgnutls30-32bit-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009235745" comment="libgnutls30-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10845</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10845" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10845" ref_url="https://www.suse.com/security/cve/CVE-2018-10845" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2825-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004620.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2854-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2958-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00000.html" source="SUSE-SU"/>
    <description>
    It was found that GnuTLS's implementation of HMAC-SHA-384 was vulnerable to a Lucky Thirteen-style attack. A remote attacker could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10845/">CVE-2018-10845</cve>
	<bugzilla href="https://bugzilla.suse.com/1105437">SUSE bug 1105437</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105459">SUSE bug 1105459</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628489" comment="gnutls-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628491" comment="libgnutls30-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177128" comment="libgnutls30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628492" comment="libgnutls30-32bit-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009235745" comment="libgnutls30-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10846</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10846" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10846" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10846" ref_url="https://www.suse.com/security/cve/CVE-2018-10846" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2825-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004620.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005483.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2854-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2958-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00000.html" source="SUSE-SU"/>
    <description>
    A cache-based side channel attack was found in the way GnuTLS implements CBC-mode cipher suites. An attacker could use a combination of "Just in Time" Prime+probe and Lucky-13 attacks to recover plain text in a cross-VM attack scenario.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10846/">CVE-2018-10846</cve>
	<bugzilla href="https://bugzilla.suse.com/1105460">SUSE bug 1105460</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628489" comment="gnutls-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628491" comment="libgnutls30-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177128" comment="libgnutls30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628492" comment="libgnutls30-32bit-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009235745" comment="libgnutls30-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10858</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10858" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10858" ref_url="https://www.suse.com/security/cve/CVE-2018-10858" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004407.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004408.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004409.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2320-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004733.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004410.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2329-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004415.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004423.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2339-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004699.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00059.html" source="SUSE-SU"/>
    <description>
    A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-10858/">CVE-2018-10858</cve>
	<bugzilla href="https://bugzilla.suse.com/1103411">SUSE bug 1103411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110943">SUSE bug 1110943</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810860" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10860</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10860" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10860" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10860" ref_url="https://www.suse.com/security/cve/CVE-2018-10860" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004454.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004456.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00069.html" source="SUSE-SU"/>
    <description>
    perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary files in the context of the perl interpreter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-10860/">CVE-2018-10860</cve>
	<bugzilla href="https://bugzilla.suse.com/1099497">SUSE bug 1099497</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481620" comment="perl-Archive-Zip-1.60-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233130" comment="perl-Archive-Zip is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810861" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10861</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10861" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10861" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10861" ref_url="https://www.suse.com/security/cve/CVE-2018-10861" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004254.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2193-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20182193-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004401.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004489.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0586-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005185.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2283-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1284-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00100.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-10861/">CVE-2018-10861</cve>
	<bugzilla href="https://bugzilla.suse.com/1099162">SUSE bug 1099162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114710">SUSE bug 1114710</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694875" comment="librados2-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694876" comment="librbd1-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810873" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10873</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10873" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10873" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10873" ref_url="https://www.suse.com/security/cve/CVE-2018-10873" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004516.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2566-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004519.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004526.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004528.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2709-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004559.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2601-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2730-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00029.html" source="SUSE-SU"/>
    <description>
    A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10873/">CVE-2018-10873</cve>
	<bugzilla href="https://bugzilla.suse.com/1104448">SUSE bug 1104448</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628871" comment="libspice-client-glib-2_0-8-0.38-1.59 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151753" comment="libspice-client-glib-2_0-8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628872" comment="libspice-client-glib-helper-0.38-1.59 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154105" comment="libspice-client-glib-helper is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628873" comment="libspice-client-gtk-3_0-5-0.38-1.59 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161282" comment="libspice-client-gtk-3_0-5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629866" comment="libspice-server1-0.14.3-1.48 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629986" comment="typelib-1_0-SpiceClientGlib-2_0-0.38-1.59 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151758" comment="typelib-1_0-SpiceClientGlib-2_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629987" comment="typelib-1_0-SpiceClientGtk-3_0-0.38-1.59 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151759" comment="typelib-1_0-SpiceClientGtk-3_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810875" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10875</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10875" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10875" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10875" ref_url="https://www.suse.com/security/cve/CVE-2018-10875" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4130-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0238-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1125-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10875/">CVE-2018-10875</cve>
	<bugzilla href="https://bugzilla.suse.com/1099808">SUSE bug 1099808</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109957">SUSE bug 1109957</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810887" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10887</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10887" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10887" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10887" ref_url="https://www.suse.com/security/cve/CVE-2018-10887" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2469-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004790.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00078.html" source="SUSE-SU"/>
    <description>
    A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may lead to an integer overflow which in turn leads to an out of bound read, allowing to read before the base object. An attacker may use this flaw to leak memory addresses or cause a Denial of Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10887/">CVE-2018-10887</cve>
	<bugzilla href="https://bugzilla.suse.com/1100613">SUSE bug 1100613</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810888" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10888</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10888" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10888" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10888" ref_url="https://www.suse.com/security/cve/CVE-2018-10888" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2469-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004790.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00078.html" source="SUSE-SU"/>
    <description>
    A flaw was found in libgit2 before version 0.27.3. A missing check in git_delta_apply function in delta.c file, may lead to an out-of-bound read while reading a binary delta file. An attacker may use this flaw to cause a Denial of Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10888/">CVE-2018-10888</cve>
	<bugzilla href="https://bugzilla.suse.com/1100612">SUSE bug 1100612</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810893" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10893</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10893" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10893" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10893" ref_url="https://www.suse.com/security/cve/CVE-2018-10893" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004516.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2566-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004519.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004526.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004528.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2709-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004559.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2601-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2730-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2018-10893/">CVE-2018-10893</cve>
	<bugzilla href="https://bugzilla.suse.com/1101295">SUSE bug 1101295</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628871" comment="libspice-client-glib-2_0-8-0.38-1.59 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151753" comment="libspice-client-glib-2_0-8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628872" comment="libspice-client-glib-helper-0.38-1.59 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154105" comment="libspice-client-glib-helper is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628873" comment="libspice-client-gtk-3_0-5-0.38-1.59 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161282" comment="libspice-client-gtk-3_0-5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629866" comment="libspice-server1-0.14.3-1.48 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629986" comment="typelib-1_0-SpiceClientGlib-2_0-0.38-1.59 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151758" comment="typelib-1_0-SpiceClientGlib-2_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629987" comment="typelib-1_0-SpiceClientGtk-3_0-0.38-1.59 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151759" comment="typelib-1_0-SpiceClientGtk-3_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10900</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10900" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10900" ref_url="https://www.suse.com/security/cve/CVE-2018-10900" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2297-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2307-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00044.html" source="SUSE-SU"/>
    <description>
    Network Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack. A new line character can be used to inject a Password helper parameter into the configuration data passed to VPNC, allowing an attacker to execute arbitrary commands as root.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10900/">CVE-2018-10900</cve>
	<bugzilla href="https://bugzilla.suse.com/1101147">SUSE bug 1101147</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694711" comment="NetworkManager-vpnc-1.2.6-lp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231925" comment="NetworkManager-vpnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694712" comment="NetworkManager-vpnc-gnome-1.2.6-lp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231926" comment="NetworkManager-vpnc-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694713" comment="NetworkManager-vpnc-lang-1.2.6-lp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231927" comment="NetworkManager-vpnc-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810903" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10903</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10903" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10903" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10903" ref_url="https://www.suse.com/security/cve/CVE-2018-10903" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004785.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004808.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006643.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006644.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012962.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00065.html" source="SUSE-SU"/>
    <description>
    A flaw was found in python-cryptography versions between &gt;=1.9.0 and &lt;2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-12-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10903/">CVE-2018-10903</cve>
	<bugzilla href="https://bugzilla.suse.com/1101820">SUSE bug 1101820</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009719776" comment="python2-cryptography-2.9.2-150200.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238250" comment="python2-cryptography is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721683" comment="python2-cryptography-vectors-2.9.2-150200.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009350110" comment="python2-cryptography-vectors is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721521" comment="python3-cryptography-2.9.2-150200.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238251" comment="python3-cryptography is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721684" comment="python3-cryptography-vectors-2.9.2-150200.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009350540" comment="python3-cryptography-vectors is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810906" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10906</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10906" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10906" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10906" ref_url="https://www.suse.com/security/cve/CVE-2018-10906" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004748.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00052.html" source="SUSE-SU"/>
    <description>
    In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is active. This allows non-root users to mount a FUSE file system with the 'allow_other' mount option regardless of whether 'user_allow_other' is set in the fuse configuration. An attacker may use this flaw to mount a FUSE file system, accessible by other users, and trick them into accessing files on that file system, possibly causing Denial of Service or other unspecified effects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-10906/">CVE-2018-10906</cve>
	<bugzilla href="https://bugzilla.suse.com/1101797">SUSE bug 1101797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127346">SUSE bug 1127346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127350">SUSE bug 1127350</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481128" comment="fuse-2.9.7-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151346" comment="fuse is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481131" comment="libfuse2-2.9.7-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151347" comment="libfuse2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810918" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10918</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10918" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10918" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10918" ref_url="https://www.suse.com/security/cve/CVE-2018-10918" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004407.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00059.html" source="SUSE-SU"/>
    <description>
    A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw to crash a samba server in an Active Directory Domain Controller configuration. Samba versions before 4.7.9 and 4.8.4 are vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10918/">CVE-2018-10918</cve>
	<bugzilla href="https://bugzilla.suse.com/1103414">SUSE bug 1103414</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810919" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10919</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10919" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10919" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10919" ref_url="https://www.suse.com/security/cve/CVE-2018-10919" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004407.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004675.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00036.html" source="SUSE-SU"/>
    <description>
    The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10919/">CVE-2018-10919</cve>
	<bugzilla href="https://bugzilla.suse.com/1095057">SUSE bug 1095057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110943">SUSE bug 1110943</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810933" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10933</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10933" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10933" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10933" ref_url="https://www.suse.com/security/cve/CVE-2018-10933" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004676.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004747.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00042.html" source="SUSE-SU"/>
    <description>
    A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10933/">CVE-2018-10933</cve>
	<bugzilla href="https://bugzilla.suse.com/1108020">SUSE bug 1108020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122198">SUSE bug 1122198</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482409" comment="libssh4-0.8.7-10.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151772" comment="libssh4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482410" comment="libssh4-32bit-0.8.7-10.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153278" comment="libssh4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810963" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10963</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10963" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10963" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10963" ref_url="https://www.suse.com/security/cve/CVE-2018-10963" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004247.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00017.html" source="SUSE-SU"/>
    <description>
    The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service (assertion failure and application crash) via a crafted file, a different vulnerability than CVE-2017-13726.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10963/">CVE-2018-10963</cve>
	<bugzilla href="https://bugzilla.suse.com/1092949">SUSE bug 1092949</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810981" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10981</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10981" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10981" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10981" ref_url="https://www.suse.com/security/cve/CVE-2018-10981" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004499.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1487-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00002.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (host OS infinite loop) in situations where a QEMU device model attempts to make invalid transitions between states of a request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10981/">CVE-2018-10981</cve>
	<bugzilla href="https://bugzilla.suse.com/1090823">SUSE bug 1090823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201810982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-10982</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-10982" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10982" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-10982" ref_url="https://www.suse.com/security/cve/CVE-2018-10982" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004499.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1487-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00002.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (unexpectedly high interrupt number, array overrun, and hypervisor crash) or possibly gain hypervisor privileges by setting up an HPET timer to deliver interrupts in IO-APIC mode, aka vHPET interrupt injection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10982/">CVE-2018-10982</cve>
	<bugzilla href="https://bugzilla.suse.com/1090822">SUSE bug 1090822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1106</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1106" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1106" ref_url="https://www.suse.com/security/cve/CVE-2018-1106" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1047-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1049-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00066.html" source="SUSE-SU"/>
    <description>
    An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1106/">CVE-2018-1106</cve>
	<bugzilla href="https://bugzilla.suse.com/1086936">SUSE bug 1086936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123722">SUSE bug 1123722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629089" comment="PackageKit-1.1.13-4.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174862" comment="PackageKit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629090" comment="PackageKit-backend-zypp-1.1.13-4.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174863" comment="PackageKit-backend-zypp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684220" comment="PackageKit-gstreamer-plugin-1.1.13-4.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174866" comment="PackageKit-gstreamer-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684221" comment="PackageKit-gtk3-module-1.1.13-4.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174867" comment="PackageKit-gtk3-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629092" comment="PackageKit-lang-1.1.13-4.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174868" comment="PackageKit-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629093" comment="libpackagekit-glib2-18-1.1.13-4.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174869" comment="libpackagekit-glib2-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629095" comment="typelib-1_0-PackageKitGlib-1_0-1.1.13-4.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174873" comment="typelib-1_0-PackageKitGlib-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1116</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1116" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1116" ref_url="https://www.suse.com/security/cve/CVE-2018-1116" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004366.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2284-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00030.html" source="SUSE-SU"/>
    <description>
    A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and information disclosure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1116/">CVE-2018-1116</cve>
	<bugzilla href="https://bugzilla.suse.com/1099031">SUSE bug 1099031</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482356" comment="libpolkit0-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151393" comment="libpolkit0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482357" comment="polkit-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151394" comment="polkit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482359" comment="typelib-1_0-Polkit-1_0-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151396" comment="typelib-1_0-Polkit-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11202</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11202" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11202" ref_url="https://www.suse.com/security/cve/CVE-2018-11202" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11202/">CVE-2018-11202</cve>
	<bugzilla href="https://bugzilla.suse.com/1093641">SUSE bug 1093641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694850" comment="libhdf5-103-1.10.7-bp153.3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695547" comment="libhdf5-103 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11203</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11203" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11203" ref_url="https://www.suse.com/security/cve/CVE-2018-11203" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11203/">CVE-2018-11203</cve>
	<bugzilla href="https://bugzilla.suse.com/1093649">SUSE bug 1093649</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694850" comment="libhdf5-103-1.10.7-bp153.3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695547" comment="libhdf5-103 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11204</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11204" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11204" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11204" ref_url="https://www.suse.com/security/cve/CVE-2018-11204" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11204/">CVE-2018-11204</cve>
	<bugzilla href="https://bugzilla.suse.com/1093655">SUSE bug 1093655</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694850" comment="libhdf5-103-1.10.7-bp153.3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695547" comment="libhdf5-103 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11205</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11205" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11205" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11205" ref_url="https://www.suse.com/security/cve/CVE-2018-11205" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012784.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012789.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012793.html" source="SUSE-SU"/>
    <description>
    A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-02"/>
	<updated date="2022-11-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11205/">CVE-2018-11205</cve>
	<bugzilla href="https://bugzilla.suse.com/1093663">SUSE bug 1093663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720110" comment="hdf5-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720111" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720112" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720113" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720114" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720115" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720116" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720117" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720118" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720119" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720120" comment="hdf5-hpc-examples-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721709" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721710" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721711" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721712" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721713" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721714" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721715" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721716" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721717" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721718" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721719" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721720" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721721" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721722" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721723" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721724" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721725" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721726" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721727" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721728" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721729" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721730" comment="libhdf5-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721731" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721732" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721733" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721734" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721735" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721736" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721737" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721738" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721739" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721740" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721741" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721742" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721743" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721744" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721745" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721746" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721747" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721748" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721749" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721750" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721751" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721752" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721753" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721754" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721755" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721756" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721757" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721758" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721759" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721760" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721761" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721762" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721763" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721764" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721765" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721766" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721767" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721768" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721769" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721770" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721771" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721772" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721773" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721774" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721775" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721776" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721777" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721778" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721779" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721780" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721781" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721782" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721783" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721784" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721785" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721786" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721787" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721788" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721789" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11206</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11206" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11206" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11206" ref_url="https://www.suse.com/security/cve/CVE-2018-11206" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11206/">CVE-2018-11206</cve>
	<bugzilla href="https://bugzilla.suse.com/1093657">SUSE bug 1093657</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684443" comment="hdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684444" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684445" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684446" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684447" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684448" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684449" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684450" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684451" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684452" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684453" comment="hdf5-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695078" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695079" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695080" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695081" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695082" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695083" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695084" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695085" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695086" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695087" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695088" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695089" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695090" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695091" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695092" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695093" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695094" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695095" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695096" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695097" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695098" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694850" comment="libhdf5-103-1.10.7-bp153.3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695547" comment="libhdf5-103 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695099" comment="libhdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695100" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695101" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695102" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695103" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695104" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695105" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695106" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695107" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695108" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695109" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695110" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695111" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695112" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695113" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695114" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695115" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695116" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695117" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695118" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695119" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695120" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695121" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695122" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695123" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695124" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695125" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695126" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695127" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695128" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695129" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695130" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695131" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695132" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695133" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695134" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695135" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695136" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695137" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695138" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695139" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695140" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695141" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695142" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695143" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695144" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695145" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695146" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695147" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695148" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695149" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695150" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695151" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695152" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695153" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695154" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695155" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695156" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695157" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695158" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11207</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11207" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11207" ref_url="https://www.suse.com/security/cve/CVE-2018-11207" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11207/">CVE-2018-11207</cve>
	<bugzilla href="https://bugzilla.suse.com/1093653">SUSE bug 1093653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105590">SUSE bug 1105590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109168">SUSE bug 1109168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694850" comment="libhdf5-103-1.10.7-bp153.3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695547" comment="libhdf5-103 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11212</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11212" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11212" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11212" ref_url="https://www.suse.com/security/cve/CVE-2018-11212" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0585-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190585-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005193.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005518.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2291-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192291-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2371-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192371-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1439-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1500-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11212/">CVE-2018-11212</cve>
	<bugzilla href="https://bugzilla.suse.com/1122299">SUSE bug 1122299</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181122" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1122</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1122" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1122" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1122" ref_url="https://www.suse.com/security/cve/CVE-2018-1122" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2042-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2451-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004889.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0450-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0450-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2376-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00059.html" source="SUSE-SU"/>
    <description>
    procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of several vulnerabilities in the config_file() function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<cve href="https://www.suse.com/security/cve/CVE-2018-1122/">CVE-2018-1122</cve>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092100">SUSE bug 1092100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093158">SUSE bug 1093158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123135">SUSE bug 1123135</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128955">SUSE bug 1128955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694865" comment="libprocps7-3.3.15-7.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009268885" comment="libprocps7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694866" comment="procps-3.3.15-7.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009229657" comment="procps is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181123" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1123</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1123" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1123" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1123" ref_url="https://www.suse.com/security/cve/CVE-2018-1123" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2042-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2451-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004889.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0450-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0450-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2376-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00059.html" source="SUSE-SU"/>
    <description>
    procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<cve href="https://www.suse.com/security/cve/CVE-2018-1123/">CVE-2018-1123</cve>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092100">SUSE bug 1092100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093158">SUSE bug 1093158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123135">SUSE bug 1123135</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128955">SUSE bug 1128955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694865" comment="libprocps7-3.3.15-7.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009268885" comment="libprocps7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694866" comment="procps-3.3.15-7.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009229657" comment="procps is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811235" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11235</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11235" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11235" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11235" ref_url="https://www.suse.com/security/cve/CVE-2018-11235" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1566-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004159.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1566-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004708.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1872-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2469-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004790.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006748.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html" source="SUSE-SU"/>
    <description>
    In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs "git clone --recurse-submodules" because submodule "names" are obtained from this file, and then appended to $GIT_DIR/modules, leading to directory traversal with "../" in a name. Finally, post-checkout hooks from a submodule are executed, bypassing the intended design in which hooks are not obtained from a remote server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11235/">CVE-2018-11235</cve>
	<bugzilla href="https://bugzilla.suse.com/1095219">SUSE bug 1095219</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11236</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11236" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11236" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11236" ref_url="https://www.suse.com/security/cve/CVE-2018-11236" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1562-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1562-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1991-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2302-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004403.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1600-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2159-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00000.html" source="SUSE-SU"/>
    <description>
    stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11236/">CVE-2018-11236</cve>
	<bugzilla href="https://bugzilla.suse.com/1094161">SUSE bug 1094161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118435">SUSE bug 1118435</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811237" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11237</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11237" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11237" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11237" ref_url="https://www.suse.com/security/cve/CVE-2018-11237" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1562-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1562-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1991-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004285.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1600-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2159-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00000.html" source="SUSE-SU"/>
    <description>
    An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11237/">CVE-2018-11237</cve>
	<bugzilla href="https://bugzilla.suse.com/1092877">SUSE bug 1092877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094154">SUSE bug 1094154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118435">SUSE bug 1118435</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181124" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1124</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1124" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1124" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1124" ref_url="https://www.suse.com/security/cve/CVE-2018-1124" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2042-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2451-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004889.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0450-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0450-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2376-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00059.html" source="SUSE-SU"/>
    <description>
    procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<cve href="https://www.suse.com/security/cve/CVE-2018-1124/">CVE-2018-1124</cve>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092100">SUSE bug 1092100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093158">SUSE bug 1093158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123135">SUSE bug 1123135</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128955">SUSE bug 1128955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694865" comment="libprocps7-3.3.15-7.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009268885" comment="libprocps7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694866" comment="procps-3.3.15-7.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009229657" comment="procps is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1125</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1125" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1125" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1125" ref_url="https://www.suse.com/security/cve/CVE-2018-1125" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2042-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2451-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004889.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0450-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0450-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2376-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00059.html" source="SUSE-SU"/>
    <description>
    procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat() to a stack-allocated string. When pgrep is compiled with FORTIFY (as on Red Hat Enterprise Linux and Fedora), the impact is limited to a crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<cve href="https://www.suse.com/security/cve/CVE-2018-1125/">CVE-2018-1125</cve>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092100">SUSE bug 1092100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093158">SUSE bug 1093158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123135">SUSE bug 1123135</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128955">SUSE bug 1128955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694865" comment="libprocps7-3.3.15-7.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009268885" comment="libprocps7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694866" comment="procps-3.3.15-7.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009229657" comment="procps is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1126" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1126" ref_url="https://www.suse.com/security/cve/CVE-2018-1126" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2042-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2451-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004889.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0450-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0450-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2376-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00059.html" source="SUSE-SU"/>
    <description>
    procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<cve href="https://www.suse.com/security/cve/CVE-2018-1126/">CVE-2018-1126</cve>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092100">SUSE bug 1092100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093158">SUSE bug 1093158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123135">SUSE bug 1123135</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128955">SUSE bug 1128955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694865" comment="libprocps7-3.3.15-7.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009268885" comment="libprocps7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694866" comment="procps-3.3.15-7.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009229657" comment="procps is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1128</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1128" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1128" ref_url="https://www.suse.com/security/cve/CVE-2018-1128" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004254.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2193-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20182193-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004401.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004489.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2862-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2980-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2981-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3961-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004905.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0586-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005185.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005474.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2283-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2738-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-09/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3071-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1284-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00100.html" source="SUSE-SU"/>
    <description>
    It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2018-1128/">CVE-2018-1128</cve>
	<bugzilla href="https://bugzilla.suse.com/1096748">SUSE bug 1096748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114710">SUSE bug 1114710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177843">SUSE bug 1177843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177859">SUSE bug 1177859</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694875" comment="librados2-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694876" comment="librbd1-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1129</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1129" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1129" ref_url="https://www.suse.com/security/cve/CVE-2018-1129" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004254.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2193-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20182193-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004401.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004489.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2862-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2980-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2981-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3961-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004905.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0586-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005185.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005474.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2283-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2738-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-09/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3071-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1284-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00100.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1129/">CVE-2018-1129</cve>
	<bugzilla href="https://bugzilla.suse.com/1096748">SUSE bug 1096748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114710">SUSE bug 1114710</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694875" comment="librados2-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694876" comment="librbd1-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1139</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1139" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1139" ref_url="https://www.suse.com/security/cve/CVE-2018-1139" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004407.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00059.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled. A man-in-the-middle attacker could use this flaw to read the credential and other details passed between the samba server and client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1139/">CVE-2018-1139</cve>
	<bugzilla href="https://bugzilla.suse.com/1095048">SUSE bug 1095048</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1140</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1140" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1140" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1140" ref_url="https://www.suse.com/security/cve/CVE-2018-1140" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004407.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00059.html" source="SUSE-SU"/>
    <description>
    A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker could use this flaw to cause a denial of service against a samba server, used as a Active Directory Domain Controller. All versions of Samba from 4.8.0 onwards are vulnerable
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1140/">CVE-2018-1140</cve>
	<bugzilla href="https://bugzilla.suse.com/1095056">SUSE bug 1095056</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628548" comment="libldb2-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291435" comment="libldb2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628549" comment="libldb2-32bit-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291436" comment="libldb2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628550" comment="python3-ldb-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247520" comment="python3-ldb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11410</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11410" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11410" ref_url="https://www.suse.com/security/cve/CVE-2018-11410" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0795-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005257.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1160-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in compileTranslationTable.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11410/">CVE-2018-11410</cve>
	<bugzilla href="https://bugzilla.suse.com/1094685">SUSE bug 1094685</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487548" comment="liblouis-data-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487550" comment="liblouis19-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695545" comment="liblouis19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487551" comment="python3-louis-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177235" comment="python3-louis is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11439</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11439" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11439" ref_url="https://www.suse.com/security/cve/CVE-2018-11439" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1374-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2968-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007596.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00024.html" source="SUSE-SU"/>
    <description>
    The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11439/">CVE-2018-11439</cve>
	<bugzilla href="https://bugzilla.suse.com/1096180">SUSE bug 1096180</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628891" comment="libtag1-1.11.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151716" comment="libtag1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629217" comment="libtag_c0-1.11.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151717" comment="libtag_c0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11440</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11440" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11440" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11440" ref_url="https://www.suse.com/security/cve/CVE-2018-11440" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0795-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005257.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2819-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1160-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html" source="SUSE-SU"/>
    <description>
    Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11440/">CVE-2018-11440</cve>
	<bugzilla href="https://bugzilla.suse.com/1095189">SUSE bug 1095189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095827">SUSE bug 1095827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096665">SUSE bug 1096665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097103">SUSE bug 1097103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487548" comment="liblouis-data-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487550" comment="liblouis19-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695545" comment="liblouis19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487551" comment="python3-louis-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177235" comment="python3-louis is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811468" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11468</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11468" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11468" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11468" ref_url="https://www.suse.com/security/cve/CVE-2018-11468" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00007.html" source="SUSE-SU"/>
    <description>
    The __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-11468/">CVE-2018-11468</cve>
	<bugzilla href="https://bugzilla.suse.com/1094809">SUSE bug 1094809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482299" comment="libmarkdown2-2.2.4-1.41 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009242941" comment="libmarkdown2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11490</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11490" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11490" ref_url="https://www.suse.com/security/cve/CVE-2018-11490" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011325.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:967-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1565-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010963.html" source="SUSE-SU"/>
    <description>
    The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain "Private-&gt;RunningCode - 2" array index is not checked. This will lead to a denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11490/">CVE-2018-11490</cve>
	<bugzilla href="https://bugzilla.suse.com/1094832">SUSE bug 1094832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679712" comment="giflib-devel-5.2.1-150000.4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153063" comment="giflib-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679754" comment="giflib-devel-32bit-5.2.1-150000.4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153064" comment="giflib-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679755" comment="giflib-progs-5.2.1-150000.4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153065" comment="giflib-progs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679713" comment="libgif7-5.2.1-150000.4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177219" comment="libgif7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679756" comment="libgif7-32bit-5.2.1-150000.4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009682761" comment="libgif7-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181152" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1152</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1152" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1152" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1152" ref_url="https://www.suse.com/security/cve/CVE-2018-1152" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0711-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005415.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1118-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00015.html" source="SUSE-SU"/>
    <description>
    libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1152/">CVE-2018-1152</cve>
	<bugzilla href="https://bugzilla.suse.com/1098155">SUSE bug 1098155</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628779" comment="libjpeg8-8.1.2-5.15.7 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152543" comment="libjpeg8 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11531</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11531" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11531" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11531" ref_url="https://www.suse.com/security/cve/CVE-2018-11531" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013143.html" source="SUSE-SU"/>
    <description>
    Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-30"/>
	<updated date="2022-11-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11531/">CVE-2018-11531</cve>
	<bugzilla href="https://bugzilla.suse.com/1095070">SUSE bug 1095070</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725422" comment="exiv2-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725423" comment="exiv2-lang-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725374" comment="libexiv2-26-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725424" comment="libexiv2-26-32bit-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725375" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725425" comment="libexiv2-doc-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11624</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11624" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11624" ref_url="https://www.suse.com/security/cve/CVE-2018-11624" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004300.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00040.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11624/">CVE-2018-11624</cve>
	<bugzilla href="https://bugzilla.suse.com/1096203">SUSE bug 1096203</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11625</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11625" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11625" ref_url="https://www.suse.com/security/cve/CVE-2018-11625" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004300.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00040.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11625/">CVE-2018-11625</cve>
	<bugzilla href="https://bugzilla.suse.com/1096200">SUSE bug 1096200</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11646</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11646" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11646" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11646" ref_url="https://www.suse.com/security/cve/CVE-2018-11646" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004321.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-11646/">CVE-2018-11646</cve>
	<bugzilla href="https://bugzilla.suse.com/1095611">SUSE bug 1095611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097693">SUSE bug 1097693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11683</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11683" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11683" ref_url="https://www.suse.com/security/cve/CVE-2018-11683" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004520.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0795-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005257.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2819-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1160-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html" source="SUSE-SU"/>
    <description>
    Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11683/">CVE-2018-11683</cve>
	<bugzilla href="https://bugzilla.suse.com/1095827">SUSE bug 1095827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096665">SUSE bug 1096665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487548" comment="liblouis-data-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487550" comment="liblouis19-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695545" comment="liblouis19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487551" comment="python3-louis-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177235" comment="python3-louis is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811684" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11684</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11684" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11684" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11684" ref_url="https://www.suse.com/security/cve/CVE-2018-11684" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004520.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0795-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005257.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2819-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1160-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html" source="SUSE-SU"/>
    <description>
    Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11684/">CVE-2018-11684</cve>
	<bugzilla href="https://bugzilla.suse.com/1095826">SUSE bug 1095826</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487548" comment="liblouis-data-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487550" comment="liblouis19-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695545" comment="liblouis19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487551" comment="python3-louis-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177235" comment="python3-louis is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11685</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11685" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11685" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11685" ref_url="https://www.suse.com/security/cve/CVE-2018-11685" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004520.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0795-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005257.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2819-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1160-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html" source="SUSE-SU"/>
    <description>
    Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11685/">CVE-2018-11685</cve>
	<bugzilla href="https://bugzilla.suse.com/1095825">SUSE bug 1095825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487548" comment="liblouis-data-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487550" comment="liblouis19-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695545" comment="liblouis19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487551" comment="python3-louis-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177235" comment="python3-louis is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11710</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11710" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11710" ref_url="https://www.suse.com/security/cve/CVE-2018-11710" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1951-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004274.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00027.html" source="SUSE-SU"/>
    <description>
    soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted AMS file because of an invalid write near address 0 in an out-of-memory situation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11710/">CVE-2018-11710</cve>
	<bugzilla href="https://bugzilla.suse.com/1095644">SUSE bug 1095644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487555" comment="libopenmpt0-0.3.19-2.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230504" comment="libopenmpt0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11712</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11712" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11712" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11712" ref_url="https://www.suse.com/security/cve/CVE-2018-11712" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-11712/">CVE-2018-11712</cve>
	<bugzilla href="https://bugzilla.suse.com/1096061">SUSE bug 1096061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097693">SUSE bug 1097693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11713</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11713" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11713" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11713" ref_url="https://www.suse.com/security/cve/CVE-2018-11713" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by crafted web sites via a WebSocket connection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-11713/">CVE-2018-11713</cve>
	<bugzilla href="https://bugzilla.suse.com/1096060">SUSE bug 1096060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097693">SUSE bug 1097693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11763</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11763" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11763" ref_url="https://www.suse.com/security/cve/CVE-2018-11763" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004664.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004815.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3582-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004917.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2 protocol.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-11763/">CVE-2018-11763</cve>
	<bugzilla href="https://bugzilla.suse.com/1109961">SUSE bug 1109961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811784" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11784</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11784" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11784" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11784" ref_url="https://www.suse.com/security/cve/CVE-2018-11784" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3261-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3393-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004786.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3968-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183968-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3453-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-11784/">CVE-2018-11784</cve>
	<bugzilla href="https://bugzilla.suse.com/1110850">SUSE bug 1110850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11806</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11806" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11806" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11806" ref_url="https://www.suse.com/security/cve/CVE-2018-11806" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2037-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004306.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004315.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2081-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004511.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2565-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004518.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004532.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004542.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2973-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2973-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004715.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2402-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3709-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00013.html" source="SUSE-SU"/>
    <description>
    m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11806/">CVE-2018-11806</cve>
	<bugzilla href="https://bugzilla.suse.com/1096223">SUSE bug 1096223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096224">SUSE bug 1096224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201811813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-11813</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-11813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11813" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-11813" ref_url="https://www.suse.com/security/cve/CVE-2018-11813" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0711-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005415.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1118-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00015.html" source="SUSE-SU"/>
    <description>
    libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11813/">CVE-2018-11813</cve>
	<bugzilla href="https://bugzilla.suse.com/1096209">SUSE bug 1096209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172994">SUSE bug 1172994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172995">SUSE bug 1172995</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628779" comment="libjpeg8-8.1.2-5.15.7 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152543" comment="libjpeg8 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812015" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12015</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12015" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12015" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12015" ref_url="https://www.suse.com/security/cve/CVE-2018-12015" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1972-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004279.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004286.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2447-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004474.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00024.html" source="SUSE-SU"/>
    <description>
    In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-12015/">CVE-2018-12015</cve>
	<bugzilla href="https://bugzilla.suse.com/1096718">SUSE bug 1096718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099497">SUSE bug 1099497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099507">SUSE bug 1099507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106717">SUSE bug 1106717</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628966" comment="perl-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628967" comment="perl-base-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628968" comment="perl-base-32bit-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153231" comment="perl-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628969" comment="perl-core-DB_File-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695544" comment="perl-core-DB_File is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12020</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12020" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12020" ref_url="https://www.suse.com/security/cve/CVE-2018-12020" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004193.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1698-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1698-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004689.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004384.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1706-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1708-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1722-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00034.html" source="SUSE-SU"/>
    <description>
    mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12020/">CVE-2018-12020</cve>
	<bugzilla href="https://bugzilla.suse.com/1096745">SUSE bug 1096745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101134">SUSE bug 1101134</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628414" comment="dirmngr-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695558" comment="dirmngr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628415" comment="gpg2-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151446" comment="gpg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628416" comment="gpg2-lang-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151447" comment="gpg2-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812085" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12085</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12085" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12085" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12085" ref_url="https://www.suse.com/security/cve/CVE-2018-12085" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0795-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005257.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2819-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1160-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html" source="SUSE-SU"/>
    <description>
    Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12085/">CVE-2018-12085</cve>
	<bugzilla href="https://bugzilla.suse.com/1097103">SUSE bug 1097103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487548" comment="liblouis-data-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487550" comment="liblouis19-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695545" comment="liblouis19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487551" comment="python3-louis-3.11.0-1.42 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177235" comment="python3-louis is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12126" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12126" ref_url="https://www.suse.com/security/cve/CVE-2018-12126" source="SUSE CVE"/>
		<reference ref_id="MDS-BLOG-SUSE" ref_url="https://www.suse.com/c/suse-addresses-microarchitectural-data-sampling-vulnerabilities/" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1239-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005464.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005451.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005456.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005450.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005472.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005474.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005486.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005495.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1356-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005510.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005455.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005473.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14063-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005492.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1423-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005530.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005540.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005581.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1909-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="TID000019406" ref_url="https://www.suse.com/support/kb/doc/?id=000019406" source="SUSE-SU"/>
		<reference ref_id="TID000019455" ref_url="https://www.suse.com/support/kb/doc/?id=000019455" source="SUSE-SU"/>
		<reference ref_id="TID7023736" ref_url="https://www.suse.com/support/kb/doc/?id=7023736" source="SUSE-SU"/>
		<reference ref_id="TID7023881" ref_url="https://www.suse.com/support/kb/doc/?id=7023881" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1402-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1403-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1805-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1806-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12126/">CVE-2018-12126</cve>
	<bugzilla href="https://bugzilla.suse.com/1103186">SUSE bug 1103186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111331">SUSE bug 1111331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132686">SUSE bug 1132686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135409">SUSE bug 1135409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135524">SUSE bug 1135524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137916">SUSE bug 1137916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138534">SUSE bug 1138534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141977">SUSE bug 1141977</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149725">SUSE bug 1149725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149726">SUSE bug 1149726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149729">SUSE bug 1149729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201877">SUSE bug 1201877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629040" comment="ucode-intel-20210216-2.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12127</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12127" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12127" ref_url="https://www.suse.com/security/cve/CVE-2018-12127" source="SUSE CVE"/>
		<reference ref_id="MDS-BLOG-SUSE" ref_url="https://www.suse.com/c/suse-addresses-microarchitectural-data-sampling-vulnerabilities/" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1239-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005464.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005451.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005456.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005450.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005472.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005474.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005486.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005495.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1356-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005510.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005455.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005473.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14063-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005492.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1423-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005530.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005540.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005581.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1909-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="TID000019406" ref_url="https://www.suse.com/support/kb/doc/?id=000019406" source="SUSE-SU"/>
		<reference ref_id="TID000019455" ref_url="https://www.suse.com/support/kb/doc/?id=000019455" source="SUSE-SU"/>
		<reference ref_id="TID7023736" ref_url="https://www.suse.com/support/kb/doc/?id=7023736" source="SUSE-SU"/>
		<reference ref_id="TID7023881" ref_url="https://www.suse.com/support/kb/doc/?id=7023881" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1402-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1403-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1805-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1806-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12127/">CVE-2018-12127</cve>
	<bugzilla href="https://bugzilla.suse.com/1103186">SUSE bug 1103186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111331">SUSE bug 1111331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132686">SUSE bug 1132686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135409">SUSE bug 1135409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138534">SUSE bug 1138534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141977">SUSE bug 1141977</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201877">SUSE bug 1201877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629040" comment="ucode-intel-20210216-2.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12130</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12130" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12130" ref_url="https://www.suse.com/security/cve/CVE-2018-12130" source="SUSE CVE"/>
		<reference ref_id="MDS-BLOG-SUSE" ref_url="https://www.suse.com/c/suse-addresses-microarchitectural-data-sampling-vulnerabilities/" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1239-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005464.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005451.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005456.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005450.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005472.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005474.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005486.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005495.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1356-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005510.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005455.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005473.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14063-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005492.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1423-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005530.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005540.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005581.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1909-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="TID000019406" ref_url="https://www.suse.com/support/kb/doc/?id=000019406" source="SUSE-SU"/>
		<reference ref_id="TID000019455" ref_url="https://www.suse.com/support/kb/doc/?id=000019455" source="SUSE-SU"/>
		<reference ref_id="TID7023736" ref_url="https://www.suse.com/support/kb/doc/?id=7023736" source="SUSE-SU"/>
		<reference ref_id="TID7023881" ref_url="https://www.suse.com/support/kb/doc/?id=7023881" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1402-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1403-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1805-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1806-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12130/">CVE-2018-12130</cve>
	<bugzilla href="https://bugzilla.suse.com/1103186">SUSE bug 1103186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111331">SUSE bug 1111331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132686">SUSE bug 1132686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135409">SUSE bug 1135409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137916">SUSE bug 1137916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138534">SUSE bug 1138534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141977">SUSE bug 1141977</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201877">SUSE bug 1201877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629040" comment="ucode-intel-20210216-2.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12178</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12178" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12178" ref_url="https://www.suse.com/security/cve/CVE-2018-12178" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0579-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0581-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005183.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00046.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via network.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12178/">CVE-2018-12178</cve>
	<bugzilla href="https://bugzilla.suse.com/1127821">SUSE bug 1127821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12180</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12180" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12180" ref_url="https://www.suse.com/security/cve/CVE-2018-12180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0579-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0581-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005183.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00046.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via network access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12180/">CVE-2018-12180</cve>
	<bugzilla href="https://bugzilla.suse.com/1127820">SUSE bug 1127820</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12181</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12181" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12181" ref_url="https://www.suse.com/security/cve/CVE-2018-12181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005247.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005268.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00048.html" source="SUSE-SU"/>
    <description>
    Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12181/">CVE-2018-12181</cve>
	<bugzilla href="https://bugzilla.suse.com/1128503">SUSE bug 1128503</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12207</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12207" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12207" ref_url="https://www.suse.com/security/cve/CVE-2018-12207" source="SUSE CVE"/>
		<reference ref_id="SUSE-BLOG-TAA-IFU" ref_url="https://www.suse.com/c/suse-addresses-transactional-asynchronous-abort-and-machine-check-error-on-page-size-changes-issues/" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2946-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192946-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2947-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2951-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006134.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2953-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192953-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2955-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192955-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2960-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2961-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192961-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3297-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006253.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006456.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006485.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007221.html" source="SUSE-SU"/>
		<reference ref_id="TID000019411" ref_url="https://www.suse.com/support/kb/doc/?id=000019411" source="SUSE-SU"/>
		<reference ref_id="TID7023735" ref_url="https://www.suse.com/support/kb/doc/?id=7023735" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2506-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00042.html" source="SUSE-SU"/>
    <description>
    Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12207/">CVE-2018-12207</cve>
	<bugzilla href="https://bugzilla.suse.com/1117665">SUSE bug 1117665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139073">SUSE bug 1139073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152505">SUSE bug 1152505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155812">SUSE bug 1155812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155817">SUSE bug 1155817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155945">SUSE bug 1155945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201877">SUSE bug 1201877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12232</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12232" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12232" ref_url="https://www.suse.com/security/cve/CVE-2018-12232" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0224-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00023.html" source="SUSE-SU"/>
    <description>
    In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where they target the same socket file descriptor, related to the sock_close and sockfs_setattr functions. fchownat does not increment the file descriptor reference count, which allows close to set the socket to NULL during fchownat's execution, leading to a NULL pointer dereference and system crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<cve href="https://www.suse.com/security/cve/CVE-2018-12232/">CVE-2018-12232</cve>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097593">SUSE bug 1097593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125907">SUSE bug 1125907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127757">SUSE bug 1127757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812264" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12264</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12264" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12264" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12264" ref_url="https://www.suse.com/security/cve/CVE-2018-12264" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006676.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html" source="SUSE-SU"/>
    <description>
    Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12264/">CVE-2018-12264</cve>
	<bugzilla href="https://bugzilla.suse.com/1097600">SUSE bug 1097600</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12265</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12265" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12265" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12265" ref_url="https://www.suse.com/security/cve/CVE-2018-12265" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006676.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html" source="SUSE-SU"/>
    <description>
    Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12265/">CVE-2018-12265</cve>
	<bugzilla href="https://bugzilla.suse.com/1097599">SUSE bug 1097599</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812359" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12359</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12359" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12359" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12359" ref_url="https://www.suse.com/security/cve/CVE-2018-12359" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1907-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2330-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60, Thunderbird &lt; 52.9, Firefox ESR &lt; 60.1, Firefox ESR &lt; 52.9, and Firefox &lt; 61.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12359/">CVE-2018-12359</cve>
	<bugzilla href="https://bugzilla.suse.com/1098998">SUSE bug 1098998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812360" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12360</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12360" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12360" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12360" ref_url="https://www.suse.com/security/cve/CVE-2018-12360" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1907-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2330-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60, Thunderbird &lt; 52.9, Firefox ESR &lt; 60.1, Firefox ESR &lt; 52.9, and Firefox &lt; 61.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12360/">CVE-2018-12360</cve>
	<bugzilla href="https://bugzilla.suse.com/1098998">SUSE bug 1098998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812361" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12361</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12361" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12361" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12361" ref_url="https://www.suse.com/security/cve/CVE-2018-12361" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics computations when their inputs are not sanitized which results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60, Firefox ESR &lt; 60.1, and Firefox &lt; 61.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12361/">CVE-2018-12361</cve>
	<bugzilla href="https://bugzilla.suse.com/1098998">SUSE bug 1098998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12362</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12362" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12362" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12362" ref_url="https://www.suse.com/security/cve/CVE-2018-12362" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1907-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2330-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60, Thunderbird &lt; 52.9, Firefox ESR &lt; 60.1, Firefox ESR &lt; 52.9, and Firefox &lt; 61.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12362/">CVE-2018-12362</cve>
	<bugzilla href="https://bugzilla.suse.com/1098998">SUSE bug 1098998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12363</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12363" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12363" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12363" ref_url="https://www.suse.com/security/cve/CVE-2018-12363" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1907-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2330-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node being freed but the node still having a pointer referencing it. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60, Thunderbird &lt; 52.9, Firefox ESR &lt; 60.1, Firefox ESR &lt; 52.9, and Firefox &lt; 61.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12363/">CVE-2018-12363</cve>
	<bugzilla href="https://bugzilla.suse.com/1098998">SUSE bug 1098998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12364</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12364" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12364" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12364" ref_url="https://www.suse.com/security/cve/CVE-2018-12364" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1907-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2330-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect to the target site. This allows for a malicious site to engage in cross-site request forgery (CSRF) attacks. This vulnerability affects Thunderbird &lt; 60, Thunderbird &lt; 52.9, Firefox ESR &lt; 60.1, Firefox ESR &lt; 52.9, and Firefox &lt; 61.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12364/">CVE-2018-12364</cve>
	<bugzilla href="https://bugzilla.suse.com/1098998">SUSE bug 1098998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12365</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12365" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12365" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12365" ref_url="https://www.suse.com/security/cve/CVE-2018-12365" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1907-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2330-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private local files. This vulnerability affects Thunderbird &lt; 60, Thunderbird &lt; 52.9, Firefox ESR &lt; 60.1, Firefox ESR &lt; 52.9, and Firefox &lt; 61.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12365/">CVE-2018-12365</cve>
	<bugzilla href="https://bugzilla.suse.com/1098998">SUSE bug 1098998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812366" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12366</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12366" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12366" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12366" ref_url="https://www.suse.com/security/cve/CVE-2018-12366" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1907-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2330-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird &lt; 60, Thunderbird &lt; 52.9, Firefox ESR &lt; 60.1, Firefox ESR &lt; 52.9, and Firefox &lt; 61.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12366/">CVE-2018-12366</cve>
	<bugzilla href="https://bugzilla.suse.com/1098998">SUSE bug 1098998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812367" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12367</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12367" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12367" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12367" ref_url="https://www.suse.com/security/cve/CVE-2018-12367" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the ability to measure precise time intervals. In that work PerformanceNavigationTiming was not adjusted but it was found that it could be used as a precision timer. This vulnerability affects Thunderbird &lt; 60, Firefox ESR &lt; 60.1, and Firefox &lt; 61.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12367/">CVE-2018-12367</cve>
	<bugzilla href="https://bugzilla.suse.com/1098998">SUSE bug 1098998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812368" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12368</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12368" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12368" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12368" ref_url="https://www.suse.com/security/cve/CVE-2018-12368" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004413.html" source="SUSE-SU"/>
    <description>
    Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have been downloaded from the internet and have the "Mark of the Web." Without the warning, unsuspecting users unfamiliar with this new file type might run an unwanted executable. This also allows a WebExtension with the limited downloads.open permission to execute arbitrary code without user interaction on Windows 10 systems. *Note: this issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird &lt; 60, Thunderbird &lt; 52.9, Firefox ESR &lt; 60.1, Firefox ESR &lt; 52.9, and Firefox &lt; 61.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-12368/">CVE-2018-12368</cve>
	<bugzilla href="https://bugzilla.suse.com/1098998">SUSE bug 1098998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12371</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12371" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12371" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12371" ref_url="https://www.suse.com/security/cve/CVE-2018-12371" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR &lt; 60.1, Thunderbird &lt; 60, and Firefox &lt; 61.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12371/">CVE-2018-12371</cve>
	<bugzilla href="https://bugzilla.suse.com/1098998">SUSE bug 1098998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12372</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12372" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12372" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12372" ref_url="https://www.suse.com/security/cve/CVE-2018-12372" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004369.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1907-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird &lt; 52.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12372/">CVE-2018-12372</cve>
	<bugzilla href="https://bugzilla.suse.com/1100082">SUSE bug 1100082</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12373</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12373" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12373" ref_url="https://www.suse.com/security/cve/CVE-2018-12373" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004369.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1907-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00008.html" source="SUSE-SU"/>
    <description>
    dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forward. This vulnerability affects Thunderbird &lt; 52.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12373/">CVE-2018-12373</cve>
	<bugzilla href="https://bugzilla.suse.com/1100079">SUSE bug 1100079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12374</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12374" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12374" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12374" ref_url="https://www.suse.com/security/cve/CVE-2018-12374" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004369.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1907-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Plaintext of decrypted emails can leak through by user submitting an embedded form by pressing enter key within a text input field. This vulnerability affects Thunderbird &lt; 52.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12374/">CVE-2018-12374</cve>
	<bugzilla href="https://bugzilla.suse.com/1100081">SUSE bug 1100081</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12376</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12376" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12376" ref_url="https://www.suse.com/security/cve/CVE-2018-12376" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004918.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 62, Firefox ESR &lt; 60.2, and Thunderbird &lt; 60.2.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2018-12376/">CVE-2018-12376</cve>
	<bugzilla href="https://bugzilla.suse.com/1107343">SUSE bug 1107343</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12377</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12377" ref_url="https://www.suse.com/security/cve/CVE-2018-12377" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004918.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use. This results in a potentially exploitable crash. This vulnerability affects Firefox &lt; 62, Firefox ESR &lt; 60.2, and Thunderbird &lt; 60.2.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12377/">CVE-2018-12377</cve>
	<bugzilla href="https://bugzilla.suse.com/1107343">SUSE bug 1107343</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12378</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12378" ref_url="https://www.suse.com/security/cve/CVE-2018-12378" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004918.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to be stored. This results in a potentially exploitable crash. This vulnerability affects Firefox &lt; 62, Firefox ESR &lt; 60.2, and Thunderbird &lt; 60.2.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12378/">CVE-2018-12378</cve>
	<bugzilla href="https://bugzilla.suse.com/1107343">SUSE bug 1107343</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12379</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12379" ref_url="https://www.suse.com/security/cve/CVE-2018-12379" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004918.html" source="SUSE-SU"/>
    <description>
    When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading to a potentially exploitable crash. This requires running the Mozilla Updater manually on the local system with the malicious MAR file in order to occur. This vulnerability affects Firefox &lt; 62, Firefox ESR &lt; 60.2, and Thunderbird &lt; 60.2.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-12379/">CVE-2018-12379</cve>
	<bugzilla href="https://bugzilla.suse.com/1107343">SUSE bug 1107343</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12381</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12381" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12381" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12381" ref_url="https://www.suse.com/security/cve/CVE-2018-12381" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004918.html" source="SUSE-SU"/>
    <description>
    Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are incorrectly interpreted as a URL. *Note: this issue only affects Windows operating systems with Outlook installed. Other operating systems are not affected.*. This vulnerability affects Firefox ESR &lt; 60.2 and Firefox &lt; 62.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-12381/">CVE-2018-12381</cve>
	<bugzilla href="https://bugzilla.suse.com/1107343">SUSE bug 1107343</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12383</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12383" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12383" ref_url="https://www.suse.com/security/cve/CVE-2018-12383" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3476-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004918.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2817-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Firefox 58. The new master password is added only on the new file. This could allow the exposure of stored password data outside of user expectations. This vulnerability affects Firefox &lt; 62, Firefox ESR &lt; 60.2.1, and Thunderbird &lt; 60.2.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12383/">CVE-2018-12383</cve>
	<bugzilla href="https://bugzilla.suse.com/1107343">SUSE bug 1107343</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12384</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12384" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12384" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12384" ref_url="https://www.suse.com/security/cve/CVE-2018-12384" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005339.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4117-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00030.html" source="SUSE-SU"/>
    <description>
    When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead. This results in full malleability of the ClientHello for SSLv2 used for TLS 1.2 in all versions prior to NSS 3.39. This does not impact TLS 1.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-12384/">CVE-2018-12384</cve>
	<bugzilla href="https://bugzilla.suse.com/1106873">SUSE bug 1106873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121207">SUSE bug 1121207</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12385</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12385" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12385" ref_url="https://www.suse.com/security/cve/CVE-2018-12385" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3476-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004918.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2817-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory. This issue is only exploitable in combination with another vulnerability allowing an attacker to write data into the local cache or from locally installed malware. This issue also triggers a non-exploitable startup crash for users switching between the Nightly and Release versions of Firefox if the same profile is used. This vulnerability affects Thunderbird &lt; 60.2.1, Firefox ESR &lt; 60.2.1, and Firefox &lt; 62.0.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-12385/">CVE-2018-12385</cve>
	<bugzilla href="https://bugzilla.suse.com/1109363">SUSE bug 1109363</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12386</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12386" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12386" ref_url="https://www.suse.com/security/cve/CVE-2018-12386" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3476-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004918.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00002.html" source="SUSE-SU"/>
    <description>
    A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. This vulnerability affects Firefox ESR &lt; 60.2.2 and Firefox &lt; 62.0.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12386/">CVE-2018-12386</cve>
	<bugzilla href="https://bugzilla.suse.com/1110506">SUSE bug 1110506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12387</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12387" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12387" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12387" ref_url="https://www.suse.com/security/cve/CVE-2018-12387" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3476-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004918.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00002.html" source="SUSE-SU"/>
    <description>
    A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content process. This vulnerability affects Firefox ESR &lt; 60.2.2 and Firefox &lt; 62.0.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12387/">CVE-2018-12387</cve>
	<bugzilla href="https://bugzilla.suse.com/1110507">SUSE bug 1110507</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12389</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12389" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12389" ref_url="https://www.suse.com/security/cve/CVE-2018-12389" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004851.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3435-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3646-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR &lt; 60.3 and Thunderbird &lt; 60.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12389/">CVE-2018-12389</cve>
	<bugzilla href="https://bugzilla.suse.com/1112852">SUSE bug 1112852</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12390</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12390" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12390" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12390" ref_url="https://www.suse.com/security/cve/CVE-2018-12390" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004851.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3435-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3646-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 63, Firefox ESR &lt; 60.3, and Thunderbird &lt; 60.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12390/">CVE-2018-12390</cve>
	<bugzilla href="https://bugzilla.suse.com/1112852">SUSE bug 1112852</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12391</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12391" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12391" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12391" ref_url="https://www.suse.com/security/cve/CVE-2018-12391" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004851.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3646-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this issue is addressed by treating all HLS streams as cross-origin and opaque to access. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox &lt; 63, Firefox ESR &lt; 60.3, and Thunderbird &lt; 60.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12391/">CVE-2018-12391</cve>
	<bugzilla href="https://bugzilla.suse.com/1112852">SUSE bug 1112852</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12392</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12392" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12392" ref_url="https://www.suse.com/security/cve/CVE-2018-12392" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004851.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3435-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3646-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects Firefox &lt; 63, Firefox ESR &lt; 60.3, and Thunderbird &lt; 60.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12392/">CVE-2018-12392</cve>
	<bugzilla href="https://bugzilla.suse.com/1112852">SUSE bug 1112852</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12393</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12393" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12393" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12393" ref_url="https://www.suse.com/security/cve/CVE-2018-12393" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004851.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3435-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3646-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could result in allocating a buffer too small for the conversion. This leads to a possible out-of-bounds write. *Note: 64-bit builds are not vulnerable to this issue.*. This vulnerability affects Firefox &lt; 63, Firefox ESR &lt; 60.3, and Thunderbird &lt; 60.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12393/">CVE-2018-12393</cve>
	<bugzilla href="https://bugzilla.suse.com/1112852">SUSE bug 1112852</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12395</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12395" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12395" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12395" ref_url="https://www.suse.com/security/cve/CVE-2018-12395" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005382.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3435-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00063.html" source="SUSE-SU"/>
    <description>
    By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through domain fronting. This would allow access to domains that share a host that are otherwise restricted. This vulnerability affects Firefox ESR &lt; 60.3 and Firefox &lt; 63.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-12395/">CVE-2018-12395</cve>
	<bugzilla href="https://bugzilla.suse.com/1112852">SUSE bug 1112852</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12396</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12396" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12396" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12396" ref_url="https://www.suse.com/security/cve/CVE-2018-12396" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005382.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3435-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00063.html" source="SUSE-SU"/>
    <description>
    A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events. This allows for potential privilege escalation by the WebExtension on sites where content scripts should not be run. This vulnerability affects Firefox ESR &lt; 60.3 and Firefox &lt; 63.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-12396/">CVE-2018-12396</cve>
	<bugzilla href="https://bugzilla.suse.com/1112852">SUSE bug 1112852</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812397" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12397</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12397" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12397" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12397" ref_url="https://www.suse.com/security/cve/CVE-2018-12397" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3749-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005382.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3435-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00063.html" source="SUSE-SU"/>
    <description>
    A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your data for all websites" being displayed to the user. This allows extensions to run content scripts in local pages without permission warnings when a local file is opened. This vulnerability affects Firefox ESR &lt; 60.3 and Firefox &lt; 63.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-12397/">CVE-2018-12397</cve>
	<bugzilla href="https://bugzilla.suse.com/1112852">SUSE bug 1112852</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812404" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12404</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12404" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12404" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12404" ref_url="https://www.suse.com/security/cve/CVE-2018-12404" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4117-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1758-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html" source="SUSE-SU"/>
    <description>
    A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12404/">CVE-2018-12404</cve>
	<bugzilla href="https://bugzilla.suse.com/1119069">SUSE bug 1119069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121207">SUSE bug 1121207</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12405</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12405" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12405" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12405" ref_url="https://www.suse.com/security/cve/CVE-2018-12405" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00069.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 60.4, Firefox ESR &lt; 60.4, and Firefox &lt; 64.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12405/">CVE-2018-12405</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121207">SUSE bug 1121207</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12458</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12458" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12458" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12458" ref_url="https://www.suse.com/security/cve/CVE-2018-12458" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004825.html" source="SUSE-SU"/>
    <description>
    An improper integer type in the mpeg4_encode_gop_header function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12458/">CVE-2018-12458</cve>
	<bugzilla href="https://bugzilla.suse.com/1097983">SUSE bug 1097983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12495</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12495" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12495" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12495" ref_url="https://www.suse.com/security/cve/CVE-2018-12495" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00007.html" source="SUSE-SU"/>
    <description>
    The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12495/">CVE-2018-12495</cve>
	<bugzilla href="https://bugzilla.suse.com/1098252">SUSE bug 1098252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482299" comment="libmarkdown2-2.2.4-1.41 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009242941" comment="libmarkdown2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12599</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12599" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12599" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12599" ref_url="https://www.suse.com/security/cve/CVE-2018-12599" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004682.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3225-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00040.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12599/">CVE-2018-12599</cve>
	<bugzilla href="https://bugzilla.suse.com/1098546">SUSE bug 1098546</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117463">SUSE bug 1117463</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12600</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12600" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12600" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12600" ref_url="https://www.suse.com/security/cve/CVE-2018-12600" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004682.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3225-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00040.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12600/">CVE-2018-12600</cve>
	<bugzilla href="https://bugzilla.suse.com/1098545">SUSE bug 1098545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098546">SUSE bug 1098546</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117463">SUSE bug 1117463</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812617" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12617</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12617" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12617" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12617" ref_url="https://www.suse.com/security/cve/CVE-2018-12617" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2037-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004306.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004315.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004511.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2565-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004518.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004532.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004542.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2973-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2973-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004715.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3709-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00013.html" source="SUSE-SU"/>
    <description>
    qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflow causing a g_malloc0() call to trigger a segmentation fault when trying to allocate a large memory chunk. The vulnerability can be exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12617/">CVE-2018-12617</cve>
	<bugzilla href="https://bugzilla.suse.com/1098735">SUSE bug 1098735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098744">SUSE bug 1098744</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12648</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12648" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12648" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12648" ref_url="https://www.suse.com/security/cve/CVE-2018-12648" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005607.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1657-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00070.html" source="SUSE-SU"/>
    <description>
    The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12648/">CVE-2018-12648</cve>
	<bugzilla href="https://bugzilla.suse.com/1098946">SUSE bug 1098946</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487347" comment="libexempi3-2.4.5-3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173304" comment="libexempi3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812882" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12882</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12882" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12882" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12882" ref_url="https://www.suse.com/security/cve/CVE-2018-12882" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004244.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1936-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1936-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1913-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00022.html" source="SUSE-SU"/>
    <description>
    exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not responsible for closing. The vulnerable code is reachable through the PHP exif_read_data function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12882/">CVE-2018-12882</cve>
	<bugzilla href="https://bugzilla.suse.com/1099098">SUSE bug 1099098</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812891" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12891</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12891" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12891" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12891" ref_url="https://www.suse.com/security/cve/CVE-2018-12891" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1981-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2037-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004306.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004315.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2081-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004499.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2116-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00012.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.10.x. Certain PV MMU operations may take a long time to process. For that reason Xen explicitly checks for the need to preempt the current vCPU at certain points. A few rarely taken code paths did bypass such checks. By suitably enforcing the conditions through its own page table contents, a malicious guest may cause such bypasses to be used for an unbounded number of iterations. A malicious or buggy PV guest may cause a Denial of Service (DoS) affecting the entire host. Specifically, it may prevent use of a physical CPU for an indeterminate period of time. All Xen versions from 3.4 onwards are vulnerable. Xen versions 3.3 and earlier are vulnerable to an even wider class of attacks, due to them lacking preemption checks altogether in the affected code paths. Only x86 systems are affected. ARM systems are not affected. Only multi-vCPU x86 PV guests can leverage the vulnerability. x86 HVM or PVH guests as well as x86 single-vCPU PV ones cannot leverage the vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12891/">CVE-2018-12891</cve>
	<bugzilla href="https://bugzilla.suse.com/1097521">SUSE bug 1097521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812892" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12892</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12892" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12892" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12892" ref_url="https://www.suse.com/security/cve/CVE-2018-12892" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1981-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2081-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004736.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2116-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00012.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen 4.7 through 4.10.x. libxl fails to pass the readonly flag to qemu when setting up a SCSI disk, due to what was probably an erroneous merge conflict resolution. Malicious guest administrators or (in some situations) users may be able to write to supposedly read-only disk images. Only emulated SCSI disks (specified as "sd" in the libxl disk configuration, or an equivalent) are affected. IDE disks ("hd") are not affected (because attempts to make them readonly are rejected). Additionally, CDROM devices (that is, devices specified to be presented to the guest as CDROMs, regardless of the nature of the backing storage on the host) are not affected; they are always read only. Only systems using qemu-xen (rather than qemu-xen-traditional) as the device model version are vulnerable. Only systems using libxl or libxl-based toolstacks are vulnerable. (This includes xl, and libvirt with the libxl driver.) The vulnerability is present in Xen versions 4.7 and later. (In earlier versions, provided that the patch for XSA-142 has been applied, attempts to create read only disks are rejected.) If the host and guest together usually support PVHVM, the issue is exploitable only if the malicious guest administrator has control of the guest kernel or guest kernel command line.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-12892/">CVE-2018-12892</cve>
	<bugzilla href="https://bugzilla.suse.com/1097523">SUSE bug 1097523</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812893" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12893</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12893" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12893" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12893" ref_url="https://www.suse.com/security/cve/CVE-2018-12893" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1981-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2037-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004306.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004315.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2081-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004499.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2116-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00012.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.10.x. One of the fixes in XSA-260 added some safety checks to help prevent Xen livelocking with debug exceptions. Unfortunately, due to an oversight, at least one of these safety checks can be triggered by a guest. A malicious PV guest can crash Xen, leading to a Denial of Service. All Xen systems which have applied the XSA-260 fix are vulnerable. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only x86 PV guests can exploit the vulnerability. x86 HVM and PVH guests cannot exploit the vulnerability. An attacker needs to be able to control hardware debugging facilities to exploit the vulnerability, but such permissions are typically available to unprivileged users.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12893/">CVE-2018-12893</cve>
	<bugzilla href="https://bugzilla.suse.com/1097522">SUSE bug 1097522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12900</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12900" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12900" ref_url="https://www.suse.com/security/cve/CVE-2018-12900" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004880.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004890.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3911-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004897.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3947-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3948-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00050.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12900/">CVE-2018-12900</cve>
	<bugzilla href="https://bugzilla.suse.com/1099257">SUSE bug 1099257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125113">SUSE bug 1125113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150480">SUSE bug 1150480</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812910" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12910</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12910" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12910" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12910" ref_url="https://www.suse.com/security/cve/CVE-2018-12910" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004374.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2204-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00003.html" source="SUSE-SU"/>
    <description>
    The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12910/">CVE-2018-12910</cve>
	<bugzilla href="https://bugzilla.suse.com/1100097">SUSE bug 1100097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482399" comment="libsoup-2_4-1-2.68.3-2.32 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151596" comment="libsoup-2_4-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482400" comment="libsoup-lang-2.68.3-2.32 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151598" comment="libsoup-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487573" comment="typelib-1_0-Soup-2_4-2.68.3-2.32 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151599" comment="typelib-1_0-Soup-2_4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812911" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12911</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12911" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12911" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12911" ref_url="https://www.suse.com/security/cve/CVE-2018-12911" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the get_simple_globs functions in ThirdParty/xdgmime/src/xdgmimecache.c and ThirdParty/xdgmime/src/xdgmimeglob.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12911/">CVE-2018-12911</cve>
	<bugzilla href="https://bugzilla.suse.com/1101999">SUSE bug 1101999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104169">SUSE bug 1104169</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201812983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-12983</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-12983" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12983" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-12983" ref_url="https://www.suse.com/security/cve/CVE-2018-12983" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012377.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012785.html" source="SUSE-SU"/>
    <description>
    A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-02"/>
	<updated date="2022-11-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12983/">CVE-2018-12983</cve>
	<bugzilla href="https://bugzilla.suse.com/1099719">SUSE bug 1099719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009713928" comment="libpodofo-devel-0.9.6-150300.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243194" comment="libpodofo-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009713929" comment="libpodofo0_9_6-0.9.6-150300.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243195" comment="libpodofo0_9_6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009713930" comment="podofo-0.9.6-150300.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243196" comment="podofo is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201813053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-13053</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-13053" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13053" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-13053" ref_url="https://www.suse.com/security/cve/CVE-2018-13053" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004305.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004334.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004377.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004417.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2344-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004442.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004445.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2384-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004452.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2118-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00036.html" source="SUSE-SU"/>
    <description>
    The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because ktime_add_safe is not used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13053/">CVE-2018-13053</cve>
	<bugzilla href="https://bugzilla.suse.com/1099924">SUSE bug 1099924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1311</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1311" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1311" ref_url="https://www.suse.com/security/cve/CVE-2018-1311" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009385.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2944-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-September/020051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2958-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009415.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1231-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GBRNNZMHWDSWWFESWQDTSNE4Q5NETCUO/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2958-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BGBVRVIJEOW5LG3NVS52NA3VNX37UM7D/" source="SUSE-SU"/>
    <description>
    The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1311/">CVE-2018-1311</cve>
	<bugzilla href="https://bugzilla.suse.com/1159552">SUSE bug 1159552</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631810" comment="libxerces-c-3_1-3.1.4-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151260" comment="libxerces-c-3_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631870" comment="libxerces-c-3_1-32bit-3.1.4-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153271" comment="libxerces-c-3_1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201813139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-13139</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-13139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13139" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-13139" ref_url="https://www.suse.com/security/cve/CVE-2018-13139" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004320.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009301.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VGFWRIIXBFCLA7GINXJUPUD7YVYB5UKO/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2764-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y7PPP2MGW6YG46U25HVAXKQBMB2PV4XV/" source="SUSE-SU"/>
    <description>
    A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-13139/">CVE-2018-13139</cve>
	<bugzilla href="https://bugzilla.suse.com/1100167">SUSE bug 1100167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116993">SUSE bug 1116993</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626824" comment="libsndfile-devel-1.0.28-5.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626879" comment="libsndfile-progs-1.0.28-5.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152565" comment="libsndfile-progs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489444" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695653" comment="libsndfile1-32bit-1.0.28-5.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201813300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-13300</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-13300" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13300" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-13300" ref_url="https://www.suse.com/security/cve/CVE-2018-13300" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004825.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2723-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2723-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2734-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1066-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00039.html" source="SUSE-SU"/>
    <description>
    In FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the avpriv_request_sample function in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information disclosure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13300/">CVE-2018-13300</cve>
	<bugzilla href="https://bugzilla.suse.com/1100348">SUSE bug 1100348</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201813301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-13301</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-13301" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13301" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-13301" ref_url="https://www.suse.com/security/cve/CVE-2018-13301" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3184-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007084.html" source="SUSE-SU"/>
    <description>
    In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13301/">CVE-2018-13301</cve>
	<bugzilla href="https://bugzilla.suse.com/1100352">SUSE bug 1100352</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201813302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-13302</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-13302" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13302" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-13302" ref_url="https://www.suse.com/security/cve/CVE-2018-13302" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004405.html" source="SUSE-SU"/>
    <description>
    In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13302/">CVE-2018-13302</cve>
	<bugzilla href="https://bugzilla.suse.com/1100356">SUSE bug 1100356</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201813305" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-13305</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-13305" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13305" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-13305" ref_url="https://www.suse.com/security/cve/CVE-2018-13305" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004825.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html" source="SUSE-SU"/>
    <description>
    In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13305/">CVE-2018-13305</cve>
	<bugzilla href="https://bugzilla.suse.com/1100345">SUSE bug 1100345</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201813405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-13405</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-13405" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13405" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-13405" ref_url="https://www.suse.com/security/cve/CVE-2018-13405" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:28-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:29-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004305.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004334.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004377.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2344-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004442.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2384-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004452.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3748-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-November/020791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3929-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/020993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009872.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2118-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1460-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MLGTNISZMAYBWA26GZHGZYQYWHM3VSZI/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1477-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/J325P6NPH7BF7P7B3LO6FGQNCTFNGKEW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3876-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JOIHHN3KQX7O34NG25NJOF7PFEZF2TVP/" source="SUSE-SU"/>
    <description>
    The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-13405/">CVE-2018-13405</cve>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1100416">SUSE bug 1100416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129735">SUSE bug 1129735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195161">SUSE bug 1195161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198702">SUSE bug 1198702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658245" comment="kernel-debug-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658155" comment="kernel-default-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658246" comment="kernel-kvmsmall-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658247" comment="kernel-vanilla-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658248" comment="kernel-vanilla-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658249" comment="kernel-vanilla-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658250" comment="kernel-vanilla-livepatch-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658251" comment="kernel-zfcpdump-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201813785" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-13785</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-13785" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13785" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-13785" ref_url="https://www.suse.com/security/cve/CVE-2018-13785" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3933-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4064-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0057-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0057-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005380.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1398-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005664.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1530-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00021.html" source="SUSE-SU"/>
    <description>
    In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13785/">CVE-2018-13785</cve>
	<bugzilla href="https://bugzilla.suse.com/1100687">SUSE bug 1100687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112153">SUSE bug 1112153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116574">SUSE bug 1116574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482352" comment="libpng16-16-1.6.34-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482353" comment="libpng16-16-32bit-1.6.34-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201813867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-13867</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-13867" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13867" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-13867" ref_url="https://www.suse.com/security/cve/CVE-2018-13867" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012784.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012789.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012793.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-02"/>
	<updated date="2022-11-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13867/">CVE-2018-13867</cve>
	<bugzilla href="https://bugzilla.suse.com/1101906">SUSE bug 1101906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720110" comment="hdf5-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720111" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720112" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720113" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720114" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720115" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720116" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720117" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720118" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720119" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720120" comment="hdf5-hpc-examples-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721709" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721710" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721711" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721712" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721713" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721714" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721715" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721716" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721717" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721718" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721719" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721720" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721721" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721722" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721723" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721724" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721725" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721726" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721727" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721728" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721729" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721730" comment="libhdf5-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721731" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721732" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721733" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721734" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721735" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721736" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721737" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721738" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721739" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721740" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721741" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721742" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721743" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721744" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721745" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721746" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721747" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721748" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721749" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721750" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721751" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721752" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721753" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721754" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721755" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721756" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721757" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721758" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721759" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721760" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721761" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721762" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721763" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721764" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721765" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721766" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721767" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721768" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721769" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721770" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721771" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721772" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721773" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721774" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721775" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721776" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721777" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721778" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721779" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721780" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721781" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721782" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721783" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721784" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721785" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721786" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721787" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721788" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721789" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201813869" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-13869</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-13869" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13869" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-13869" ref_url="https://www.suse.com/security/cve/CVE-2018-13869" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_decode in H5Olink.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13869/">CVE-2018-13869</cve>
	<bugzilla href="https://bugzilla.suse.com/1101495">SUSE bug 1101495</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694850" comment="libhdf5-103-1.10.7-bp153.3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695547" comment="libhdf5-103 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201813870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-13870</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-13870" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13870" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-13870" ref_url="https://www.suse.com/security/cve/CVE-2018-13870" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link_decode in H5Olink.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13870/">CVE-2018-13870</cve>
	<bugzilla href="https://bugzilla.suse.com/1101493">SUSE bug 1101493</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694850" comment="libhdf5-103-1.10.7-bp153.3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695547" comment="libhdf5-103 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201813988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-13988</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-13988" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13988" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-13988" ref_url="https://www.suse.com/security/cve/CVE-2018-13988" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13988/">CVE-2018-13988</cve>
	<bugzilla href="https://bugzilla.suse.com/1102531">SUSE bug 1102531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14031</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14031" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14031" ref_url="https://www.suse.com/security/cve/CVE-2018-14031" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012784.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012789.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012793.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5T_copy in H5T.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-02"/>
	<updated date="2022-11-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14031/">CVE-2018-14031</cve>
	<bugzilla href="https://bugzilla.suse.com/1101475">SUSE bug 1101475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720110" comment="hdf5-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720111" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720112" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720113" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720114" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720115" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720116" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720117" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720118" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720119" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720120" comment="hdf5-hpc-examples-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721709" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721710" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721711" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721712" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721713" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721714" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721715" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721716" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721717" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721718" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721719" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721720" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721721" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721722" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721723" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721724" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721725" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721726" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721727" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721728" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721729" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721730" comment="libhdf5-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721731" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721732" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721733" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721734" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721735" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721736" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721737" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721738" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721739" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721740" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721741" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721742" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721743" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721744" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721745" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721746" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721747" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721748" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721749" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721750" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721751" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721752" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721753" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721754" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721755" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721756" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721757" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721758" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721759" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721760" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721761" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721762" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721763" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721764" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721765" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721766" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721767" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721768" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721769" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721770" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721771" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721772" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721773" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721774" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721775" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721776" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721777" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721778" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721779" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721780" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721781" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721782" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721783" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721784" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721785" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721786" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721787" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721788" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721789" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14032</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14032" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14032" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14032" ref_url="https://www.suse.com/security/cve/CVE-2018-14032" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-11206. Reason: This candidate is a reservation duplicate of CVE-2018-11206. Notes: All CVE users should reference CVE-2018-11206 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-03"/>
	<updated date="2022-09-08"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14032/">CVE-2018-14032</cve>
	<bugzilla href="https://bugzilla.suse.com/1101474">SUSE bug 1101474</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684443" comment="hdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684444" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684445" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684446" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684447" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684448" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684449" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684450" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684451" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684452" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684453" comment="hdf5-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695078" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695079" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695080" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695081" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695082" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695083" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695084" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695085" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695086" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695087" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695088" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695089" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695090" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695091" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695092" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695093" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695094" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695095" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695096" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695097" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695098" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695099" comment="libhdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695100" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695101" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695102" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695103" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695104" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695105" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695106" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695107" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695108" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695109" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695110" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695111" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695112" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695113" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695114" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695115" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695116" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695117" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695118" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695119" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695120" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695121" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695122" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695123" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695124" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695125" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695126" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695127" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695128" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695129" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695130" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695131" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695132" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695133" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695134" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695135" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695136" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695137" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695138" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695139" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695140" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695141" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695142" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695143" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695144" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695145" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695146" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695147" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695148" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695149" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695150" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695151" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695152" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695153" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695154" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695155" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695156" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695157" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695158" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814033" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14033</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14033" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14033" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14033" ref_url="https://www.suse.com/security/cve/CVE-2018-14033" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-03"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14033/">CVE-2018-14033</cve>
	<bugzilla href="https://bugzilla.suse.com/1101471">SUSE bug 1101471</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684443" comment="hdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684444" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684445" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684446" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684447" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684448" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684449" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684450" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684451" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684452" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684453" comment="hdf5-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695078" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695079" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695080" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695081" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695082" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695083" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695084" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695085" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695086" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695087" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695088" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695089" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695090" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695091" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695092" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695093" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695094" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695095" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695096" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695097" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695098" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695099" comment="libhdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695100" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695101" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695102" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695103" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695104" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695105" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695106" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695107" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695108" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695109" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695110" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695111" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695112" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695113" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695114" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695115" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695116" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695117" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695118" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695119" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695120" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695121" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695122" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695123" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695124" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695125" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695126" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695127" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695128" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695129" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695130" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695131" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695132" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695133" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695134" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695135" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695136" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695137" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695138" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695139" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695140" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695141" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695142" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695143" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695144" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695145" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695146" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695147" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695148" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695149" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695150" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695151" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695152" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695153" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695154" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695155" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695156" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695157" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695158" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814036" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14036</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14036" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14036" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14036" ref_url="https://www.suse.com/security/cve/CVE-2018-14036" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2778-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192778-1.html" source="SUSE-SU"/>
    <description>
    Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-14036/">CVE-2018-14036</cve>
	<bugzilla href="https://bugzilla.suse.com/1099699">SUSE bug 1099699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101332">SUSE bug 1101332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112694">SUSE bug 1112694</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487192" comment="accountsservice-0.6.55-3.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151723" comment="accountsservice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487194" comment="accountsservice-lang-0.6.55-3.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151724" comment="accountsservice-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487195" comment="libaccountsservice0-0.6.55-3.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151725" comment="libaccountsservice0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487196" comment="typelib-1_0-AccountsService-1_0-0.6.55-3.14 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151726" comment="typelib-1_0-AccountsService-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14345</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14345" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14345" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14345" ref_url="https://www.suse.com/security/cve/CVE-2018-14345" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00047.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in SDDM through 0.17.0. If configured with ReuseSession=true, the password is not checked for users with an already existing session. Any user with access to the system D-Bus can therefore unlock any graphical session. This is related to daemon/Display.cpp and helper/backend/PamBackend.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-14345/">CVE-2018-14345</cve>
	<bugzilla href="https://bugzilla.suse.com/1177201">SUSE bug 1177201</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694917" comment="sddm-0.18.0-lp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152215" comment="sddm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694918" comment="sddm-branding-openSUSE-0.18.0-lp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152216" comment="sddm-branding-openSUSE is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814394" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14394</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14394" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14394" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14394" ref_url="https://www.suse.com/security/cve/CVE-2018-14394" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1299-2" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20191299-2.html" source="SUSE-SU"/>
    <description>
    libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted Waveform audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14394/">CVE-2018-14394</cve>
	<bugzilla href="https://bugzilla.suse.com/1101888">SUSE bug 1101888</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14395</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14395" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14395" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14395" ref_url="https://www.suse.com/security/cve/CVE-2018-14395" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1299-2" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20191299-2.html" source="SUSE-SU"/>
    <description>
    libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted audio file when converting to the MOV audio format.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14395/">CVE-2018-14395</cve>
	<bugzilla href="https://bugzilla.suse.com/1101889">SUSE bug 1101889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814404" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14404</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14404" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14404" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14404" ref_url="https://www.suse.com/security/cve/CVE-2018-14404" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13985-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005217.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3110-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00026.html" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14404/">CVE-2018-14404</cve>
	<bugzilla href="https://bugzilla.suse.com/1102046">SUSE bug 1102046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148896">SUSE bug 1148896</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14423</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14423" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14423" ref_url="https://www.suse.com/security/cve/CVE-2018-14423" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010666.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010791.html" source="SUSE-SU"/>
    <description>
    Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14423/">CVE-2018-14423</cve>
	<bugzilla href="https://bugzilla.suse.com/1102016">SUSE bug 1102016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140130">SUSE bug 1140130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677917" comment="libopenjp2-7-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678643" comment="libopenjp2-7-32bit-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679714" comment="libopenjpeg1-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679751" comment="libopenjpeg1-32bit-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153809" comment="libopenjpeg1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679752" comment="openjpeg-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153810" comment="openjpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679715" comment="openjpeg-devel-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153811" comment="openjpeg-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679753" comment="openjpeg-devel-32bit-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153812" comment="openjpeg-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677918" comment="openjpeg2-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677919" comment="openjpeg2-devel-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14424</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14424" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14424" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14424" ref_url="https://www.suse.com/security/cve/CVE-2018-14424" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004570.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2818-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00066.html" source="SUSE-SU"/>
    <description>
    The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14424/">CVE-2018-14424</cve>
	<bugzilla href="https://bugzilla.suse.com/1103737">SUSE bug 1103737</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694740" comment="gdm-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151581" comment="gdm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694741" comment="gdm-lang-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151582" comment="gdm-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694742" comment="gdmflexiserver-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151583" comment="gdmflexiserver is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694743" comment="libgdm1-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151584" comment="libgdm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694744" comment="typelib-1_0-Gdm-1_0-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151585" comment="typelib-1_0-Gdm-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14434</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14434" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14434" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14434" ref_url="https://www.suse.com/security/cve/CVE-2018-14434" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004574.html" source="SUSE-SU"/>
		<reference ref_id="TID000019384" ref_url="https://www.suse.com/support/kb/doc/?id=000019384" source="SUSE-SU"/>
		<reference ref_id="TID7023657" ref_url="https://www.suse.com/support/kb/doc/?id=7023657" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00062.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14434/">CVE-2018-14434</cve>
	<bugzilla href="https://bugzilla.suse.com/1102003">SUSE bug 1102003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14435</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14435" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14435" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14435" ref_url="https://www.suse.com/security/cve/CVE-2018-14435" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2390-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004574.html" source="SUSE-SU"/>
		<reference ref_id="TID000019384" ref_url="https://www.suse.com/support/kb/doc/?id=000019384" source="SUSE-SU"/>
		<reference ref_id="TID7023657" ref_url="https://www.suse.com/support/kb/doc/?id=7023657" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2439-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00062.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14435/">CVE-2018-14435</cve>
	<bugzilla href="https://bugzilla.suse.com/1102007">SUSE bug 1102007</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14436</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14436" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14436" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14436" ref_url="https://www.suse.com/security/cve/CVE-2018-14436" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004574.html" source="SUSE-SU"/>
		<reference ref_id="TID000019384" ref_url="https://www.suse.com/support/kb/doc/?id=000019384" source="SUSE-SU"/>
		<reference ref_id="TID7023657" ref_url="https://www.suse.com/support/kb/doc/?id=7023657" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00062.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14436/">CVE-2018-14436</cve>
	<bugzilla href="https://bugzilla.suse.com/1102005">SUSE bug 1102005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14437</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14437" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14437" ref_url="https://www.suse.com/security/cve/CVE-2018-14437" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004574.html" source="SUSE-SU"/>
		<reference ref_id="TID000019384" ref_url="https://www.suse.com/support/kb/doc/?id=000019384" source="SUSE-SU"/>
		<reference ref_id="TID7023657" ref_url="https://www.suse.com/support/kb/doc/?id=7023657" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00062.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14437/">CVE-2018-14437</cve>
	<bugzilla href="https://bugzilla.suse.com/1102004">SUSE bug 1102004</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14460</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14460" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14460" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14460" ref_url="https://www.suse.com/security/cve/CVE-2018-14460" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-03"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14460/">CVE-2018-14460</cve>
	<bugzilla href="https://bugzilla.suse.com/1102175">SUSE bug 1102175</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684443" comment="hdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684444" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684445" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684446" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684447" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684448" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684449" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684450" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684451" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684452" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684453" comment="hdf5-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695078" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695079" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695080" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695081" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695082" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695083" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695084" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695085" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695086" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695087" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695088" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695089" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695090" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695091" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695092" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695093" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695094" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695095" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695096" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695097" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695098" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695099" comment="libhdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695100" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695101" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695102" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695103" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695104" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695105" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695106" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695107" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695108" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695109" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695110" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695111" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695112" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695113" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695114" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695115" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695116" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695117" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695118" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695119" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695120" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695121" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695122" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695123" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695124" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695125" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695126" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695127" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695128" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695129" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695130" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695131" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695132" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695133" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695134" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695135" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695136" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695137" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695138" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695139" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695140" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695141" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695142" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695143" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695144" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695145" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695146" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695147" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695148" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695149" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695150" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695151" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695152" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695153" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695154" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695155" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695156" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695157" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695158" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14498</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14498" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14498" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14498" ref_url="https://www.suse.com/security/cve/CVE-2018-14498" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0711-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005415.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005518.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1118-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00015.html" source="SUSE-SU"/>
    <description>
    get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14498/">CVE-2018-14498</cve>
	<bugzilla href="https://bugzilla.suse.com/1128712">SUSE bug 1128712</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628779" comment="libjpeg8-8.1.2-5.15.7 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152543" comment="libjpeg8 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14526</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14526" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14526" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14526" ref_url="https://www.suse.com/security/cve/CVE-2018-14526" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004798.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005409.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3527-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3539-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-14526/">CVE-2018-14526</cve>
	<bugzilla href="https://bugzilla.suse.com/1104205">SUSE bug 1104205</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14553</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14553" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14553" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14553" ref_url="https://www.suse.com/security/cve/CVE-2018-14553" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006579.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0594-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006588.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.html" source="SUSE-SU"/>
    <description>
    gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14553/">CVE-2018-14553</cve>
	<bugzilla href="https://bugzilla.suse.com/1165471">SUSE bug 1165471</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14567</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14567" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14567" ref_url="https://www.suse.com/security/cve/CVE-2018-14567" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004657.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3110-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00029.html" source="SUSE-SU"/>
    <description>
    libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035 and CVE-2018-9251.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14567/">CVE-2018-14567</cve>
	<bugzilla href="https://bugzilla.suse.com/1088279">SUSE bug 1088279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088601">SUSE bug 1088601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105166">SUSE bug 1105166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14598</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14598" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14598" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14598" ref_url="https://www.suse.com/security/cve/CVE-2018-14598" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2955-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004665.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00006.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14598/">CVE-2018-14598</cve>
	<bugzilla href="https://bugzilla.suse.com/1102073">SUSE bug 1102073</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628593" comment="libX11-6-1.6.5-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151817" comment="libX11-6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628595" comment="libX11-data-1.6.5-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151819" comment="libX11-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628597" comment="libX11-xcb1-1.6.5-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151821" comment="libX11-xcb1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14599</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14599" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14599" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14599" ref_url="https://www.suse.com/security/cve/CVE-2018-14599" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2955-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004665.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00006.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14599/">CVE-2018-14599</cve>
	<bugzilla href="https://bugzilla.suse.com/1102062">SUSE bug 1102062</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628593" comment="libX11-6-1.6.5-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151817" comment="libX11-6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628595" comment="libX11-data-1.6.5-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151819" comment="libX11-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628597" comment="libX11-xcb1-1.6.5-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151821" comment="libX11-xcb1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14600</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14600" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14600" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14600" ref_url="https://www.suse.com/security/cve/CVE-2018-14600" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2955-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004665.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00006.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14600/">CVE-2018-14600</cve>
	<bugzilla href="https://bugzilla.suse.com/1102068">SUSE bug 1102068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178417">SUSE bug 1178417</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628593" comment="libX11-6-1.6.5-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151817" comment="libX11-6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628595" comment="libX11-data-1.6.5-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151819" comment="libX11-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628597" comment="libX11-xcb1-1.6.5-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151821" comment="libX11-xcb1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14618</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14618" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14618" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14618" ref_url="https://www.suse.com/security/cve/CVE-2018-14618" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004560.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004561.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004563.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00033.html" source="SUSE-SU"/>
    <description>
    curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31 bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is almost identical to CVE-2017-8816.)
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-14618/">CVE-2018-14618</cve>
	<bugzilla href="https://bugzilla.suse.com/1106019">SUSE bug 1106019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112758">SUSE bug 1112758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122464">SUSE bug 1122464</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14629</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14629" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14629" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14629" ref_url="https://www.suse.com/security/cve/CVE-2018-14629" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004948.html" source="SUSE-SU"/>
    <description>
    A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14629/">CVE-2018-14629</cve>
	<bugzilla href="https://bugzilla.suse.com/1116319">SUSE bug 1116319</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814647" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14647</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14647" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14647" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14647" ref_url="https://www.suse.com/security/cve/CVE-2018-14647" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:732-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006377.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004672.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0482-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005374.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2053-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007449.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming large amounts CPU and RAM. The vulnerability exists in Python versions 3.7.0, 3.6.0 through 3.6.6, 3.5.0 through 3.5.6, 3.4.0 through 3.4.9, 2.7.0 through 2.7.15.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14647/">CVE-2018-14647</cve>
	<bugzilla href="https://bugzilla.suse.com/1109847">SUSE bug 1109847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14665</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14665" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14665" ref_url="https://www.suse.com/security/cve/CVE-2018-14665" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3680-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00022.html" source="SUSE-SU"/>
    <description>
    A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14665/">CVE-2018-14665</cve>
	<bugzilla href="https://bugzilla.suse.com/1111697">SUSE bug 1111697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112020">SUSE bug 1112020</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629053" comment="xorg-x11-server-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629054" comment="xorg-x11-server-extra-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684245" comment="xorg-x11-server-wayland-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177168" comment="xorg-x11-server-wayland is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814679" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14679</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14679" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14679" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14679" ref_url="https://www.suse.com/security/cve/CVE-2018-14679" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2323-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004412.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2323-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009322.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009804.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1200-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB3MRNYWFKRQUSWOFW43J2YAPXGFTDWP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2802-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2ZGPJK567IBN35AOF3QFMOJCRA2NANSF/" source="SUSE-SU"/>
    <description>
    An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14679/">CVE-2018-14679</cve>
	<bugzilla href="https://bugzilla.suse.com/1102922">SUSE bug 1102922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103032">SUSE bug 1103032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103040">SUSE bug 1103040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625976" comment="libmspack-devel-0.6-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238457" comment="libmspack-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625977" comment="libmspack0-0.6-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151459" comment="libmspack0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626204" comment="libmspack0-32bit-0.6-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238458" comment="libmspack0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626205" comment="mspack-tools-0.6-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247101" comment="mspack-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814681" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14681</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14681" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14681" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14681" ref_url="https://www.suse.com/security/cve/CVE-2018-14681" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3250-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3436-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004789.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3436-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009302.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009322.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3315-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1200-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB3MRNYWFKRQUSWOFW43J2YAPXGFTDWP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2802-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2ZGPJK567IBN35AOF3QFMOJCRA2NANSF/" source="SUSE-SU"/>
    <description>
    An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-14681/">CVE-2018-14681</cve>
	<bugzilla href="https://bugzilla.suse.com/1102922">SUSE bug 1102922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103032">SUSE bug 1103032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103040">SUSE bug 1103040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625976" comment="libmspack-devel-0.6-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238457" comment="libmspack-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625977" comment="libmspack0-0.6-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151459" comment="libmspack0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626204" comment="libmspack0-32bit-0.6-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238458" comment="libmspack0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626205" comment="mspack-tools-0.6-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247101" comment="mspack-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814682" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14682</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14682" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14682" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14682" ref_url="https://www.suse.com/security/cve/CVE-2018-14682" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3250-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3436-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004789.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3436-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009302.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009322.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3315-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1200-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB3MRNYWFKRQUSWOFW43J2YAPXGFTDWP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2802-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2ZGPJK567IBN35AOF3QFMOJCRA2NANSF/" source="SUSE-SU"/>
    <description>
    An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14682/">CVE-2018-14682</cve>
	<bugzilla href="https://bugzilla.suse.com/1102922">SUSE bug 1102922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103032">SUSE bug 1103032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103040">SUSE bug 1103040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625976" comment="libmspack-devel-0.6-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238457" comment="libmspack-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625977" comment="libmspack0-0.6-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151459" comment="libmspack0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626204" comment="libmspack0-32bit-0.6-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238458" comment="libmspack0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626205" comment="mspack-tools-0.6-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247101" comment="mspack-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14722</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14722" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14722" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14722" ref_url="https://www.suse.com/security/cve/CVE-2018-14722" source="SUSE CVE"/>
    <description>
    An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14722/">CVE-2018-14722</cve>
	<bugzilla href="https://bugzilla.suse.com/1102721">SUSE bug 1102721</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481038" comment="btrfsmaintenance-0.4.2-1.11 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695654" comment="btrfsmaintenance is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201814851" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-14851</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-14851" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14851" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-14851" ref_url="https://www.suse.com/security/cve/CVE-2018-14851" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004421.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2681-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004547.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00022.html" source="SUSE-SU"/>
    <description>
    exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14851/">CVE-2018-14851</cve>
	<bugzilla href="https://bugzilla.suse.com/1103659">SUSE bug 1103659</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15120</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15120" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15120" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15120" ref_url="https://www.suse.com/security/cve/CVE-2018-15120" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2763-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004568.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2790-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00043.html" source="SUSE-SU"/>
    <description>
    libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted text with invalid Unicode sequences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15120/">CVE-2018-15120</cve>
	<bugzilla href="https://bugzilla.suse.com/1103877">SUSE bug 1103877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482345" comment="libpango-1_0-0-1.44.7+11-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151548" comment="libpango-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482347" comment="typelib-1_0-Pango-1_0-1.44.7+11-1.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151553" comment="typelib-1_0-Pango-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15126" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15126" ref_url="https://www.suse.com/security/cve/CVE-2018-15126" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0060-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00021.html" source="SUSE-SU"/>
    <description>
    LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file transfer extension that can result remote code execution
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15126/">CVE-2018-15126</cve>
	<bugzilla href="https://bugzilla.suse.com/1120114">SUSE bug 1120114</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15127</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15127" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15127" ref_url="https://www.suse.com/security/cve/CVE-2018-15127" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0060-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00021.html" source="SUSE-SU"/>
    <description>
    LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code execution
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15127/">CVE-2018-15127</cve>
	<bugzilla href="https://bugzilla.suse.com/1120117">SUSE bug 1120117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123828">SUSE bug 1123828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123832">SUSE bug 1123832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815468" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15468</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15468" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15468" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15468" ref_url="https://www.suse.com/security/cve/CVE-2018-15468" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00073.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.11.x. The DEBUGCTL MSR contains several debugging features, some of which virtualise cleanly, but some do not. In particular, Branch Trace Store is not virtualised by the processor, and software has to be careful to configure it suitably not to lock up the core. As a result, it must only be available to fully trusted guests. Unfortunately, in the case that vPMU is disabled, all value checking was skipped, allowing the guest to choose any MSR_DEBUGCTL setting it likes. A malicious or buggy guest administrator (on Intel x86 HVM or PVH) can lock up the entire host, causing a Denial of Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-15468/">CVE-2018-15468</cve>
	<bugzilla href="https://bugzilla.suse.com/1103276">SUSE bug 1103276</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15469</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15469" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15469" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15469" ref_url="https://www.suse.com/security/cve/CVE-2018-15469" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00073.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.11.x. ARM never properly implemented grant table v2, either in the hypervisor or in Linux. Unfortunately, an ARM guest can still request v2 grant tables; they will simply not be properly set up, resulting in subsequent grant-related hypercalls hitting BUG() checks. An unprivileged guest can cause a BUG() check in the hypervisor, resulting in a denial-of-service (crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-15469/">CVE-2018-15469</cve>
	<bugzilla href="https://bugzilla.suse.com/1103275">SUSE bug 1103275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15470</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15470" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15470" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15470" ref_url="https://www.suse.com/security/cve/CVE-2018-15470" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00073.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.11.x. The logic in oxenstored for handling writes depended on the order of evaluation of expressions making up a tuple. As indicated in section 7.7.3 "Operations on data structures" of the OCaml manual, the order of evaluation of subexpressions is not specified. In practice, different implementations behave differently. Thus, oxenstored may not enforce the configured quota-maxentity. This allows a malicious or buggy guest to write as many xenstore entries as it wishes, causing unbounded memory usage in oxenstored. This can lead to a system-wide DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-15470/">CVE-2018-15470</cve>
	<bugzilla href="https://bugzilla.suse.com/1103279">SUSE bug 1103279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15473</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15473" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15473" ref_url="https://www.suse.com/security/cve/CVE-2018-15473" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004804.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004842.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004850.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3776-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005403.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004888.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1383-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HMNIMCAHIBHI4ABCI2JE3E6E2SYDAP2T/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1390-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F33WEA5KQR7XFYMXJPGRCG4IZX75GFRO/" source="SUSE-SU"/>
    <description>
    OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-15473/">CVE-2018-15473</cve>
	<bugzilla href="https://bugzilla.suse.com/1105010">SUSE bug 1105010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106163">SUSE bug 1106163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123133">SUSE bug 1123133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138392">SUSE bug 1138392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205621">SUSE bug 1205621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652882" comment="ssh-audit-2.5.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009652725" comment="ssh-audit is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15587</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15587" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15587" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15587" ref_url="https://www.suse.com/security/cve/CVE-2018-15587" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1266-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005643.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1391-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1453-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00024.html" source="SUSE-SU"/>
    <description>
    GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-15587/">CVE-2018-15587</cve>
	<bugzilla href="https://bugzilla.suse.com/1125230">SUSE bug 1125230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489187" comment="evolution-3.34.4-1.49 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009254401" comment="evolution is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489189" comment="evolution-lang-3.34.4-1.49 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009254403" comment="evolution-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15686</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15686" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15686" ref_url="https://www.suse.com/security/cve/CVE-2018-15686" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3644-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3767-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004849.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3767-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0054-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0054-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005328.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3803-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00025.html" source="SUSE-SU"/>
    <description>
    A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-15686/">CVE-2018-15686</cve>
	<bugzilla href="https://bugzilla.suse.com/1113665">SUSE bug 1113665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120323">SUSE bug 1120323</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15687</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15687" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15687" ref_url="https://www.suse.com/security/cve/CVE-2018-15687" source="SUSE CVE"/>
    <description>
    A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files. Affected releases are systemd versions up to and including 239.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-15687/">CVE-2018-15687</cve>
	<bugzilla href="https://bugzilla.suse.com/1113666">SUSE bug 1113666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15688</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15688" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15688" ref_url="https://www.suse.com/security/cve/CVE-2018-15688" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3644-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3767-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004849.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3767-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004941.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3803-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00025.html" source="SUSE-SU"/>
    <description>
    A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15688/">CVE-2018-15688</cve>
	<bugzilla href="https://bugzilla.suse.com/1113632">SUSE bug 1113632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113668">SUSE bug 1113668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113669">SUSE bug 1113669</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629088" comment="NetworkManager-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152685" comment="NetworkManager is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684219" comment="NetworkManager-lang-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152687" comment="NetworkManager-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628810" comment="libnm0-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152691" comment="libnm0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628811" comment="typelib-1_0-NM-1_0-1.22.10-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152692" comment="typelib-1_0-NM-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15746</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15746" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15746" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15746" ref_url="https://www.suse.com/security/cve/CVE-2018-15746" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004891.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3973-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183973-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3973-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005395.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3975-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183975-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3987-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4004-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00043.html" source="SUSE-SU"/>
    <description>
    qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp policy for threads other than the main thread.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-15746/">CVE-2018-15746</cve>
	<bugzilla href="https://bugzilla.suse.com/1106222">SUSE bug 1106222</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15750</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15750" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15750" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15750" ref_url="https://www.suse.com/security/cve/CVE-2018-15750" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004868.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3862-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14431-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008281.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4197-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0899-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6E3YAO2VV3WBUS7PMAT26ZYDS3AXW5VL/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2106-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MU6P3NIODW6ZMC4HZLBROO6ZEOD5KAUX/" source="SUSE-SU"/>
    <description>
    Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.7/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-15750/">CVE-2018-15750</cve>
	<bugzilla href="https://bugzilla.suse.com/1113698">SUSE bug 1113698</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498301" comment="python2-distro-1.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623274" comment="python2-distro is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494057" comment="python3-distro-1.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623275" comment="python3-distro is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15751</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15751" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15751" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15751" ref_url="https://www.suse.com/security/cve/CVE-2018-15751" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004868.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3862-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14431-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008281.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4197-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0899-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6E3YAO2VV3WBUS7PMAT26ZYDS3AXW5VL/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2106-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MU6P3NIODW6ZMC4HZLBROO6ZEOD5KAUX/" source="SUSE-SU"/>
    <description>
    SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15751/">CVE-2018-15751</cve>
	<bugzilla href="https://bugzilla.suse.com/1113698">SUSE bug 1113698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113699">SUSE bug 1113699</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498301" comment="python2-distro-1.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623274" comment="python2-distro is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494057" comment="python3-distro-1.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623275" comment="python3-distro is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15822</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15822" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15822" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15822" ref_url="https://www.suse.com/security/cve/CVE-2018-15822" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004825.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2723-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2723-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2734-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1066-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00039.html" source="SUSE-SU"/>
    <description>
    The flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an empty audio packet, leading to an assertion failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-15822/">CVE-2018-15822</cve>
	<bugzilla href="https://bugzilla.suse.com/1105869">SUSE bug 1105869</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815853" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15853</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15853" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15853" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15853" ref_url="https://www.suse.com/security/cve/CVE-2018-15853" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15853/">CVE-2018-15853</cve>
	<bugzilla href="https://bugzilla.suse.com/1105832">SUSE bug 1105832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481578" comment="libxkbcommon-x11-0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239781" comment="libxkbcommon-x11-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481580" comment="libxkbcommon0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239785" comment="libxkbcommon0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815854" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15854</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15854" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15854" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15854" ref_url="https://www.suse.com/security/cve/CVE-2018-15854" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15854/">CVE-2018-15854</cve>
	<bugzilla href="https://bugzilla.suse.com/1105832">SUSE bug 1105832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481578" comment="libxkbcommon-x11-0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239781" comment="libxkbcommon-x11-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481580" comment="libxkbcommon0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239785" comment="libxkbcommon0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15855</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15855" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15855" ref_url="https://www.suse.com/security/cve/CVE-2018-15855" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because the XkbFile for an xkb_geometry section was mishandled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15855/">CVE-2018-15855</cve>
	<bugzilla href="https://bugzilla.suse.com/1105832">SUSE bug 1105832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481578" comment="libxkbcommon-x11-0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239781" comment="libxkbcommon-x11-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481580" comment="libxkbcommon0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239785" comment="libxkbcommon0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815856" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15856</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15856" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15856" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15856" ref_url="https://www.suse.com/security/cve/CVE-2018-15856" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00024.html" source="SUSE-SU"/>
    <description>
    An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15856/">CVE-2018-15856</cve>
	<bugzilla href="https://bugzilla.suse.com/1105832">SUSE bug 1105832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481578" comment="libxkbcommon-x11-0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239781" comment="libxkbcommon-x11-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481580" comment="libxkbcommon0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239785" comment="libxkbcommon0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815857" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15857</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15857" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15857" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15857" ref_url="https://www.suse.com/security/cve/CVE-2018-15857" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00024.html" source="SUSE-SU"/>
    <description>
    An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local attackers to crash xkbcommon keymap parsers or possibly have unspecified other impact by supplying a crafted keymap file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15857/">CVE-2018-15857</cve>
	<bugzilla href="https://bugzilla.suse.com/1105832">SUSE bug 1105832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481578" comment="libxkbcommon-x11-0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239781" comment="libxkbcommon-x11-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481580" comment="libxkbcommon0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239785" comment="libxkbcommon0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15858</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15858" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15858" ref_url="https://www.suse.com/security/cve/CVE-2018-15858" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15858/">CVE-2018-15858</cve>
	<bugzilla href="https://bugzilla.suse.com/1105832">SUSE bug 1105832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481578" comment="libxkbcommon-x11-0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239781" comment="libxkbcommon-x11-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481580" comment="libxkbcommon0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239785" comment="libxkbcommon0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815859" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15859</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15859" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15859" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15859" ref_url="https://www.suse.com/security/cve/CVE-2018-15859" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15859/">CVE-2018-15859</cve>
	<bugzilla href="https://bugzilla.suse.com/1105832">SUSE bug 1105832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481578" comment="libxkbcommon-x11-0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239781" comment="libxkbcommon-x11-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481580" comment="libxkbcommon0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239785" comment="libxkbcommon0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815861" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15861</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15861" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15861" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15861" ref_url="https://www.suse.com/security/cve/CVE-2018-15861" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that triggers an xkb_intern_atom failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15861/">CVE-2018-15861</cve>
	<bugzilla href="https://bugzilla.suse.com/1105832">SUSE bug 1105832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481578" comment="libxkbcommon-x11-0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239781" comment="libxkbcommon-x11-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481580" comment="libxkbcommon0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239785" comment="libxkbcommon0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15862</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15862" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15862" ref_url="https://www.suse.com/security/cve/CVE-2018-15862" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with invalid virtual modifiers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15862/">CVE-2018-15862</cve>
	<bugzilla href="https://bugzilla.suse.com/1105832">SUSE bug 1105832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481578" comment="libxkbcommon-x11-0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239781" comment="libxkbcommon-x11-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481580" comment="libxkbcommon0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239785" comment="libxkbcommon0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15863</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15863" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15863" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15863" ref_url="https://www.suse.com/security/cve/CVE-2018-15863" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15863/">CVE-2018-15863</cve>
	<bugzilla href="https://bugzilla.suse.com/1105832">SUSE bug 1105832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481578" comment="libxkbcommon-x11-0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239781" comment="libxkbcommon-x11-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481580" comment="libxkbcommon0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239785" comment="libxkbcommon0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15864</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15864" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15864" ref_url="https://www.suse.com/security/cve/CVE-2018-15864" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because a map access attempt can occur for a map that was never created.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15864/">CVE-2018-15864</cve>
	<bugzilla href="https://bugzilla.suse.com/1105832">SUSE bug 1105832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481578" comment="libxkbcommon-x11-0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239781" comment="libxkbcommon-x11-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481580" comment="libxkbcommon0-0.8.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239785" comment="libxkbcommon0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15908</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15908" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15908" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15908" ref_url="https://www.suse.com/security/cve/CVE-2018-15908" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004633.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00012.html" source="SUSE-SU"/>
    <description>
    In Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript files to bypass .tempfile restrictions and write files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-15908/">CVE-2018-15908</cve>
	<bugzilla href="https://bugzilla.suse.com/1105464">SUSE bug 1105464</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106171">SUSE bug 1106171</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815909" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15909</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15909" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15909" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15909" ref_url="https://www.suse.com/security/cve/CVE-2018-15909" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004633.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00012.html" source="SUSE-SU"/>
    <description>
    In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-15909/">CVE-2018-15909</cve>
	<bugzilla href="https://bugzilla.suse.com/1105464">SUSE bug 1105464</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106172">SUSE bug 1106172</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815910" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15910</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15910" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15910" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15910" ref_url="https://www.suse.com/security/cve/CVE-2018-15910" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3330-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004767.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00012.html" source="SUSE-SU"/>
    <description>
    In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the LockDistillerParams parameter to crash the interpreter or execute code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-15910/">CVE-2018-15910</cve>
	<bugzilla href="https://bugzilla.suse.com/1105464">SUSE bug 1105464</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106173">SUSE bug 1106173</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201815911" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-15911</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-15911" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15911" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-15911" ref_url="https://www.suse.com/security/cve/CVE-2018-15911" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004633.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00012.html" source="SUSE-SU"/>
    <description>
    In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter or potentially execute code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-15911/">CVE-2018-15911</cve>
	<bugzilla href="https://bugzilla.suse.com/1105464">SUSE bug 1105464</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106195">SUSE bug 1106195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108027">SUSE bug 1108027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109105">SUSE bug 1109105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111479">SUSE bug 1111479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111480">SUSE bug 1111480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112229">SUSE bug 1112229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117022">SUSE bug 1117022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118455">SUSE bug 1118455</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16062</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16062" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16062" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16062" ref_url="https://www.suse.com/security/cve/CVE-2018-16062" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html" source="SUSE-SU"/>
    <description>
    dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16062/">CVE-2018-16062</cve>
	<bugzilla href="https://bugzilla.suse.com/1106390">SUSE bug 1106390</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490191" comment="elfutils-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490192" comment="elfutils-lang-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490194" comment="libasm1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490196" comment="libdw1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490197" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490199" comment="libebl-plugins-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490200" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490202" comment="libelf1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490203" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16065</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16065" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16065" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16065" ref_url="https://www.suse.com/security/cve/CVE-2018-16065" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    A Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16065/">CVE-2018-16065</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16066</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16066" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16066" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16066" ref_url="https://www.suse.com/security/cve/CVE-2018-16066" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    A use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16066/">CVE-2018-16066</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16067</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16067" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16067" ref_url="https://www.suse.com/security/cve/CVE-2018-16067" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16067/">CVE-2018-16067</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16068</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16068" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16068" ref_url="https://www.suse.com/security/cve/CVE-2018-16068" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    Missing validation in Mojo in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16068/">CVE-2018-16068</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16069</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16069" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16069" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16069" ref_url="https://www.suse.com/security/cve/CVE-2018-16069" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    Unintended floating-point error accumulation in SwiftShader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16069/">CVE-2018-16069</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16070</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16070" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16070" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16070" ref_url="https://www.suse.com/security/cve/CVE-2018-16070" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    Integer overflows in Skia in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16070/">CVE-2018-16070</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16071</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16071" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16071" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16071" ref_url="https://www.suse.com/security/cve/CVE-2018-16071" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16071/">CVE-2018-16071</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16073</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16073" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16073" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16073" ref_url="https://www.suse.com/security/cve/CVE-2018-16073" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16073/">CVE-2018-16073</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16074</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16074" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16074" ref_url="https://www.suse.com/security/cve/CVE-2018-16074" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16074/">CVE-2018-16074</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16075</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16075" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16075" ref_url="https://www.suse.com/security/cve/CVE-2018-16075" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    Insufficient file type enforcement in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain local file data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16075/">CVE-2018-16075</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16076</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16076" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16076" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16076" ref_url="https://www.suse.com/security/cve/CVE-2018-16076" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    Missing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16076/">CVE-2018-16076</cve>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110628">SUSE bug 1110628</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16077</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16077" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16077" ref_url="https://www.suse.com/security/cve/CVE-2018-16077" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    Object lifecycle issue in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-16077/">CVE-2018-16077</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16078</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16078" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16078" ref_url="https://www.suse.com/security/cve/CVE-2018-16078" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    Unsafe handling of credit card details in Autofill in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16078/">CVE-2018-16078</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16079</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16079" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16079" ref_url="https://www.suse.com/security/cve/CVE-2018-16079" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    A race condition between permission prompts and navigations in Prompts in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-16079/">CVE-2018-16079</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16080</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16080" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16080" ref_url="https://www.suse.com/security/cve/CVE-2018-16080" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    A missing check for popup window handling in Fullscreen in Google Chrome on macOS prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-16080/">CVE-2018-16080</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16081</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16081" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16081" ref_url="https://www.suse.com/security/cve/CVE-2018-16081" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system without file access permission via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16081/">CVE-2018-16081</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816082" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16082</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16082" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16082" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16082" ref_url="https://www.suse.com/security/cve/CVE-2018-16082" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    An out of bounds read in Swiftshader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16082/">CVE-2018-16082</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16083</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16083" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16083" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16083" ref_url="https://www.suse.com/security/cve/CVE-2018-16083" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16083/">CVE-2018-16083</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816084" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16084</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16084" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16084" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16084" ref_url="https://www.suse.com/security/cve/CVE-2018-16084" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    The default selected dialog button in CustomHandlers in Google Chrome prior to 69.0.3497.81 allowed a remote attacker who convinced the user to perform certain operations to open external programs via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16084/">CVE-2018-16084</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816085" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16085</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16085" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16085" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16085" ref_url="https://www.suse.com/security/cve/CVE-2018-16085" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    A use after free in ResourceCoordinator in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16085/">CVE-2018-16085</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816086" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16086</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16086" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16086" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16086" ref_url="https://www.suse.com/security/cve/CVE-2018-16086" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16086/">CVE-2018-16086</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16087</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16087" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16087" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16087" ref_url="https://www.suse.com/security/cve/CVE-2018-16087" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16087/">CVE-2018-16087</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16088</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16088" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16088" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16088" ref_url="https://www.suse.com/security/cve/CVE-2018-16088" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2659-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2664-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00056.html" source="SUSE-SU"/>
    <description>
    A missing check for JS-simulated input events in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to download arbitrary files with no user input via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16088/">CVE-2018-16088</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16301</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16301" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16301" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16301" ref_url="https://www.suse.com/security/cve/CVE-2018-16301" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:357-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-March/022067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:358-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-March/022068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3360-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010269.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010403.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010249.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2344-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0774-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7F42RBJPTM53DGGULUXWD56J42LIIEII/" source="SUSE-SU"/>
    <description>
    The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16301/">CVE-2018-16301</cve>
	<bugzilla href="https://bugzilla.suse.com/1153098">SUSE bug 1153098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153332">SUSE bug 1153332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195825">SUSE bug 1195825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628825" comment="libpcap1-1.9.1-1.33 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667949" comment="tcpdump-4.9.2-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816323" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16323</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16323" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16323" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16323" ref_url="https://www.suse.com/security/cve/CVE-2018-16323" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004773.html" source="SUSE-SU"/>
		<reference ref_id="TID000019384" ref_url="https://www.suse.com/support/kb/doc/?id=000019384" source="SUSE-SU"/>
		<reference ref_id="TID7023657" ref_url="https://www.suse.com/support/kb/doc/?id=7023657" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00008.html" source="SUSE-SU"/>
    <description>
    ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affected code is used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the image data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16323/">CVE-2018-16323</cve>
	<bugzilla href="https://bugzilla.suse.com/1106855">SUSE bug 1106855</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816328" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16328</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16328" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16328" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16328" ref_url="https://www.suse.com/security/cve/CVE-2018-16328" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004634.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00008.html" source="SUSE-SU"/>
    <description>
    In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the CheckEventLogging function in MagickCore/log.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16328/">CVE-2018-16328</cve>
	<bugzilla href="https://bugzilla.suse.com/1106857">SUSE bug 1106857</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816329" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16329</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16329" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16329" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16329" ref_url="https://www.suse.com/security/cve/CVE-2018-16329" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004634.html" source="SUSE-SU"/>
		<reference ref_id="TID000019384" ref_url="https://www.suse.com/support/kb/doc/?id=000019384" source="SUSE-SU"/>
		<reference ref_id="TID7023657" ref_url="https://www.suse.com/support/kb/doc/?id=7023657" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00008.html" source="SUSE-SU"/>
    <description>
    In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the GetMagickProperty function in MagickCore/property.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16329/">CVE-2018-16329</cve>
	<bugzilla href="https://bugzilla.suse.com/1106858">SUSE bug 1106858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816335" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16335</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16335" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16335" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16335" ref_url="https://www.suse.com/security/cve/CVE-2018-16335" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004759.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004765.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004784.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3371-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00056.html" source="SUSE-SU"/>
    <description>
    newoffsets handling in ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file, as demonstrated by tiff2pdf. This is a different vulnerability than CVE-2018-15209.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16335/">CVE-2018-16335</cve>
	<bugzilla href="https://bugzilla.suse.com/1106853">SUSE bug 1106853</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16375</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16375" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16375" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16375" ref_url="https://www.suse.com/security/cve/CVE-2018-16375" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010666.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010745.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenJPEG 2.3.0. Missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c can lead to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16375/">CVE-2018-16375</cve>
	<bugzilla href="https://bugzilla.suse.com/1106882">SUSE bug 1106882</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677917" comment="libopenjp2-7-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678643" comment="libopenjp2-7-32bit-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677918" comment="openjpeg2-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677919" comment="openjpeg2-devel-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16376</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16376" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16376" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16376" ref_url="https://www.suse.com/security/cve/CVE-2018-16376" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010666.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010791.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/openmj2/t2.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16376/">CVE-2018-16376</cve>
	<bugzilla href="https://bugzilla.suse.com/1106881">SUSE bug 1106881</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677917" comment="libopenjp2-7-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678643" comment="libopenjp2-7-32bit-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679714" comment="libopenjpeg1-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679751" comment="libopenjpeg1-32bit-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153809" comment="libopenjpeg1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679752" comment="openjpeg-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153810" comment="openjpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679715" comment="openjpeg-devel-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153811" comment="openjpeg-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679753" comment="openjpeg-devel-32bit-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153812" comment="openjpeg-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677918" comment="openjpeg2-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677919" comment="openjpeg2-devel-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16395</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16395" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16395" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16395" ref_url="https://www.suse.com/security/cve/CVE-2018-16395" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:15034-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012115.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-16395/">CVE-2018-16395</cve>
	<bugzilla href="https://bugzilla.suse.com/1112530">SUSE bug 1112530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136906">SUSE bug 1136906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16396</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16396" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16396" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16396" ref_url="https://www.suse.com/security/cve/CVE-2018-16396" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16396/">CVE-2018-16396</cve>
	<bugzilla href="https://bugzilla.suse.com/1112532">SUSE bug 1112532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136906">SUSE bug 1136906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16402</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16402" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16402" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16402" ref_url="https://www.suse.com/security/cve/CVE-2018-16402" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html" source="SUSE-SU"/>
    <description>
    libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it tries to decompress twice.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16402/">CVE-2018-16402</cve>
	<bugzilla href="https://bugzilla.suse.com/1107066">SUSE bug 1107066</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490191" comment="elfutils-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490192" comment="elfutils-lang-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490194" comment="libasm1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490196" comment="libdw1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490197" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490199" comment="libebl-plugins-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490200" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490202" comment="libelf1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490203" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816403" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16403</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16403" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16403" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16403" ref_url="https://www.suse.com/security/cve/CVE-2018-16403" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html" source="SUSE-SU"/>
    <description>
    libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and dwarf_hasattr in dwarf_hasattr.c, leading to a heap-based buffer over-read and an application crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16403/">CVE-2018-16403</cve>
	<bugzilla href="https://bugzilla.suse.com/1107067">SUSE bug 1107067</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490191" comment="elfutils-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490192" comment="elfutils-lang-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490194" comment="libasm1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490196" comment="libdw1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490197" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490199" comment="libebl-plugins-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490200" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490202" comment="libelf1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490203" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16412</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16412" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16412" ref_url="https://www.suse.com/security/cve/CVE-2018-16412" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0739-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13993-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005256.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c ParseImageResourceBlocks function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16412/">CVE-2018-16412</cve>
	<bugzilla href="https://bugzilla.suse.com/1106989">SUSE bug 1106989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106996">SUSE bug 1106996</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816413" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16413</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16413" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16413" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16413" ref_url="https://www.suse.com/security/cve/CVE-2018-16413" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004662.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004773.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13993-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005256.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h PushShortPixel function when called from the coders/psd.c ParseImageResourceBlocks function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16413/">CVE-2018-16413</cve>
	<bugzilla href="https://bugzilla.suse.com/1106989">SUSE bug 1106989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106996">SUSE bug 1106996</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816428" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16428</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16428" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16428" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16428" ref_url="https://www.suse.com/security/cve/CVE-2018-16428" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004892.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005644.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00005.html" source="SUSE-SU"/>
    <description>
    In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-30"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16428/">CVE-2018-16428</cve>
	<bugzilla href="https://bugzilla.suse.com/1107121">SUSE bug 1107121</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628466" comment="glib2-lang-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151143" comment="glib2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628467" comment="glib2-tools-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151144" comment="glib2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628468" comment="libgio-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151145" comment="libgio-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628469" comment="libgio-2_0-0-32bit-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151146" comment="libgio-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628470" comment="libglib-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151147" comment="libglib-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628471" comment="libglib-2_0-0-32bit-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151148" comment="libglib-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628472" comment="libgmodule-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151149" comment="libgmodule-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628473" comment="libgmodule-2_0-0-32bit-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151150" comment="libgmodule-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628474" comment="libgobject-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151151" comment="libgobject-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628475" comment="libgobject-2_0-0-32bit-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151152" comment="libgobject-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628476" comment="libgthread-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151153" comment="libgthread-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16429</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16429" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16429" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16429" ref_url="https://www.suse.com/security/cve/CVE-2018-16429" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004892.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3966-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183966-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005644.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00005.html" source="SUSE-SU"/>
    <description>
    GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-17"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16429/">CVE-2018-16429</cve>
	<bugzilla href="https://bugzilla.suse.com/1107116">SUSE bug 1107116</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628466" comment="glib2-lang-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151143" comment="glib2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628467" comment="glib2-tools-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151144" comment="glib2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628468" comment="libgio-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151145" comment="libgio-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628469" comment="libgio-2_0-0-32bit-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151146" comment="libgio-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628470" comment="libglib-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151147" comment="libglib-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628471" comment="libglib-2_0-0-32bit-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151148" comment="libglib-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628472" comment="libgmodule-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151149" comment="libgmodule-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628473" comment="libgmodule-2_0-0-32bit-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151150" comment="libgmodule-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628474" comment="libgobject-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151151" comment="libgobject-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628475" comment="libgobject-2_0-0-32bit-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151152" comment="libgobject-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628476" comment="libgthread-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151153" comment="libgthread-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16435</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16435" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16435" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16435" ref_url="https://www.suse.com/security/cve/CVE-2018-16435" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004801.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0057-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0057-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005380.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3529-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16435/">CVE-2018-16435</cve>
	<bugzilla href="https://bugzilla.suse.com/1108813">SUSE bug 1108813</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481415" comment="liblcms2-2-2.9-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238348" comment="liblcms2-2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16438</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16438" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16438" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16438" ref_url="https://www.suse.com/security/cve/CVE-2018-16438" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012784.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012789.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012793.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in H5L_extern_query at H5Lexternal.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-02"/>
	<updated date="2022-11-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16438/">CVE-2018-16438</cve>
	<bugzilla href="https://bugzilla.suse.com/1107069">SUSE bug 1107069</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720110" comment="hdf5-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720111" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720112" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720113" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720114" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720115" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720116" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720117" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720118" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720119" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720120" comment="hdf5-hpc-examples-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721709" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721710" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721711" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721712" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721713" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721714" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721715" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721716" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721717" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721718" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721719" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721720" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721721" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721722" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721723" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721724" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721725" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721726" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721727" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721728" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721729" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721730" comment="libhdf5-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721731" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721732" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721733" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721734" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721735" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721736" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721737" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721738" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721739" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721740" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721741" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721742" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721743" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721744" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721745" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721746" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721747" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721748" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721749" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721750" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721751" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721752" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721753" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721754" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721755" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721756" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721757" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721758" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721759" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721760" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721761" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721762" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721763" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721764" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721765" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721766" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721767" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721768" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721769" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721770" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721771" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721772" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721773" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721774" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721775" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721776" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721777" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721778" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721779" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721780" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721781" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721782" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721783" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721784" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721785" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721786" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721787" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721788" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721789" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16509</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16509" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16509" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16509" ref_url="https://www.suse.com/security/cve/CVE-2018-16509" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3330-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004767.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00012.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16509/">CVE-2018-16509</cve>
	<bugzilla href="https://bugzilla.suse.com/1107410">SUSE bug 1107410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108027">SUSE bug 1108027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118318">SUSE bug 1118318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16510</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16510" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16510" ref_url="https://www.suse.com/security/cve/CVE-2018-16510" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004633.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00012.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF primitives could be used by remote attackers able to supply crafted PDFs to crash the interpreter or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16510/">CVE-2018-16510</cve>
	<bugzilla href="https://bugzilla.suse.com/1107411">SUSE bug 1107411</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16511</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16511" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16511" ref_url="https://www.suse.com/security/cve/CVE-2018-16511" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3330-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004767.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00012.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be used by remote attackers able to supply crafted PostScript to crash the interpreter or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16511/">CVE-2018-16511</cve>
	<bugzilla href="https://bugzilla.suse.com/1107426">SUSE bug 1107426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111479">SUSE bug 1111479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112229">SUSE bug 1112229</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16513</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16513" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16513" ref_url="https://www.suse.com/security/cve/CVE-2018-16513" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3330-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004767.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00012.html" source="SUSE-SU"/>
    <description>
    In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the setcolor function to crash the interpreter or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16513/">CVE-2018-16513</cve>
	<bugzilla href="https://bugzilla.suse.com/1107412">SUSE bug 1107412</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16539</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16539" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16539" ref_url="https://www.suse.com/security/cve/CVE-2018-16539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004633.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00012.html" source="SUSE-SU"/>
    <description>
    In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on the system otherwise not readable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16539/">CVE-2018-16539</cve>
	<bugzilla href="https://bugzilla.suse.com/1107422">SUSE bug 1107422</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16540</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16540" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16540" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16540" ref_url="https://www.suse.com/security/cve/CVE-2018-16540" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3330-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004767.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00012.html" source="SUSE-SU"/>
    <description>
    In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter could use a use-after-free in copydevice handling to crash the interpreter or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16540/">CVE-2018-16540</cve>
	<bugzilla href="https://bugzilla.suse.com/1107420">SUSE bug 1107420</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16541</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16541" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16541" ref_url="https://www.suse.com/security/cve/CVE-2018-16541" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3330-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004767.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to crash the interpreter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16541/">CVE-2018-16541</cve>
	<bugzilla href="https://bugzilla.suse.com/1107421">SUSE bug 1107421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108027">SUSE bug 1108027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109105">SUSE bug 1109105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111479">SUSE bug 1111479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111480">SUSE bug 1111480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112229">SUSE bug 1112229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117022">SUSE bug 1117022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118455">SUSE bug 1118455</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16542</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16542" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16542" ref_url="https://www.suse.com/security/cve/CVE-2018-16542" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3330-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004767.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00012.html" source="SUSE-SU"/>
    <description>
    In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interpreter stack-size checking during error handling to crash the interpreter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16542/">CVE-2018-16542</cve>
	<bugzilla href="https://bugzilla.suse.com/1107413">SUSE bug 1107413</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16543</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16543" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16543" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16543" ref_url="https://www.suse.com/security/cve/CVE-2018-16543" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004633.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00012.html" source="SUSE-SU"/>
    <description>
    In Artifex Ghostscript before 9.24, gssetresolution and gsgetresolution allow attackers to have an unspecified impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16543/">CVE-2018-16543</cve>
	<bugzilla href="https://bugzilla.suse.com/1107423">SUSE bug 1107423</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816585" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16585</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16585" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16585" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16585" ref_url="https://www.suse.com/security/cve/CVE-2018-16585" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004633.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00012.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** An issue was discovered in Artifex Ghostscript before 9.24. The .setdistillerkeys PostScript command is accepted even though it is not intended for use during document processing (e.g., after the startup phase). This leads to memory corruption, allowing remote attackers able to supply crafted PostScript to crash the interpreter or possibly have unspecified other impact. Note: A reputable source believes that the CVE is potentially a duplicate of CVE-2018-15910 as explained in Red Hat bugzilla (https://bugzilla.redhat.com/show_bug.cgi?id=1626193).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16585/">CVE-2018-16585</cve>
	<bugzilla href="https://bugzilla.suse.com/1107581">SUSE bug 1107581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16640</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16640" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16640" ref_url="https://www.suse.com/security/cve/CVE-2018-16640" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004662.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00034.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16640/">CVE-2018-16640</cve>
	<bugzilla href="https://bugzilla.suse.com/1107619">SUSE bug 1107619</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16641</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16641" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16641" ref_url="https://www.suse.com/security/cve/CVE-2018-16641" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004634.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00008.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-6 has a memory leak vulnerability in the TIFFWritePhotoshopLayers function in coders/tiff.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16641/">CVE-2018-16641</cve>
	<bugzilla href="https://bugzilla.suse.com/1107618">SUSE bug 1107618</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16642</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16642" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16642" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16642" ref_url="https://www.suse.com/security/cve/CVE-2018-16642" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004662.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004773.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00034.html" source="SUSE-SU"/>
    <description>
    The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16642/">CVE-2018-16642</cve>
	<bugzilla href="https://bugzilla.suse.com/1107616">SUSE bug 1107616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16643</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16643" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16643" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16643" ref_url="https://www.suse.com/security/cve/CVE-2018-16643" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004662.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004773.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00034.html" source="SUSE-SU"/>
    <description>
    The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick 7.0.8-4 do not check the return value of the fputc function, which allows remote attackers to cause a denial of service via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16643/">CVE-2018-16643</cve>
	<bugzilla href="https://bugzilla.suse.com/1107612">SUSE bug 1107612</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816644" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16644</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16644" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16644" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16644" ref_url="https://www.suse.com/security/cve/CVE-2018-16644" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004662.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004773.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005375.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2742-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2742-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html" source="SUSE-SU"/>
    <description>
    There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16644/">CVE-2018-16644</cve>
	<bugzilla href="https://bugzilla.suse.com/1107609">SUSE bug 1107609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107612">SUSE bug 1107612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117463">SUSE bug 1117463</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16645</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16645" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16645" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16645" ref_url="https://www.suse.com/security/cve/CVE-2018-16645" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004662.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004773.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2742-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2742-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00034.html" source="SUSE-SU"/>
    <description>
    There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/dib.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16645/">CVE-2018-16645</cve>
	<bugzilla href="https://bugzilla.suse.com/1107604">SUSE bug 1107604</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16646</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16646" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16646" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16646" ref_url="https://www.suse.com/security/cve/CVE-2018-16646" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16646/">CVE-2018-16646</cve>
	<bugzilla href="https://bugzilla.suse.com/1107597">SUSE bug 1107597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140882">SUSE bug 1140882</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16802</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16802" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16802" ref_url="https://www.suse.com/security/cve/CVE-2018-16802" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004633.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00012.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running out of stack during exception handling could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. This is due to an incomplete fix for CVE-2018-16509.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16802/">CVE-2018-16802</cve>
	<bugzilla href="https://bugzilla.suse.com/1107410">SUSE bug 1107410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108027">SUSE bug 1108027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109105">SUSE bug 1109105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111479">SUSE bug 1111479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111480">SUSE bug 1111480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112229">SUSE bug 1112229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117022">SUSE bug 1117022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117327">SUSE bug 1117327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118455">SUSE bug 1118455</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16837</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16837" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16837" ref_url="https://www.suse.com/security/cve/CVE-2018-16837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1125-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-06/msg00172.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1858-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just to the process list.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16837/">CVE-2018-16837</cve>
	<bugzilla href="https://bugzilla.suse.com/1112959">SUSE bug 1112959</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16839</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16839" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16839" ref_url="https://www.suse.com/security/cve/CVE-2018-16839" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0996-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3706-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00012.html" source="SUSE-SU"/>
    <description>
    Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16839/">CVE-2018-16839</cve>
	<bugzilla href="https://bugzilla.suse.com/1112758">SUSE bug 1112758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113029">SUSE bug 1113029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131886">SUSE bug 1131886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16840</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16840" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16840" ref_url="https://www.suse.com/security/cve/CVE-2018-16840" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3608-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3681-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004839.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005111.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3706-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00012.html" source="SUSE-SU"/>
    <description>
    A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an 'easy' handle in the `Curl_close()` function, the library code first frees a struct (without nulling the pointer) and might then subsequently erroneously write to a struct field within that already freed struct.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16840/">CVE-2018-16840</cve>
	<bugzilla href="https://bugzilla.suse.com/1112758">SUSE bug 1112758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113029">SUSE bug 1113029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122464">SUSE bug 1122464</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16841</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16841" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16841" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16841" ref_url="https://www.suse.com/security/cve/CVE-2018-16841" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004948.html" source="SUSE-SU"/>
    <description>
    Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba's KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16841/">CVE-2018-16841</cve>
	<bugzilla href="https://bugzilla.suse.com/1116320">SUSE bug 1116320</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16842</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16842" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16842" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16842" ref_url="https://www.suse.com/security/cve/CVE-2018-16842" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3607-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3608-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3681-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004839.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005111.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3706-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00012.html" source="SUSE-SU"/>
    <description>
    Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16842/">CVE-2018-16842</cve>
	<bugzilla href="https://bugzilla.suse.com/1113660">SUSE bug 1113660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122464">SUSE bug 1122464</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816847" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16847</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16847" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16847" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16847" ref_url="https://www.suse.com/security/cve/CVE-2018-16847" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004979.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4004-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00036.html" source="SUSE-SU"/>
    <description>
    An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16847/">CVE-2018-16847</cve>
	<bugzilla href="https://bugzilla.suse.com/1114529">SUSE bug 1114529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114540">SUSE bug 1114540</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816851" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16851</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16851" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16851" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16851" ref_url="https://www.suse.com/security/cve/CVE-2018-16851" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004948.html" source="SUSE-SU"/>
    <description>
    Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the processing of an LDAP search before Samba's AD DC returns the LDAP entries to the client, the entries are cached in a single memory object with a maximum size of 256MB. When this size is reached, the Samba process providing the LDAP service will follow the NULL pointer, terminating the process. There is no further vulnerability associated with this issue, merely a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16851/">CVE-2018-16851</cve>
	<bugzilla href="https://bugzilla.suse.com/1116322">SUSE bug 1116322</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16852</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16852" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16852" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16852" ref_url="https://www.suse.com/security/cve/CVE-2018-16852" source="SUSE CVE"/>
    <description>
    Samba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference. During the processing of an DNS zone in the DNS management DCE/RPC server, the internal DNS server or the Samba DLZ plugin for BIND9, if the DSPROPERTY_ZONE_MASTER_SERVERS property or DSPROPERTY_ZONE_SCAVENGING_SERVERS property is set, the server will follow a NULL pointer and terminate. There is no further vulnerability associated with this issue, merely a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16852/">CVE-2018-16852</cve>
	<bugzilla href="https://bugzilla.suse.com/1116321">SUSE bug 1116321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816853" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16853</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16853" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16853" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16853" ref_url="https://www.suse.com/security/cve/CVE-2018-16853" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004948.html" source="SUSE-SU"/>
    <description>
    Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16853/">CVE-2018-16853</cve>
	<bugzilla href="https://bugzilla.suse.com/1116324">SUSE bug 1116324</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816857" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16857</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16857" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16857" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16857" ref_url="https://www.suse.com/security/cve/CVE-2018-16857" source="SUSE CVE"/>
    <description>
    Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restrict brute forcing of passwords) in a window of more than 3 minutes may not watch for bad passwords at all. The primary risk from this issue is with regards to domains that have been upgraded from Samba 4.8 and earlier. In these cases the manual testing done to confirm an organisation's password policies apply as expected may not have been re-done after the upgrade.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-16857/">CVE-2018-16857</cve>
	<bugzilla href="https://bugzilla.suse.com/1116323">SUSE bug 1116323</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16858</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16858" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16858" ref_url="https://www.suse.com/security/cve/CVE-2018-16858" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1448-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20191448-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1894-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005733.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2003-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192003-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00059.html" source="SUSE-SU"/>
    <description>
    It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2018-16858/">CVE-2018-16858</cve>
	<bugzilla href="https://bugzilla.suse.com/1124062">SUSE bug 1124062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146107">SUSE bug 1146107</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816860" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16860</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16860" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16860" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16860" ref_url="https://www.suse.com/security/cve/CVE-2018-16860" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1682-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1688-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1888-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00026.html" source="SUSE-SU"/>
    <description>
    A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16860/">CVE-2018-16860</cve>
	<bugzilla href="https://bugzilla.suse.com/1134024">SUSE bug 1134024</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16864</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16864" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16864" ref_url="https://www.suse.com/security/cve/CVE-2018-16864" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0054-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0054-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005328.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005054.html" source="SUSE-SU"/>
		<reference ref_id="SYSTEM-DOWN-BLOG" ref_url="https://www.suse.com/c/stack-clashing-systemd-aka-system-down/" source="SUSE-SU"/>
		<reference ref_id="TID000019368" ref_url="https://www.suse.com/support/kb/doc/?id=000019368" source="SUSE-SU"/>
		<reference ref_id="TID7023611" ref_url="https://www.suse.com/support/kb/doc/?id=7023611" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0097-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00043.html" source="SUSE-SU"/>
    <description>
    An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16864/">CVE-2018-16864</cve>
	<bugzilla href="https://bugzilla.suse.com/1108912">SUSE bug 1108912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120323">SUSE bug 1120323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122265">SUSE bug 1122265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188063">SUSE bug 1188063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816865" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16865</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16865" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16865" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16865" ref_url="https://www.suse.com/security/cve/CVE-2018-16865" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0054-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0054-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005328.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005054.html" source="SUSE-SU"/>
		<reference ref_id="SYSTEM-DOWN-BLOG" ref_url="https://www.suse.com/c/stack-clashing-systemd-aka-system-down/" source="SUSE-SU"/>
		<reference ref_id="TID000019368" ref_url="https://www.suse.com/support/kb/doc/?id=000019368" source="SUSE-SU"/>
		<reference ref_id="TID7023611" ref_url="https://www.suse.com/support/kb/doc/?id=7023611" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0097-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00043.html" source="SUSE-SU"/>
    <description>
    An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16865/">CVE-2018-16865</cve>
	<bugzilla href="https://bugzilla.suse.com/1108912">SUSE bug 1108912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120323">SUSE bug 1120323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122265">SUSE bug 1122265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188063">SUSE bug 1188063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816868" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16868</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16868" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16868" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16868" ref_url="https://www.suse.com/security/cve/CVE-2018-16868" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1351-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005638.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1353-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1477-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00068.html" source="SUSE-SU"/>
    <description>
    A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16868/">CVE-2018-16868</cve>
	<bugzilla href="https://bugzilla.suse.com/1117951">SUSE bug 1117951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118087">SUSE bug 1118087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134856">SUSE bug 1134856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628489" comment="gnutls-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628491" comment="libgnutls30-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177128" comment="libgnutls30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628492" comment="libgnutls30-32bit-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009235745" comment="libgnutls30-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816869" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16869</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16869" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16869" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16869" ref_url="https://www.suse.com/security/cve/CVE-2018-16869" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004985.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00065.html" source="SUSE-SU"/>
    <description>
    A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16869/">CVE-2018-16869</cve>
	<bugzilla href="https://bugzilla.suse.com/1117951">SUSE bug 1117951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118086">SUSE bug 1118086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118087">SUSE bug 1118087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134856">SUSE bug 1134856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628741" comment="libhogweed4-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177221" comment="libhogweed4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628742" comment="libhogweed4-32bit-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009242425" comment="libhogweed4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628744" comment="libnettle6-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177222" comment="libnettle6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628745" comment="libnettle6-32bit-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009242426" comment="libnettle6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816872" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16872</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16872" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16872" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16872" ref_url="https://www.suse.com/security/cve/CVE-2018-16872" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0423-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0471-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0471-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005385.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005184.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html" source="SUSE-SU"/>
    <description>
    A flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usb_mtp_get_object and usb_mtp_get_partial_object and directories in usb_mtp_object_readdir doesn't consider that the underlying filesystem may have changed since the time lstat(2) was called in usb_mtp_object_alloc, a classical TOCTTOU problem. An attacker with write access to the host filesystem shared with a guest can use this property to navigate the host filesystem in the context of the QEMU process and read any file the QEMU process has access to. Access to the filesystem may be local or via a network share protocol such as CIFS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16872/">CVE-2018-16872</cve>
	<bugzilla href="https://bugzilla.suse.com/1119493">SUSE bug 1119493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119494">SUSE bug 1119494</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816889" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16889</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16889" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16889" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16889" ref_url="https://www.suse.com/security/cve/CVE-2018-16889" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005774.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2364-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005910.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00016.html" source="SUSE-SU"/>
    <description>
    It was found that Ceph RGW did not properly sanitize encryption keys in debug logging for v4 auth. Encryption keys could be inadvertently disclosed when sharing debug logs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16889/">CVE-2018-16889</cve>
	<bugzilla href="https://bugzilla.suse.com/1121567">SUSE bug 1121567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694875" comment="librados2-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694876" comment="librbd1-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201816890" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-16890</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-16890" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16890" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-16890" ref_url="https://www.suse.com/security/cve/CVE-2018-16890" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0249-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005327.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005111.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00023.html" source="SUSE-SU"/>
    <description>
    libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 messages (`lib/vauth/ntlm.c:ntlm_decode_type2_target`) does not validate incoming data correctly and is subject to an integer overflow vulnerability. Using that overflow, a malicious or broken NTLM server could trick libcurl to accept a bad length + offset combination that would lead to a buffer read out-of-bounds.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16890/">CVE-2018-16890</cve>
	<bugzilla href="https://bugzilla.suse.com/1123371">SUSE bug 1123371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123378">SUSE bug 1123378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141798">SUSE bug 1141798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17000</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17000" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17000" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17000" ref_url="https://www.suse.com/security/cve/CVE-2018-17000" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006177.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00041.html" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a crafted tiff file. This vulnerability can be triggered by the executable tiffcp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17000/">CVE-2018-17000</cve>
	<bugzilla href="https://bugzilla.suse.com/1108606">SUSE bug 1108606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115717">SUSE bug 1115717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125113">SUSE bug 1125113</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817082" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17082</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17082" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17082" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17082" ref_url="https://www.suse.com/security/cve/CVE-2018-17082" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004607.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3017-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004643.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004644.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00019.html" source="SUSE-SU"/>
    <description>
    The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the php_handler function in sapi/apache2handler/sapi_apache2.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-17082/">CVE-2018-17082</cve>
	<bugzilla href="https://bugzilla.suse.com/1108753">SUSE bug 1108753</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817096" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17096</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17096" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17096" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17096" ref_url="https://www.suse.com/security/cve/CVE-2018-17096" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3606-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3610-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00005.html" source="SUSE-SU"/>
    <description>
    The BPMDetect class in BPMDetect.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17096/">CVE-2018-17096</cve>
	<bugzilla href="https://bugzilla.suse.com/1108630">SUSE bug 1108630</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486657" comment="libSoundTouch0-1.8.0-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009237168" comment="libSoundTouch0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17097</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17097" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17097" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17097" ref_url="https://www.suse.com/security/cve/CVE-2018-17097" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3606-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3610-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00032.html" source="SUSE-SU"/>
    <description>
    The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) or possibly have unspecified other impact, as demonstrated by SoundStretch.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17097/">CVE-2018-17097</cve>
	<bugzilla href="https://bugzilla.suse.com/1108631">SUSE bug 1108631</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486657" comment="libSoundTouch0-1.8.0-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009237168" comment="libSoundTouch0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17098</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17098" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17098" ref_url="https://www.suse.com/security/cve/CVE-2018-17098" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3606-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3610-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00032.html" source="SUSE-SU"/>
    <description>
    The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact, as demonstrated by SoundStretch.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17098/">CVE-2018-17098</cve>
	<bugzilla href="https://bugzilla.suse.com/1108632">SUSE bug 1108632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009486657" comment="libSoundTouch0-1.8.0-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009237168" comment="libSoundTouch0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817100" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17100</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17100" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17100" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17100" ref_url="https://www.suse.com/security/cve/CVE-2018-17100" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004759.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004765.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004784.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3371-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00056.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiply_ms in tools/ppm2tiff.c, which can cause a denial of service (crash) or possibly have unspecified other impact via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17100/">CVE-2018-17100</cve>
	<bugzilla href="https://bugzilla.suse.com/1108637">SUSE bug 1108637</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17101</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17101" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17101" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17101" ref_url="https://www.suse.com/security/cve/CVE-2018-17101" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004759.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004765.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004784.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3371-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00056.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c, which can cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-17101/">CVE-2018-17101</cve>
	<bugzilla href="https://bugzilla.suse.com/1108627">SUSE bug 1108627</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17183</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17183" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17183" ref_url="https://www.suse.com/security/cve/CVE-2018-17183" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2975-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4090-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005397.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00038.html" source="SUSE-SU"/>
    <description>
    Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by remote attackers able to supply crafted PostScript to potentially overwrite or replace error handlers to inject code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17183/">CVE-2018-17183</cve>
	<bugzilla href="https://bugzilla.suse.com/1108027">SUSE bug 1108027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109105">SUSE bug 1109105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111479">SUSE bug 1111479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111480">SUSE bug 1111480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112229">SUSE bug 1112229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117022">SUSE bug 1117022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117331">SUSE bug 1117331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118455">SUSE bug 1118455</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817229" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17229</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17229" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17229" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17229" ref_url="https://www.suse.com/security/cve/CVE-2018-17229" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006676.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html" source="SUSE-SU"/>
    <description>
    Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17229/">CVE-2018-17229</cve>
	<bugzilla href="https://bugzilla.suse.com/1109175">SUSE bug 1109175</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109176">SUSE bug 1109176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817230" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17230</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17230" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17230" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17230" ref_url="https://www.suse.com/security/cve/CVE-2018-17230" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006676.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html" source="SUSE-SU"/>
    <description>
    Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17230/">CVE-2018-17230</cve>
	<bugzilla href="https://bugzilla.suse.com/1109176">SUSE bug 1109176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817233" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17233</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17233" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17233" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17233" ref_url="https://www.suse.com/security/cve/CVE-2018-17233" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17233/">CVE-2018-17233</cve>
	<bugzilla href="https://bugzilla.suse.com/1109166">SUSE bug 1109166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694850" comment="libhdf5-103-1.10.7-bp153.3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695547" comment="libhdf5-103 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817234" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17234</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17234" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17234" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17234" ref_url="https://www.suse.com/security/cve/CVE-2018-17234" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-03"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17234/">CVE-2018-17234</cve>
	<bugzilla href="https://bugzilla.suse.com/1109167">SUSE bug 1109167</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684443" comment="hdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684444" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684445" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684446" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684447" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684448" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684449" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684450" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684451" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684452" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684453" comment="hdf5-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695078" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695079" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695080" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695081" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695082" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695083" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695084" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695085" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695086" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695087" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695088" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695089" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695090" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695091" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695092" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695093" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695094" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695095" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695096" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695097" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695098" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695099" comment="libhdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695100" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695101" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695102" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695103" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695104" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695105" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695106" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695107" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695108" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695109" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695110" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695111" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695112" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695113" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695114" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695115" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695116" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695117" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695118" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695119" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695120" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695121" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695122" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695123" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695124" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695125" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695126" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695127" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695128" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695129" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695130" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695131" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695132" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695133" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695134" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695135" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695136" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695137" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695138" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695139" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695140" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695141" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695142" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695143" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695144" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695145" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695146" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695147" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695148" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695149" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695150" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695151" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695152" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695153" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695154" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695155" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695156" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695157" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695158" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817237" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17237</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17237" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17237" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17237" ref_url="https://www.suse.com/security/cve/CVE-2018-17237" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. This issue is different from CVE-2018-11207.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-03"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17237/">CVE-2018-17237</cve>
	<bugzilla href="https://bugzilla.suse.com/1093653">SUSE bug 1093653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109168">SUSE bug 1109168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684443" comment="hdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684444" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684445" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684446" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684447" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684448" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684449" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684450" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684451" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684452" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684453" comment="hdf5-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695078" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695079" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695080" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695081" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695082" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695083" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695084" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695085" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695086" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695087" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695088" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695089" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695090" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695091" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695092" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695093" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695094" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695095" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695096" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695097" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695098" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695099" comment="libhdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695100" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695101" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695102" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695103" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695104" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695105" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695106" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695107" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695108" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695109" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695110" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695111" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695112" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695113" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695114" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695115" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695116" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695117" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695118" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695119" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695120" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695121" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695122" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695123" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695124" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695125" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695126" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695127" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695128" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695129" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695130" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695131" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695132" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695133" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695134" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695135" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695136" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695137" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695138" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695139" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695140" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695141" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695142" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695143" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695144" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695145" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695146" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695147" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695148" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695149" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695150" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695151" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695152" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695153" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695154" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695155" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695156" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695157" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695158" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817282" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17282</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17282" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17282" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17282" ref_url="https://www.suse.com/security/cve/CVE-2018-17282" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006676.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17282/">CVE-2018-17282</cve>
	<bugzilla href="https://bugzilla.suse.com/1109299">SUSE bug 1109299</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817336" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17336</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17336" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17336" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17336" ref_url="https://www.suse.com/security/cve/CVE-2018-17336" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004755.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3372-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00057.html" source="SUSE-SU"/>
    <description>
    UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing attackers to obtain sensitive information (stack contents), cause a denial of service (memory corruption), or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n substrings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17336/">CVE-2018-17336</cve>
	<bugzilla href="https://bugzilla.suse.com/1109406">SUSE bug 1109406</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482438" comment="libudisks2-0-2.8.1-1.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152050" comment="libudisks2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694882" comment="libudisks2-0_btrfs-2.8.1-1.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695655" comment="libudisks2-0_btrfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482441" comment="udisks2-2.8.1-1.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152051" comment="udisks2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482442" comment="udisks2-lang-2.8.1-1.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152052" comment="udisks2-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817358" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17358</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17358" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17358" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17358" ref_url="https://www.suse.com/security/cve/CVE-2018-17358" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exists in _bfd_stab_section_find_nearest_line in syms.c. Attackers could leverage this vulnerability to cause a denial of service (application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17358/">CVE-2018-17358</cve>
	<bugzilla href="https://bugzilla.suse.com/1109412">SUSE bug 1109412</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817359" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17359</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17359" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17359" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17359" ref_url="https://www.suse.com/security/cve/CVE-2018-17359" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exists in bfd_zalloc in opncls.c. Attackers could leverage this vulnerability to cause a denial of service (application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17359/">CVE-2018-17359</cve>
	<bugzilla href="https://bugzilla.suse.com/1109413">SUSE bug 1109413</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817360" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17360</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17360" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17360" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17360" ref_url="https://www.suse.com/security/cve/CVE-2018-17360" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. a heap-based buffer over-read in bfd_getl32 in libbfd.c allows an attacker to cause a denial of service through a crafted PE file. This vulnerability can be triggered by the executable objdump.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17360/">CVE-2018-17360</cve>
	<bugzilla href="https://bugzilla.suse.com/1109414">SUSE bug 1109414</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817432" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17432</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17432" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17432" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17432" ref_url="https://www.suse.com/security/cve/CVE-2018-17432" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference in H5O_sdspace_encode() in H5Osdspace.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-03"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17432/">CVE-2018-17432</cve>
	<bugzilla href="https://bugzilla.suse.com/1109564">SUSE bug 1109564</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684443" comment="hdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684444" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684445" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684446" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684447" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684448" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684449" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684450" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684451" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684452" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684453" comment="hdf5-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695078" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695079" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695080" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695081" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695082" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695083" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695084" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695085" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695086" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695087" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695088" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695089" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695090" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695091" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695092" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695093" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695094" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695095" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695096" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695097" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695098" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695099" comment="libhdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695100" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695101" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695102" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695103" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695104" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695105" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695106" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695107" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695108" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695109" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695110" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695111" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695112" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695113" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695114" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695115" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695116" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695117" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695118" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695119" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695120" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695121" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695122" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695123" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695124" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695125" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695126" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695127" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695128" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695129" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695130" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695131" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695132" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695133" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695134" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695135" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695136" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695137" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695138" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695139" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695140" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695141" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695142" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695143" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695144" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695145" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695146" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695147" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695148" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695149" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695150" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695151" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695152" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695153" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695154" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695155" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695156" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695157" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695158" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17433</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17433" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17433" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17433" ref_url="https://www.suse.com/security/cve/CVE-2018-17433" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow in ReadGifImageDesc() in gifread.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-03"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17433/">CVE-2018-17433</cve>
	<bugzilla href="https://bugzilla.suse.com/1109565">SUSE bug 1109565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684443" comment="hdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684444" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684445" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684446" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684447" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684448" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684449" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684450" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684451" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684452" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684453" comment="hdf5-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695078" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695079" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695080" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695081" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695082" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695083" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695084" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695085" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695086" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695087" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695088" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695089" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695090" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695091" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695092" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695093" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695094" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695095" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695096" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695097" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695098" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695099" comment="libhdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695100" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695101" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695102" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695103" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695104" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695105" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695106" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695107" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695108" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695109" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695110" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695111" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695112" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695113" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695114" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695115" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695116" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695117" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695118" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695119" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695120" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695121" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695122" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695123" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695124" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695125" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695126" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695127" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695128" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695129" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695130" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695131" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695132" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695133" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695134" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695135" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695136" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695137" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695138" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695139" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695140" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695141" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695142" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695143" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695144" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695145" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695146" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695147" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695148" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695149" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695150" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695151" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695152" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695153" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695154" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695155" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695156" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695157" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695158" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17434</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17434" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17434" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17434" ref_url="https://www.suse.com/security/cve/CVE-2018-17434" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    A SIGFPE signal is raised in the function apply_filters() of h5repack_filters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17434/">CVE-2018-17434</cve>
	<bugzilla href="https://bugzilla.suse.com/1109566">SUSE bug 1109566</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684443" comment="hdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684444" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684445" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684446" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684447" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684448" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684449" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684450" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684451" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684452" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684453" comment="hdf5-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695078" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695079" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695080" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695081" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695082" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695083" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695084" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695085" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695086" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695087" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695088" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695089" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695090" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695091" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695092" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695093" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695094" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695095" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695096" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695097" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695098" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694850" comment="libhdf5-103-1.10.7-bp153.3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695547" comment="libhdf5-103 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695099" comment="libhdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695100" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695101" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695102" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695103" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695104" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695105" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695106" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695107" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695108" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695109" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695110" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695111" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695112" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695113" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695114" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695115" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695116" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695117" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695118" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695119" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695120" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695121" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695122" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695123" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695124" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695125" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695126" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695127" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695128" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695129" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695130" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695131" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695132" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695133" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695134" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695135" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695136" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695137" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695138" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695139" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695140" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695141" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695142" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695143" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695144" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695145" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695146" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695147" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695148" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695149" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695150" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695151" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695152" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695153" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695154" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695155" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695156" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695157" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695158" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17435</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17435" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17435" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17435" ref_url="https://www.suse.com/security/cve/CVE-2018-17435" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer over-read in H5O_attr_decode() in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting an HDF file to GIF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17435/">CVE-2018-17435</cve>
	<bugzilla href="https://bugzilla.suse.com/1109567">SUSE bug 1109567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694850" comment="libhdf5-103-1.10.7-bp153.3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695547" comment="libhdf5-103 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17436</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17436" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17436" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17436" ref_url="https://www.suse.com/security/cve/CVE-2018-17436" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    ReadCode() in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (invalid write access) via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-03"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17436/">CVE-2018-17436</cve>
	<bugzilla href="https://bugzilla.suse.com/1109568">SUSE bug 1109568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684443" comment="hdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684444" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684445" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684446" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684447" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684448" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684449" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684450" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684451" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684452" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684453" comment="hdf5-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695078" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695079" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695080" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695081" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695082" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695083" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695084" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695085" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695086" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695087" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695088" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695089" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695090" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695091" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695092" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695093" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695094" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695095" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695096" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695097" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695098" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695099" comment="libhdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695100" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695101" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695102" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695103" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695104" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695105" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695106" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695107" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695108" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695109" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695110" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695111" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695112" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695113" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695114" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695115" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695116" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695117" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695118" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695119" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695120" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695121" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695122" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695123" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695124" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695125" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695126" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695127" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695128" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695129" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695130" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695131" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695132" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695133" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695134" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695135" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695136" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695137" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695138" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695139" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695140" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695141" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695142" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695143" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695144" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695145" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695146" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695147" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695148" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695149" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695150" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695151" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695152" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695153" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695154" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695155" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695156" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695157" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695158" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17437</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17437" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17437" ref_url="https://www.suse.com/security/cve/CVE-2018-17437" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17437/">CVE-2018-17437</cve>
	<bugzilla href="https://bugzilla.suse.com/1109569">SUSE bug 1109569</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684443" comment="hdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684444" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684445" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684446" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684447" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684448" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684449" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684450" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684451" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684452" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684453" comment="hdf5-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695078" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695079" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695080" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695081" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695082" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695083" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695084" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695085" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695086" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695087" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695088" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695089" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695090" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695091" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695092" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695093" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695094" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695095" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695096" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695097" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695098" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694850" comment="libhdf5-103-1.10.7-bp153.3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695547" comment="libhdf5-103 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695099" comment="libhdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695100" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695101" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695102" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695103" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695104" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695105" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695106" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695107" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695108" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695109" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695110" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695111" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695112" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695113" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695114" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695115" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695116" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695117" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695118" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695119" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695120" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695121" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695122" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695123" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695124" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695125" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695126" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695127" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695128" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695129" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695130" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695131" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695132" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695133" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695134" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695135" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695136" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695137" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695138" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695139" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695140" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695141" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695142" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695143" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695144" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695145" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695146" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695147" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695148" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695149" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695150" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695151" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695152" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695153" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695154" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695155" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695156" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695157" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695158" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17438</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17438" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17438" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17438" ref_url="https://www.suse.com/security/cve/CVE-2018-17438" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17438/">CVE-2018-17438</cve>
	<bugzilla href="https://bugzilla.suse.com/1109570">SUSE bug 1109570</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684443" comment="hdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684444" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684445" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684446" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684447" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684448" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684449" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684450" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684451" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684452" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684453" comment="hdf5-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695078" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695079" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695080" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695081" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695082" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695083" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695084" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695085" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695086" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695087" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695088" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695089" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695090" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695091" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695092" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695093" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695094" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695095" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695096" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695097" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695098" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694850" comment="libhdf5-103-1.10.7-bp153.3.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695547" comment="libhdf5-103 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695099" comment="libhdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695100" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695101" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695102" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695103" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695104" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695105" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695106" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695107" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695108" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695109" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695110" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695111" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695112" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695113" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695114" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695115" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695116" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695117" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695118" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695119" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695120" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695121" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695122" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695123" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695124" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695125" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695126" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695127" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695128" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695129" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695130" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695131" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695132" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695133" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695134" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695135" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695136" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695137" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695138" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695139" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695140" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695141" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695142" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695143" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695144" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695145" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695146" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695147" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695148" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695149" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695150" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695151" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695152" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695153" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695154" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695155" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695156" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695157" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695158" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17439</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17439" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17439" ref_url="https://www.suse.com/security/cve/CVE-2018-17439" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012784.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012789.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012793.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the HDF HDF5 1.10.3 library. There is a stack-based buffer overflow in the function H5S_extent_get_dims() in H5S.c. Specifically, this issue occurs while converting an HDF5 file to a GIF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-02"/>
	<updated date="2022-11-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-17439/">CVE-2018-17439</cve>
	<bugzilla href="https://bugzilla.suse.com/1111598">SUSE bug 1111598</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720110" comment="hdf5-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720111" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720112" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720113" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720114" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720115" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720116" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720117" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720118" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720119" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720120" comment="hdf5-hpc-examples-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721709" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721710" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721711" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721712" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721713" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721714" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721715" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721716" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721717" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721718" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721719" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721720" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721721" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721722" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721723" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721724" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721725" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721726" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721727" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721728" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721729" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721730" comment="libhdf5-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721731" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721732" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721733" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721734" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721735" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721736" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721737" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721738" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721739" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721740" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721741" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721742" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721743" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721744" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721745" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721746" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721747" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721748" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721749" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721750" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721751" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721752" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721753" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721754" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721755" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721756" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721757" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721758" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721759" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721760" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721761" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721762" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721763" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721764" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721765" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721766" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721767" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721768" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721769" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721770" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721771" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721772" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721773" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721774" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721775" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721776" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721777" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721778" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721779" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721780" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721781" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721782" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721783" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721784" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721785" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721786" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721787" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721788" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721789" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17456</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17456" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17456" ref_url="https://www.suse.com/security/cve/CVE-2018-17456" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004671.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4009-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004935.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4088-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005387.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4088-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006748.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3109-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3178-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html" source="SUSE-SU"/>
    <description>
    Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17456/">CVE-2018-17456</cve>
	<bugzilla href="https://bugzilla.suse.com/1110949">SUSE bug 1110949</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17462</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17462" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17462" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17462" ref_url="https://www.suse.com/security/cve/CVE-2018-17462" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
    <description>
    Incorrect refcounting in AppCache in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17462/">CVE-2018-17462</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17463</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17463" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17463" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17463" ref_url="https://www.suse.com/security/cve/CVE-2018-17463" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
    <description>
    Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17463/">CVE-2018-17463</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17464</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17464" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17464" ref_url="https://www.suse.com/security/cve/CVE-2018-17464" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-17464/">CVE-2018-17464</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817465" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17465</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17465" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17465" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17465" ref_url="https://www.suse.com/security/cve/CVE-2018-17465" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
    <description>
    Incorrect implementation of object trimming in V8 in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17465/">CVE-2018-17465</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17466</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17466" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17466" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17466" ref_url="https://www.suse.com/security/cve/CVE-2018-17466" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00069.html" source="SUSE-SU"/>
    <description>
    Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17466/">CVE-2018-17466</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121207">SUSE bug 1121207</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17467</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17467" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17467" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17467" ref_url="https://www.suse.com/security/cve/CVE-2018-17467" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
    <description>
    Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-17467/">CVE-2018-17467</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817468" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17468</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17468" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17468" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17468" ref_url="https://www.suse.com/security/cve/CVE-2018-17468" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of timer information during navigation in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obtain cross origin URLs via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-17468/">CVE-2018-17468</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17469</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17469" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17469" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17469" ref_url="https://www.suse.com/security/cve/CVE-2018-17469" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17469/">CVE-2018-17469</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17470</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17470" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17470" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17470" ref_url="https://www.suse.com/security/cve/CVE-2018-17470" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
    <description>
    A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17470/">CVE-2018-17470</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817471" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17471</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17471" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17471" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17471" ref_url="https://www.suse.com/security/cve/CVE-2018-17471" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
    <description>
    Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-17471/">CVE-2018-17471</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17472</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17472" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17472" ref_url="https://www.suse.com/security/cve/CVE-2018-17472" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the &lt;iframe&gt; sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17472/">CVE-2018-17472</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17473</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17473" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17473" ref_url="https://www.suse.com/security/cve/CVE-2018-17473" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-17473/">CVE-2018-17473</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17474</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17474" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17474" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17474" ref_url="https://www.suse.com/security/cve/CVE-2018-17474" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
    <description>
    Use after free in HTMLImportsController in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17474/">CVE-2018-17474</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17475</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17475" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17475" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17475" ref_url="https://www.suse.com/security/cve/CVE-2018-17475" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-17475/">CVE-2018-17475</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17476</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17476" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17476" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17476" ref_url="https://www.suse.com/security/cve/CVE-2018-17476" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
    <description>
    Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-17476/">CVE-2018-17476</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17477</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17477" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17477" ref_url="https://www.suse.com/security/cve/CVE-2018-17477" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
    <description>
    Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of extension popups via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-17477/">CVE-2018-17477</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17478</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17478" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17478" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17478" ref_url="https://www.suse.com/security/cve/CVE-2018-17478" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3805-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3837-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00036.html" source="SUSE-SU"/>
    <description>
    Incorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17478/">CVE-2018-17478</cve>
	<bugzilla href="https://bugzilla.suse.com/1115537">SUSE bug 1115537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17479</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17479" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17479" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17479" ref_url="https://www.suse.com/security/cve/CVE-2018-17479" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00040.html" source="SUSE-SU"/>
    <description>
    Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17479/">CVE-2018-17479</cve>
	<bugzilla href="https://bugzilla.suse.com/1116608">SUSE bug 1116608</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817480" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17480</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17480" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17480" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17480" ref_url="https://www.suse.com/security/cve/CVE-2018-17480" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17480/">CVE-2018-17480</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817481" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17481</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17481" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17481" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17481" ref_url="https://www.suse.com/security/cve/CVE-2018-17481" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17481/">CVE-2018-17481</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119364">SUSE bug 1119364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817581" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17581</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17581" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17581" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17581" ref_url="https://www.suse.com/security/cve/CVE-2018-17581" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013143.html" source="SUSE-SU"/>
    <description>
    CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-30"/>
	<updated date="2022-11-30"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17581/">CVE-2018-17581</cve>
	<bugzilla href="https://bugzilla.suse.com/1110282">SUSE bug 1110282</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725422" comment="exiv2-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725423" comment="exiv2-lang-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725374" comment="libexiv2-26-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725424" comment="libexiv2-26-32bit-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725375" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725425" comment="libexiv2-doc-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817795" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17795</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17795" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17795" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17795" ref_url="https://www.suse.com/security/cve/CVE-2018-17795" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004759.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004765.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004784.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3371-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00056.html" source="SUSE-SU"/>
    <description>
    The function t2p_write_pdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file, a similar issue to CVE-2017-9935.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17795/">CVE-2018-17795</cve>
	<bugzilla href="https://bugzilla.suse.com/1046077">SUSE bug 1046077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110358">SUSE bug 1110358</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817953" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17953</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17953" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17953" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17953" ref_url="https://www.suse.com/security/cve/CVE-2018-17953" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3965-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183965-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00015.html" source="SUSE-SU"/>
    <description>
    A incorrect variable in a SUSE specific patch for pam_access rule matching in PAM 1.3.0 in openSUSE Leap 15.0 and SUSE Linux Enterprise 15 could lead to pam_access rules not being applied (fail open).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-17953/">CVE-2018-17953</cve>
	<bugzilla href="https://bugzilla.suse.com/1115640">SUSE bug 1115640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197654">SUSE bug 1197654</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628960" comment="pam-1.3.0-6.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151504" comment="pam is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628961" comment="pam-32bit-1.3.0-6.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151505" comment="pam-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628963" comment="pam-doc-1.3.0-6.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009241456" comment="pam-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17958</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17958" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17958" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17958" ref_url="https://www.suse.com/security/cve/CVE-2018-17958" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004891.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3973-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183973-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3973-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005395.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3975-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183975-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3987-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13921-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913921-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14011-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005287.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4004-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00043.html" source="SUSE-SU"/>
    <description>
    Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-17958/">CVE-2018-17958</cve>
	<bugzilla href="https://bugzilla.suse.com/1111006">SUSE bug 1111006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111007">SUSE bug 1111007</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17961</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17961" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17961" ref_url="https://www.suse.com/security/cve/CVE-2018-17961" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4090-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005397.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00038.html" source="SUSE-SU"/>
    <description>
    Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTE: this issue exists because of an incomplete fix for CVE-2018-17183.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-17961/">CVE-2018-17961</cve>
	<bugzilla href="https://bugzilla.suse.com/1108027">SUSE bug 1108027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109105">SUSE bug 1109105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111479">SUSE bug 1111479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111480">SUSE bug 1111480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112229">SUSE bug 1112229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117022">SUSE bug 1117022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117331">SUSE bug 1117331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118455">SUSE bug 1118455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129180">SUSE bug 1129180</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17962</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17962" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17962" ref_url="https://www.suse.com/security/cve/CVE-2018-17962" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004891.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3973-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183973-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3973-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005395.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3975-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183975-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3987-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13921-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913921-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14011-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005287.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4004-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00043.html" source="SUSE-SU"/>
    <description>
    Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-17962/">CVE-2018-17962</cve>
	<bugzilla href="https://bugzilla.suse.com/1111010">SUSE bug 1111010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111011">SUSE bug 1111011</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817963" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17963</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17963" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17963" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17963" ref_url="https://www.suse.com/security/cve/CVE-2018-17963" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004891.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3973-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183973-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3973-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005395.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3975-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183975-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3987-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13921-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913921-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14011-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005287.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4004-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00043.html" source="SUSE-SU"/>
    <description>
    qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-17963/">CVE-2018-17963</cve>
	<bugzilla href="https://bugzilla.suse.com/1111013">SUSE bug 1111013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111014">SUSE bug 1111014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17966</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17966" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17966" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17966" ref_url="https://www.suse.com/security/cve/CVE-2018-17966" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004773.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004847.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3225-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3797-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00020.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17966/">CVE-2018-17966</cve>
	<bugzilla href="https://bugzilla.suse.com/1110746">SUSE bug 1110746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117463">SUSE bug 1117463</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201817985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-17985</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-17985" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17985" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-17985" ref_url="https://www.suse.com/security/cve/CVE-2018-17985" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplus_demangle_type function making recursive calls to itself in certain scenarios involving many 'P' characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17985/">CVE-2018-17985</cve>
	<bugzilla href="https://bugzilla.suse.com/1116827">SUSE bug 1116827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18024</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18024" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18024" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18024" ref_url="https://www.suse.com/security/cve/CVE-2018-18024" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004773.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004847.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3225-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3797-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00020.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18024/">CVE-2018-18024</cve>
	<bugzilla href="https://bugzilla.suse.com/1111069">SUSE bug 1111069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117463">SUSE bug 1117463</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18065</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18065" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18065" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18065" ref_url="https://www.suse.com/security/cve/CVE-2018-18065" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004763.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3447-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3447-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005390.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0050-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010490.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3381-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3508-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0050-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2OQK3YBZP7LLGFOZF2RYGZC5GDDRHRI6/" source="SUSE-SU"/>
    <description>
    _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18065/">CVE-2018-18065</cve>
	<bugzilla href="https://bugzilla.suse.com/1111122">SUSE bug 1111122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145864">SUSE bug 1145864</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661027" comment="libsnmp30-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151706" comment="libsnmp30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661035" comment="libsnmp30-32bit-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151707" comment="libsnmp30-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661028" comment="net-snmp-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151708" comment="net-snmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661029" comment="net-snmp-devel-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151709" comment="net-snmp-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661802" comment="net-snmp-devel-32bit-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238133" comment="net-snmp-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661030" comment="perl-SNMP-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151710" comment="perl-SNMP is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661803" comment="python2-net-snmp-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238134" comment="python2-net-snmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661804" comment="python3-net-snmp-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238135" comment="python3-net-snmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661031" comment="snmp-mibs-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151711" comment="snmp-mibs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18073</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18073" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18073" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18073" ref_url="https://www.suse.com/security/cve/CVE-2018-18073" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4090-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005397.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00038.html" source="SUSE-SU"/>
    <description>
    Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18073/">CVE-2018-18073</cve>
	<bugzilla href="https://bugzilla.suse.com/1108027">SUSE bug 1108027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109105">SUSE bug 1109105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111479">SUSE bug 1111479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111480">SUSE bug 1111480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112229">SUSE bug 1112229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117022">SUSE bug 1117022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117331">SUSE bug 1117331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118455">SUSE bug 1118455</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18074</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18074" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18074" ref_url="https://www.suse.com/security/cve/CVE-2018-18074" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1487-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005761.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005773.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006561.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1448-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011137.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1754-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18074/">CVE-2018-18074</cve>
	<bugzilla href="https://bugzilla.suse.com/1111622">SUSE bug 1111622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628993" comment="python3-requests-2.24.0-1.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152097" comment="python3-requests is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818284" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18284</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18284" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18284" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18284" ref_url="https://www.suse.com/security/cve/CVE-2018-18284" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4090-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005397.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00038.html" source="SUSE-SU"/>
    <description>
    Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-18284/">CVE-2018-18284</cve>
	<bugzilla href="https://bugzilla.suse.com/1108027">SUSE bug 1108027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109105">SUSE bug 1109105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111479">SUSE bug 1111479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111480">SUSE bug 1111480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112229">SUSE bug 1112229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117022">SUSE bug 1117022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117331">SUSE bug 1117331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118455">SUSE bug 1118455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144621">SUSE bug 1144621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18309</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18309" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18309" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18309" ref_url="https://www.suse.com/security/cve/CVE-2018-18309" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory address dereference was discovered in read_reloc in reloc.c. The vulnerability causes a segmentation fault and application crash, which leads to denial of service, as demonstrated by objdump, because of missing _bfd_clear_contents bounds checking.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18309/">CVE-2018-18309</cve>
	<bugzilla href="https://bugzilla.suse.com/1111996">SUSE bug 1111996</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18310</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18310" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18310" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18310" ref_url="https://www.suse.com/security/cve/CVE-2018-18310" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html" source="SUSE-SU"/>
    <description>
    An invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by consider_notes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18310/">CVE-2018-18310</cve>
	<bugzilla href="https://bugzilla.suse.com/1111973">SUSE bug 1111973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490191" comment="elfutils-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490192" comment="elfutils-lang-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490194" comment="libasm1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490196" comment="libdw1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490197" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490199" comment="libebl-plugins-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490200" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490202" comment="libelf1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490203" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18311</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18311" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18311" ref_url="https://www.suse.com/security/cve/CVE-2018-18311" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2264-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192264-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00063.html" source="SUSE-SU"/>
    <description>
    Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18311/">CVE-2018-18311</cve>
	<bugzilla href="https://bugzilla.suse.com/1114674">SUSE bug 1114674</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628966" comment="perl-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628967" comment="perl-base-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628968" comment="perl-base-32bit-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153231" comment="perl-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628969" comment="perl-core-DB_File-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695544" comment="perl-core-DB_File is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18312</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18312" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18312" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18312" ref_url="https://www.suse.com/security/cve/CVE-2018-18312" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004980.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00063.html" source="SUSE-SU"/>
    <description>
    Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-18312/">CVE-2018-18312</cve>
	<bugzilla href="https://bugzilla.suse.com/1114675">SUSE bug 1114675</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628966" comment="perl-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628967" comment="perl-base-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628968" comment="perl-base-32bit-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153231" comment="perl-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628969" comment="perl-core-DB_File-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695544" comment="perl-core-DB_File is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18313</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18313" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18313" ref_url="https://www.suse.com/security/cve/CVE-2018-18313" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004980.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00063.html" source="SUSE-SU"/>
    <description>
    Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18313/">CVE-2018-18313</cve>
	<bugzilla href="https://bugzilla.suse.com/1114681">SUSE bug 1114681</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628966" comment="perl-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628967" comment="perl-base-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628968" comment="perl-base-32bit-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153231" comment="perl-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628969" comment="perl-core-DB_File-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695544" comment="perl-core-DB_File is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818314" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18314</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18314" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18314" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18314" ref_url="https://www.suse.com/security/cve/CVE-2018-18314" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004980.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00063.html" source="SUSE-SU"/>
    <description>
    Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.5/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-18314/">CVE-2018-18314</cve>
	<bugzilla href="https://bugzilla.suse.com/1114686">SUSE bug 1114686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628966" comment="perl-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628967" comment="perl-base-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628968" comment="perl-base-32bit-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153231" comment="perl-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628969" comment="perl-core-DB_File-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695544" comment="perl-core-DB_File is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818335" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18335</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18335" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18335" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18335" ref_url="https://www.suse.com/security/cve/CVE-2018-18335" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0469-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0202-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18335/">CVE-2018-18335</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818336" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18336</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18336" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18336" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18336" ref_url="https://www.suse.com/security/cve/CVE-2018-18336" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Incorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18336/">CVE-2018-18336</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818337" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18337</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18337" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18337" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18337" ref_url="https://www.suse.com/security/cve/CVE-2018-18337" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of stylesheets leading to a use after free in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18337/">CVE-2018-18337</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18338</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18338" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18338" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18338" ref_url="https://www.suse.com/security/cve/CVE-2018-18338" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Incorrect, thread-unsafe use of SkImage in Canvas in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18338/">CVE-2018-18338</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818339" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18339</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18339" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18339" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18339" ref_url="https://www.suse.com/security/cve/CVE-2018-18339" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18339/">CVE-2018-18339</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818340" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18340</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18340" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18340" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18340" ref_url="https://www.suse.com/security/cve/CVE-2018-18340" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Incorrect object lifecycle in MediaRecorder in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18340/">CVE-2018-18340</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818341" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18341</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18341" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18341" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18341" ref_url="https://www.suse.com/security/cve/CVE-2018-18341" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    An integer overflow leading to a heap buffer overflow in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18341/">CVE-2018-18341</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18342</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18342" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18342" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18342" ref_url="https://www.suse.com/security/cve/CVE-2018-18342" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Execution of user supplied Javascript during object deserialization can update object length leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18342/">CVE-2018-18342</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818343" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18343</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18343" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18343" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18343" ref_url="https://www.suse.com/security/cve/CVE-2018-18343" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Incorrect handing of paths leading to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18343/">CVE-2018-18343</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818344" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18344</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18344" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18344" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18344" ref_url="https://www.suse.com/security/cve/CVE-2018-18344" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to access files on the local file system via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18344/">CVE-2018-18344</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18345</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18345" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18345" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18345" ref_url="https://www.suse.com/security/cve/CVE-2018-18345" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who had compromised the renderer process to bypass site isolation protections via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18345/">CVE-2018-18345</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818346" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18346</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18346" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18346" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18346" ref_url="https://www.suse.com/security/cve/CVE-2018-18346" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing browser UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-18346/">CVE-2018-18346</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818347" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18347</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18347" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18347" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18347" ref_url="https://www.suse.com/security/cve/CVE-2018-18347" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to trick a user into executing javascript in an arbitrary origin via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18347/">CVE-2018-18347</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818348" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18348</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18348" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18348" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18348" ref_url="https://www.suse.com/security/cve/CVE-2018-18348" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-18348/">CVE-2018-18348</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18349</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18349" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18349" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18349" ref_url="https://www.suse.com/security/cve/CVE-2018-18349" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Remote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome prior to 71.0.3578.80 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18349/">CVE-2018-18349</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18350</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18350" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18350" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18350" ref_url="https://www.suse.com/security/cve/CVE-2018-18350" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of CSP enforcement during navigations in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-18350/">CVE-2018-18350</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18351</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18351" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18351" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18351" ref_url="https://www.suse.com/security/cve/CVE-2018-18351" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Lack of proper validation of ancestor frames site when sending lax cookies in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass SameSite cookie policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18351/">CVE-2018-18351</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18352</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18352" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18352" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18352" ref_url="https://www.suse.com/security/cve/CVE-2018-18352" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Service works could inappropriately gain access to cross origin audio in Media in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass same origin policy for audio content via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18352/">CVE-2018-18352</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18353</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18353" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18353" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18353" ref_url="https://www.suse.com/security/cve/CVE-2018-18353" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Failure to dismiss http auth dialogs on navigation in Network Authentication in Google Chrome on Android prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of an auto dialog via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-18353/">CVE-2018-18353</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18354</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18354" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18354" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18354" ref_url="https://www.suse.com/security/cve/CVE-2018-18354" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Insufficient validate of external protocols in Shell Integration in Google Chrome on Windows prior to 71.0.3578.80 allowed a remote attacker to launch external programs via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18354/">CVE-2018-18354</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18355</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18355" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18355" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18355" ref_url="https://www.suse.com/security/cve/CVE-2018-18355" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-18355/">CVE-2018-18355</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818356" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18356</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18356" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18356" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18356" ref_url="https://www.suse.com/security/cve/CVE-2018-18356" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0469-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0202-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html" source="SUSE-SU"/>
    <description>
    An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18356/">CVE-2018-18356</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125396">SUSE bug 1125396</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818357" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18357</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18357" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18357" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18357" ref_url="https://www.suse.com/security/cve/CVE-2018-18357" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-18357/">CVE-2018-18357</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818358" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18358</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18358" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18358" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18358" ref_url="https://www.suse.com/security/cve/CVE-2018-18358" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Lack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed an attacker on the local network segment to proxy resources on localhost via a crafted WPAD file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.7/CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-18358/">CVE-2018-18358</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818359" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18359</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18359" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18359" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18359" ref_url="https://www.suse.com/security/cve/CVE-2018-18359" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:4056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00041.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of Reflect.construct in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18359/">CVE-2018-18359</cve>
	<bugzilla href="https://bugzilla.suse.com/1118529">SUSE bug 1118529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18384</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18384" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18384" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18384" ref_url="https://www.suse.com/security/cve/CVE-2018-18384" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0707-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005222.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1117-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00009.html" source="SUSE-SU"/>
    <description>
    Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18384/">CVE-2018-18384</cve>
	<bugzilla href="https://bugzilla.suse.com/1110194">SUSE bug 1110194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148898">SUSE bug 1148898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153715">SUSE bug 1153715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152223" comment="unzip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694925" comment="unzip-doc-6.00-4.8.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152224" comment="unzip-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18439</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18439" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18439" ref_url="https://www.suse.com/security/cve/CVE-2018-18439" source="SUSE CVE"/>
    <description>
    DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploitation can occur via a crafted kernel image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18439/">CVE-2018-18439</cve>
	<bugzilla href="https://bugzilla.suse.com/1114507">SUSE bug 1114507</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629037" comment="u-boot-rpiarm64-2021.01-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623523" comment="u-boot-rpiarm64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629038" comment="u-boot-rpiarm64-doc-2021.01-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623524" comment="u-boot-rpiarm64-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18440</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18440" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18440" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18440" ref_url="https://www.suse.com/security/cve/CVE-2018-18440" source="SUSE CVE"/>
    <description>
    DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18440/">CVE-2018-18440</cve>
	<bugzilla href="https://bugzilla.suse.com/1114507">SUSE bug 1114507</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629037" comment="u-boot-rpiarm64-2021.01-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623523" comment="u-boot-rpiarm64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629038" comment="u-boot-rpiarm64-doc-2021.01-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623524" comment="u-boot-rpiarm64-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18444</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18444" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18444" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18444" ref_url="https://www.suse.com/security/cve/CVE-2018-18444" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005747.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00089.html" source="SUSE-SU"/>
    <description>
    makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18444/">CVE-2018-18444</cve>
	<bugzilla href="https://bugzilla.suse.com/1113455">SUSE bug 1113455</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18483</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18483" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18483" ref_url="https://www.suse.com/security/cve/CVE-2018-18483" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service (malloc called with the result of an integer-overflowing calculation) or possibly have unspecified other impact via a crafted string, as demonstrated by c++filt.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18483/">CVE-2018-18483</cve>
	<bugzilla href="https://bugzilla.suse.com/1112535">SUSE bug 1112535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18484</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18484" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18484" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18484" ref_url="https://www.suse.com/security/cve/CVE-2018-18484" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there is a stack consumption problem caused by recursive stack frames: cplus_demangle_type, d_bare_function_type, d_function_type.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18484/">CVE-2018-18484</cve>
	<bugzilla href="https://bugzilla.suse.com/1112534">SUSE bug 1112534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18492</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18492" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18492" ref_url="https://www.suse.com/security/cve/CVE-2018-18492" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00069.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60.4, Firefox ESR &lt; 60.4, and Firefox &lt; 64.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18492/">CVE-2018-18492</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121207">SUSE bug 1121207</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18493</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18493" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18493" ref_url="https://www.suse.com/security/cve/CVE-2018-18493" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00069.html" source="SUSE-SU"/>
    <description>
    A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60.4, Firefox ESR &lt; 60.4, and Firefox &lt; 64.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18493/">CVE-2018-18493</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121207">SUSE bug 1121207</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18494</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18494" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18494" ref_url="https://www.suse.com/security/cve/CVE-2018-18494" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00069.html" source="SUSE-SU"/>
    <description>
    A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Thunderbird &lt; 60.4, Firefox ESR &lt; 60.4, and Firefox &lt; 64.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18494/">CVE-2018-18494</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121207">SUSE bug 1121207</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18498</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18498" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18498" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18498" ref_url="https://www.suse.com/security/cve/CVE-2018-18498" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4236-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00069.html" source="SUSE-SU"/>
    <description>
    A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value. This leads to a possible out-of-bounds write. This vulnerability affects Thunderbird &lt; 60.4, Firefox ESR &lt; 60.4, and Firefox &lt; 64.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18498/">CVE-2018-18498</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121207">SUSE bug 1121207</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18500</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18500" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18500" ref_url="https://www.suse.com/security/cve/CVE-2018-18500" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005108.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0336-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005334.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0132-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0133-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1758-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60.5, Firefox ESR &lt; 60.5, and Firefox &lt; 65.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18500/">CVE-2018-18500</cve>
	<bugzilla href="https://bugzilla.suse.com/1122983">SUSE bug 1122983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986639">SUSE bug 986639</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18501</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18501" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18501" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18501" ref_url="https://www.suse.com/security/cve/CVE-2018-18501" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005108.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0336-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005334.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0132-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0133-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1758-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 60.5, Firefox ESR &lt; 60.5, and Firefox &lt; 65.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18501/">CVE-2018-18501</cve>
	<bugzilla href="https://bugzilla.suse.com/1122983">SUSE bug 1122983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986639">SUSE bug 986639</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18505</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18505" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18505" ref_url="https://www.suse.com/security/cve/CVE-2018-18505" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005108.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0336-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005334.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0132-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0133-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1758-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html" source="SUSE-SU"/>
    <description>
    An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the authentication not being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process. This vulnerability affects Thunderbird &lt; 60.5, Firefox ESR &lt; 60.5, and Firefox &lt; 65.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18505/">CVE-2018-18505</cve>
	<bugzilla href="https://bugzilla.suse.com/1122983">SUSE bug 1122983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986639">SUSE bug 986639</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18506</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18506" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18506" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18506" ref_url="https://www.suse.com/security/cve/CVE-2018-18506" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html" source="SUSE-SU"/>
    <description>
    When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox &lt; 65.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-18506/">CVE-2018-18506</cve>
	<bugzilla href="https://bugzilla.suse.com/1122983">SUSE bug 1122983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129821">SUSE bug 1129821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986639">SUSE bug 986639</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18508</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18508" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18508" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18508" ref_url="https://www.suse.com/security/cve/CVE-2018-18508" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00006.html" source="SUSE-SU"/>
    <description>
    In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18508/">CVE-2018-18508</cve>
	<bugzilla href="https://bugzilla.suse.com/1124571">SUSE bug 1124571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18509</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18509" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18509" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18509" ref_url="https://www.suse.com/security/cve/CVE-2018-18509" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0469-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005290.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html" source="SUSE-SU"/>
    <description>
    A flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird as having a valid digital signature, even if the shown message contents aren't covered by the signature. The flaw allows an attacker to reuse a valid S/MIME signature to craft an email message with arbitrary content. This vulnerability affects Thunderbird &lt; 60.5.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-18509/">CVE-2018-18509</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18511</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18511" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18511" ref_url="https://www.suse.com/security/cve/CVE-2018-18511" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox &lt; 65.0.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18511/">CVE-2018-18511</cve>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125396">SUSE bug 1125396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818520" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18520</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18520" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18520" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18520" ref_url="https://www.suse.com/security/cve/CVE-2018-18520" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html" source="SUSE-SU"/>
    <description>
    An Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils through v0.174. Although eu-size is intended to support ar files inside ar files, handle_ar in size.c closes the outer ar file before handling all inner entries. The vulnerability allows attackers to cause a denial of service (application crash) with a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18520/">CVE-2018-18520</cve>
	<bugzilla href="https://bugzilla.suse.com/1112726">SUSE bug 1112726</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490191" comment="elfutils-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490192" comment="elfutils-lang-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490194" comment="libasm1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490196" comment="libdw1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490197" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490199" comment="libebl-plugins-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490200" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490202" comment="libelf1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490203" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18521</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18521" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18521" ref_url="https://www.suse.com/security/cve/CVE-2018-18521" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html" source="SUSE-SU"/>
    <description>
    Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow remote attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by eu-ranlib, because a zero sh_entsize is mishandled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18521/">CVE-2018-18521</cve>
	<bugzilla href="https://bugzilla.suse.com/1112723">SUSE bug 1112723</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490191" comment="elfutils-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490192" comment="elfutils-lang-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490194" comment="libasm1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490196" comment="libdw1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490197" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490199" comment="libebl-plugins-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490200" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490202" comment="libelf1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490203" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18544</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18544" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18544" ref_url="https://www.suse.com/security/cve/CVE-2018-18544" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4023-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004938.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0739-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13923-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13993-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005256.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3824-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3827-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3839-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html" source="SUSE-SU"/>
    <description>
    There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18544/">CVE-2018-18544</cve>
	<bugzilla href="https://bugzilla.suse.com/1113064">SUSE bug 1113064</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818557" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18557</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18557" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18557" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18557" ref_url="https://www.suse.com/security/cve/CVE-2018-18557" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004890.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3911-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004897.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3947-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3948-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00050.html" source="SUSE-SU"/>
    <description>
    LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 (with JBIG enabled) decodes arbitrarily-sized JBIG into a buffer, ignoring the buffer size, which leads to a tif_jbig.c JBIGDecode out-of-bounds write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18557/">CVE-2018-18557</cve>
	<bugzilla href="https://bugzilla.suse.com/1113094">SUSE bug 1113094</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818584" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18584</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18584" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18584" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18584" ref_url="https://www.suse.com/security/cve/CVE-2018-18584" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005239.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2711-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007450.html" source="SUSE-SU"/>
    <description>
    In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18584/">CVE-2018-18584</cve>
	<bugzilla href="https://bugzilla.suse.com/1113038">SUSE bug 1113038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113039">SUSE bug 1113039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482310" comment="libmspack0-0.6-3.8.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151459" comment="libmspack0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818585" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18585</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18585" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18585" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18585" ref_url="https://www.suse.com/security/cve/CVE-2018-18585" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005239.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2711-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007450.html" source="SUSE-SU"/>
    <description>
    chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18585/">CVE-2018-18585</cve>
	<bugzilla href="https://bugzilla.suse.com/1113038">SUSE bug 1113038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113039">SUSE bug 1113039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482310" comment="libmspack0-0.6-3.8.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151459" comment="libmspack0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18586</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18586" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18586" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18586" ref_url="https://www.suse.com/security/cve/CVE-2018-18586" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0069-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013155.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0069-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IRYD4Y2CDUYSBVQUIDXTTBL6H6XYW54G/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0069-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OUTOW52AMZBWLZJOXYYD2UOLF2KPJEKX/" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pathnames in CHM files, leading to Directory Traversal. NOTE: the vendor disputes that this is a libmspack vulnerability, because chmextract.c was only intended as a source-code example, not a supported application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18586/">CVE-2018-18586</cve>
	<bugzilla href="https://bugzilla.suse.com/1113038">SUSE bug 1113038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113039">SUSE bug 1113039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113040">SUSE bug 1113040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662614" comment="libmspack-devel-0.6-3.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238457" comment="libmspack-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662615" comment="libmspack0-0.6-3.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151459" comment="libmspack0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662631" comment="libmspack0-32bit-0.6-3.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238458" comment="libmspack0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662632" comment="mspack-tools-0.6-3.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247101" comment="mspack-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818605" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18605</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18605" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18605" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18605" ref_url="https://www.suse.com/security/cve/CVE-2018-18605" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, because _bfd_add_merge_section mishandles section merges when size is not a multiple of entsize. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18605/">CVE-2018-18605</cve>
	<bugzilla href="https://bugzilla.suse.com/1113255">SUSE bug 1113255</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818606" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18606</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18606" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18606" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18606" ref_url="https://www.suse.com/security/cve/CVE-2018-18606" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18606/">CVE-2018-18606</cve>
	<bugzilla href="https://bugzilla.suse.com/1113252">SUSE bug 1113252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18607</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18607" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18607" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18607" ref_url="https://www.suse.com/security/cve/CVE-2018-18607" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18607/">CVE-2018-18607</cve>
	<bugzilla href="https://bugzilla.suse.com/1113247">SUSE bug 1113247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818661" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18661</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18661" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18661" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18661" ref_url="https://www.suse.com/security/cve/CVE-2018-18661" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004880.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004890.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3911-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004897.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3947-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3948-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00050.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif_lzw.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18661/">CVE-2018-18661</cve>
	<bugzilla href="https://bugzilla.suse.com/1113672">SUSE bug 1113672</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18836</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18836" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18836" ref_url="https://www.suse.com/security/cve/CVE-2018-18836" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0647-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7QJRCOF3ZVZ6YHKSI4ITV4ND423PKJLT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0730-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5FAP6JAFARKZJ5UHCVX7ILV3IJZVIGVG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1603-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/B3RB4W3NEKHZUPUSNCSRLXDVEK64S5SL/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-18836/">CVE-2018-18836</cve>
	<bugzilla href="https://bugzilla.suse.com/1139094">SUSE bug 1139094</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009660319" comment="netdata-1.31.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009353393" comment="netdata is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18837</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18837" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18837" ref_url="https://www.suse.com/security/cve/CVE-2018-18837" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0647-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7QJRCOF3ZVZ6YHKSI4ITV4ND423PKJLT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0730-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5FAP6JAFARKZJ5UHCVX7ILV3IJZVIGVG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1603-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/B3RB4W3NEKHZUPUSNCSRLXDVEK64S5SL/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-18837/">CVE-2018-18837</cve>
	<bugzilla href="https://bugzilla.suse.com/1139095">SUSE bug 1139095</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009660319" comment="netdata-1.31.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009353393" comment="netdata is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18838</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18838" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18838" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18838" ref_url="https://www.suse.com/security/cve/CVE-2018-18838" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0647-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7QJRCOF3ZVZ6YHKSI4ITV4ND423PKJLT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0730-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5FAP6JAFARKZJ5UHCVX7ILV3IJZVIGVG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1603-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/B3RB4W3NEKHZUPUSNCSRLXDVEK64S5SL/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-18838/">CVE-2018-18838</cve>
	<bugzilla href="https://bugzilla.suse.com/1139098">SUSE bug 1139098</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009660319" comment="netdata-1.31.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009353393" comment="netdata is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18839</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18839" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18839" ref_url="https://www.suse.com/security/cve/CVE-2018-18839" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0647-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7QJRCOF3ZVZ6YHKSI4ITV4ND423PKJLT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0730-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5FAP6JAFARKZJ5UHCVX7ILV3IJZVIGVG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1603-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/B3RB4W3NEKHZUPUSNCSRLXDVEK64S5SL/" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18839/">CVE-2018-18839</cve>
	<bugzilla href="https://bugzilla.suse.com/1144517">SUSE bug 1144517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009660319" comment="netdata-1.31.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009353393" comment="netdata is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818849" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18849</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18849" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18849" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18849" ref_url="https://www.suse.com/security/cve/CVE-2018-18849" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004891.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3973-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183973-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3973-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005395.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3975-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183975-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3987-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4070-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0020-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13921-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913921-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14011-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005287.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4004-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00043.html" source="SUSE-SU"/>
    <description>
    In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-18849/">CVE-2018-18849</cve>
	<bugzilla href="https://bugzilla.suse.com/1114422">SUSE bug 1114422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114423">SUSE bug 1114423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818873" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18873</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18873" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18873" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18873" ref_url="https://www.suse.com/security/cve/CVE-2018-18873" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18873/">CVE-2018-18873</cve>
	<bugzilla href="https://bugzilla.suse.com/1114495">SUSE bug 1114495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114498">SUSE bug 1114498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818883" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18883</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18883" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18883" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18883" ref_url="https://www.suse.com/security/cve/CVE-2018-18883" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4070-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00073.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service (NULL pointer dereference) or possibly have unspecified other impact because nested VT-x is not properly restricted.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-18883/">CVE-2018-18883</cve>
	<bugzilla href="https://bugzilla.suse.com/1114405">SUSE bug 1114405</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818897" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18897</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18897" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18897" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18897" ref_url="https://www.suse.com/security/cve/CVE-2018-18897" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18897/">CVE-2018-18897</cve>
	<bugzilla href="https://bugzilla.suse.com/1114966">SUSE bug 1114966</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201818915" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-18915</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-18915" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18915" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-18915" ref_url="https://www.suse.com/security/cve/CVE-2018-18915" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3598-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-October/025597.html" source="SUSE-SU"/>
    <description>
    There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-18"/>
	<updated date="2022-10-18"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18915/">CVE-2018-18915</cve>
	<bugzilla href="https://bugzilla.suse.com/1114690">SUSE bug 1114690</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716317" comment="exiv2-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716318" comment="exiv2-lang-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716207" comment="libexiv2-26-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716319" comment="libexiv2-26-32bit-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716208" comment="libexiv2-devel-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716320" comment="libexiv2-doc-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819058" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19058</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19058" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19058" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19058" ref_url="https://www.suse.com/security/cve/CVE-2018-19058" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19058/">CVE-2018-19058</cve>
	<bugzilla href="https://bugzilla.suse.com/1115187">SUSE bug 1115187</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819059" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19059</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19059" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19059" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19059" ref_url="https://www.suse.com/security/cve/CVE-2018-19059" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in FileSpec.cc, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating embedded files before save attempts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19059/">CVE-2018-19059</cve>
	<bugzilla href="https://bugzilla.suse.com/1115186">SUSE bug 1115186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819060" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19060</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19060" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19060" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19060" ref_url="https://www.suse.com/security/cve/CVE-2018-19060" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file before constructing a save path.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19060/">CVE-2018-19060</cve>
	<bugzilla href="https://bugzilla.suse.com/1115185">SUSE bug 1115185</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19108</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19108" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19108" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19108" ref_url="https://www.suse.com/security/cve/CVE-2018-19108" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006676.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html" source="SUSE-SU"/>
    <description>
    In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) caused by an integer overflow via a crafted PSD image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19108/">CVE-2018-19108</cve>
	<bugzilla href="https://bugzilla.suse.com/1115364">SUSE bug 1115364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19139</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19139" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19139" ref_url="https://www.suse.com/security/cve/CVE-2018-19139" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19139/">CVE-2018-19139</cve>
	<bugzilla href="https://bugzilla.suse.com/1115637">SUSE bug 1115637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819149" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19149</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19149" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19149" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19149" ref_url="https://www.suse.com/security/cve/CVE-2018-19149" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19149/">CVE-2018-19149</cve>
	<bugzilla href="https://bugzilla.suse.com/1115626">SUSE bug 1115626</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19208</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19208" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19208" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19208" ref_url="https://www.suse.com/security/cve/CVE-2018-19208" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3812-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004939.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3870-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004879.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3886-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00042.html" source="SUSE-SU"/>
    <description>
    In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack. This is related to WPXTable.h.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19208/">CVE-2018-19208</cve>
	<bugzilla href="https://bugzilla.suse.com/1115713">SUSE bug 1115713</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489168" comment="libwpd-0_10-10-0.10.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166617" comment="libwpd-0_10-10 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19210</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19210" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19210" ref_url="https://www.suse.com/security/cve/CVE-2018-19210" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005260.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00041.html" source="SUSE-SU"/>
    <description>
    In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a denial of service attack, as demonstrated by tiffset.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19210/">CVE-2018-19210</cve>
	<bugzilla href="https://bugzilla.suse.com/1108606">SUSE bug 1108606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115717">SUSE bug 1115717</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19211</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19211" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19211" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19211" ref_url="https://www.suse.com/security/cve/CVE-2018-19211" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3967-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183967-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004929.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4034-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00022.html" source="SUSE-SU"/>
    <description>
    In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious character `*' in name or alias field" detection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19211/">CVE-2018-19211</cve>
	<bugzilla href="https://bugzilla.suse.com/1115929">SUSE bug 1115929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131830">SUSE bug 1131830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482311" comment="libncurses6-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158858" comment="libncurses6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482314" comment="ncurses-utils-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158863" comment="ncurses-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482316" comment="terminfo-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158865" comment="terminfo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482317" comment="terminfo-base-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158866" comment="terminfo-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482318" comment="terminfo-iterm-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009241511" comment="terminfo-iterm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482319" comment="terminfo-screen-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009241512" comment="terminfo-screen is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19387</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19387" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19387" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19387" ref_url="https://www.suse.com/security/cve/CVE-2018-19387" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00020.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2018-19387/">CVE-2018-19387</cve>
	<bugzilla href="https://bugzilla.suse.com/1116887">SUSE bug 1116887</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694920" comment="tmux-3.1c-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009298611" comment="tmux is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819409" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19409</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19409" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19409" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19409" ref_url="https://www.suse.com/security/cve/CVE-2018-19409" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4090-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005397.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00038.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device is used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19409/">CVE-2018-19409</cve>
	<bugzilla href="https://bugzilla.suse.com/1108027">SUSE bug 1108027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109105">SUSE bug 1109105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111479">SUSE bug 1111479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111480">SUSE bug 1111480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112229">SUSE bug 1112229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117022">SUSE bug 1117022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117331">SUSE bug 1117331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118455">SUSE bug 1118455</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819432" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19432</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19432" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19432" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19432" ref_url="https://www.suse.com/security/cve/CVE-2018-19432" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009301.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VGFWRIIXBFCLA7GINXJUPUD7YVYB5UKO/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2764-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y7PPP2MGW6YG46U25HVAXKQBMB2PV4XV/" source="SUSE-SU"/>
    <description>
    An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sf_write_int in sndfile.c, which will lead to a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-19432/">CVE-2018-19432</cve>
	<bugzilla href="https://bugzilla.suse.com/1116993">SUSE bug 1116993</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626824" comment="libsndfile-devel-1.0.28-5.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626879" comment="libsndfile-progs-1.0.28-5.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152565" comment="libsndfile-progs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626825" comment="libsndfile1-1.0.28-5.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626848" comment="libsndfile1-32bit-1.0.28-5.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19475</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19475" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19475" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19475" ref_url="https://www.suse.com/security/cve/CVE-2018-19475" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4090-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005397.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00038.html" source="SUSE-SU"/>
    <description>
    psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because available stack space is not checked when the device remains the same.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19475/">CVE-2018-19475</cve>
	<bugzilla href="https://bugzilla.suse.com/1117327">SUSE bug 1117327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117331">SUSE bug 1117331</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19476</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19476" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19476" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19476" ref_url="https://www.suse.com/security/cve/CVE-2018-19476" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4090-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005397.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00038.html" source="SUSE-SU"/>
    <description>
    psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a setcolorspace type confusion.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19476/">CVE-2018-19476</cve>
	<bugzilla href="https://bugzilla.suse.com/1117313">SUSE bug 1117313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117331">SUSE bug 1117331</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19477</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19477" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19477" ref_url="https://www.suse.com/security/cve/CVE-2018-19477" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4090-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005397.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00038.html" source="SUSE-SU"/>
    <description>
    psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19477/">CVE-2018-19477</cve>
	<bugzilla href="https://bugzilla.suse.com/1117274">SUSE bug 1117274</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117331">SUSE bug 1117331</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19539</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19539" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19539" ref_url="https://www.suse.com/security/cve/CVE-2018-19539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005977.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1315-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00004.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19539/">CVE-2018-19539</cve>
	<bugzilla href="https://bugzilla.suse.com/1117511">SUSE bug 1117511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19540</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19540" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19540" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19540" ref_url="https://www.suse.com/security/cve/CVE-2018-19540" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005977.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2282-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00023.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer overflow of size 1 in the function jas_icctxtdesc_input in libjasper/base/jas_icc.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-19540/">CVE-2018-19540</cve>
	<bugzilla href="https://bugzilla.suse.com/1117508">SUSE bug 1117508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19541</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19541" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19541" ref_url="https://www.suse.com/security/cve/CVE-2018-19541" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005977.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2282-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00023.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer over-read of size 8 in the function jas_image_depalettize in libjasper/base/jas_image.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19541/">CVE-2018-19541</cve>
	<bugzilla href="https://bugzilla.suse.com/1117507">SUSE bug 1117507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119411">SUSE bug 1119411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19542</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19542" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19542" ref_url="https://www.suse.com/security/cve/CVE-2018-19542" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005977.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1315-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00004.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19542/">CVE-2018-19542</cve>
	<bugzilla href="https://bugzilla.suse.com/1117505">SUSE bug 1117505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117507">SUSE bug 1117507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19543</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19543" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19543" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19543" ref_url="https://www.suse.com/security/cve/CVE-2018-19543" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19543/">CVE-2018-19543</cve>
	<bugzilla href="https://bugzilla.suse.com/1045450">SUSE bug 1045450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117328">SUSE bug 1117328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117507">SUSE bug 1117507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819565" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19565</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19565" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19565" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19565" ref_url="https://www.suse.com/security/cve/CVE-2018-19565" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011101.html" source="SUSE-SU"/>
    <description>
    A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19565/">CVE-2018-19565</cve>
	<bugzilla href="https://bugzilla.suse.com/1117622">SUSE bug 1117622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679588" comment="dcraw-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680722" comment="dcraw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679589" comment="dcraw-lang-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680723" comment="dcraw-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819566" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19566</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19566" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19566" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19566" ref_url="https://www.suse.com/security/cve/CVE-2018-19566" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011101.html" source="SUSE-SU"/>
    <description>
    A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19566/">CVE-2018-19566</cve>
	<bugzilla href="https://bugzilla.suse.com/1117517">SUSE bug 1117517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679588" comment="dcraw-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680722" comment="dcraw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679589" comment="dcraw-lang-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680723" comment="dcraw-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19567</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19567" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19567" ref_url="https://www.suse.com/security/cve/CVE-2018-19567" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011101.html" source="SUSE-SU"/>
    <description>
    A floating point exception in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19567/">CVE-2018-19567</cve>
	<bugzilla href="https://bugzilla.suse.com/1117512">SUSE bug 1117512</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679588" comment="dcraw-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680722" comment="dcraw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679589" comment="dcraw-lang-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680723" comment="dcraw-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19568</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19568" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19568" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19568" ref_url="https://www.suse.com/security/cve/CVE-2018-19568" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011101.html" source="SUSE-SU"/>
    <description>
    A floating point exception in kodak_radc_load_raw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19568/">CVE-2018-19568</cve>
	<bugzilla href="https://bugzilla.suse.com/1117436">SUSE bug 1117436</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679588" comment="dcraw-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680722" comment="dcraw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679589" comment="dcraw-lang-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680723" comment="dcraw-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19607</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19607" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19607" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19607" ref_url="https://www.suse.com/security/cve/CVE-2018-19607" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006676.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html" source="SUSE-SU"/>
    <description>
    Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19607/">CVE-2018-19607</cve>
	<bugzilla href="https://bugzilla.suse.com/1117513">SUSE bug 1117513</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19655</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19655" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19655" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19655" ref_url="https://www.suse.com/security/cve/CVE-2018-19655" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011101.html" source="SUSE-SU"/>
    <description>
    A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19655/">CVE-2018-19655</cve>
	<bugzilla href="https://bugzilla.suse.com/1117896">SUSE bug 1117896</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679588" comment="dcraw-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680722" comment="dcraw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679589" comment="dcraw-lang-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680723" comment="dcraw-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19758</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19758" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19758" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19758" ref_url="https://www.suse.com/security/cve/CVE-2018-19758" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005286.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009301.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VGFWRIIXBFCLA7GINXJUPUD7YVYB5UKO/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2764-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y7PPP2MGW6YG46U25HVAXKQBMB2PV4XV/" source="SUSE-SU"/>
    <description>
    There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19758/">CVE-2018-19758</cve>
	<bugzilla href="https://bugzilla.suse.com/1117954">SUSE bug 1117954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125575">SUSE bug 1125575</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626824" comment="libsndfile-devel-1.0.28-5.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626879" comment="libsndfile-progs-1.0.28-5.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152565" comment="libsndfile-progs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626825" comment="libsndfile1-1.0.28-5.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626848" comment="libsndfile1-32bit-1.0.28-5.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19787</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19787" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19787" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19787" ref_url="https://www.suse.com/security/cve/CVE-2018-19787" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:504-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0895-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0803-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CXPBEANDVGCE6ASRYRQYWM4CLYAJ6TAE/" source="SUSE-SU"/>
    <description>
    An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-19787/">CVE-2018-19787</cve>
	<bugzilla href="https://bugzilla.suse.com/1118088">SUSE bug 1118088</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667470" comment="python2-lxml-4.7.1-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673479" comment="python2-lxml is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667471" comment="python2-lxml-devel-4.7.1-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673480" comment="python2-lxml-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667411" comment="python3-lxml-4.7.1-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673481" comment="python3-lxml is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667412" comment="python3-lxml-devel-4.7.1-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673482" comment="python3-lxml-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19788</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19788" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19788" ref_url="https://www.suse.com/security/cve/CVE-2018-19788" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0019-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0019-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005371.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4282-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00004.html" source="SUSE-SU"/>
    <description>
    A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19788/">CVE-2018-19788</cve>
	<bugzilla href="https://bugzilla.suse.com/1118274">SUSE bug 1118274</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118277">SUSE bug 1118277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119056">SUSE bug 1119056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482356" comment="libpolkit0-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151393" comment="libpolkit0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482357" comment="polkit-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151394" comment="polkit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482359" comment="typelib-1_0-Polkit-1_0-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151396" comment="typelib-1_0-Polkit-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19840</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19840" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19840" ref_url="https://www.suse.com/security/cve/CVE-2018-19840" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005253.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1145-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0153-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EK4DH6BBB2WPBM677O7MFUOO5UBKUW37/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0154-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FD5IPNZ6LGJLORJOQVT3MAHBWF3ORQPT/" source="SUSE-SU"/>
    <description>
    The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (resource exhaustion caused by an infinite loop) via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19840/">CVE-2018-19840</cve>
	<bugzilla href="https://bugzilla.suse.com/1120930">SUSE bug 1120930</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628918" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172747" comment="libwavpack1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19841</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19841" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19841" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19841" ref_url="https://www.suse.com/security/cve/CVE-2018-19841" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005253.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1145-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0153-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EK4DH6BBB2WPBM677O7MFUOO5UBKUW37/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0154-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FD5IPNZ6LGJLORJOQVT3MAHBWF3ORQPT/" source="SUSE-SU"/>
    <description>
    The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (out-of-bounds read and application crash) via a crafted WavPack Lossless Audio file, as demonstrated by wvunpack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19841/">CVE-2018-19841</cve>
	<bugzilla href="https://bugzilla.suse.com/1120929">SUSE bug 1120929</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628918" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172747" comment="libwavpack1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819857" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19857</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19857" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19857" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19857" ref_url="https://www.suse.com/security/cve/CVE-2018-19857" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html" source="SUSE-SU"/>
    <description>
    The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk() cast converts a return value to an unsigned int even if that value is negative. This could result in a denial of service and/or a potential infoleak.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19857/">CVE-2018-19857</cve>
	<bugzilla href="https://bugzilla.suse.com/1118586">SUSE bug 1118586</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819931" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19931</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19931" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19931" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19931" ref_url="https://www.suse.com/security/cve/CVE-2018-19931" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h because the number of program headers is not restricted.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19931/">CVE-2018-19931</cve>
	<bugzilla href="https://bugzilla.suse.com/1118830">SUSE bug 1118830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118831">SUSE bug 1118831</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819932" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19932</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19932" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19932" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19932" ref_url="https://www.suse.com/security/cve/CVE-2018-19932" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA macro in elf.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19932/">CVE-2018-19932</cve>
	<bugzilla href="https://bugzilla.suse.com/1118830">SUSE bug 1118830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118831">SUSE bug 1118831</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19935</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19935" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19935" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19935" ref_url="https://www.suse.com/security/cve/CVE-2018-19935" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html" source="SUSE-SU"/>
    <description>
    ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty string in the message argument to the imap_mail function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19935/">CVE-2018-19935</cve>
	<bugzilla href="https://bugzilla.suse.com/1118832">SUSE bug 1118832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19961</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19961" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19961" ref_url="https://www.suse.com/security/cve/CVE-2018-19961" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4070-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0020-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13921-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913921-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14011-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005287.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19961/">CVE-2018-19961</cve>
	<bugzilla href="https://bugzilla.suse.com/1115040">SUSE bug 1115040</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19962</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19962" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19962" ref_url="https://www.suse.com/security/cve/CVE-2018-19962" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4070-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0020-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13921-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913921-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14011-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005287.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19962/">CVE-2018-19962</cve>
	<bugzilla href="https://bugzilla.suse.com/1115040">SUSE bug 1115040</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819963" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19963</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19963" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19963" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19963" ref_url="https://www.suse.com/security/cve/CVE-2018-19963" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005011.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen 4.11 allowing HVM guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because x86 IOREQ server resource accounting (for external emulators) was mishandled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19963/">CVE-2018-19963</cve>
	<bugzilla href="https://bugzilla.suse.com/1115043">SUSE bug 1115043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19964</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19964" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19964" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19964" ref_url="https://www.suse.com/security/cve/CVE-2018-19964" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005011.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen 4.11.x allowing x86 guest OS users to cause a denial of service (host OS hang) because the p2m lock remains unavailable indefinitely in certain error conditions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19964/">CVE-2018-19964</cve>
	<bugzilla href="https://bugzilla.suse.com/1115044">SUSE bug 1115044</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19965</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19965" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19965" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19965" ref_url="https://www.suse.com/security/cve/CVE-2018-19965" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4070-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0020-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13921-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913921-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14011-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006485.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-5754 (aka Meltdown) mitigation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19965/">CVE-2018-19965</cve>
	<bugzilla href="https://bugzilla.suse.com/1115045">SUSE bug 1115045</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19966</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19966" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19966" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19966" ref_url="https://www.suse.com/security/cve/CVE-2018-19966" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4070-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0020-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13921-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913921-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14011-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005287.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because of an interpretation conflict for a union data structure associated with shadow paging. NOTE: this issue exists because of an incorrect fix for CVE-2017-15595.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-19966/">CVE-2018-19966</cve>
	<bugzilla href="https://bugzilla.suse.com/1115047">SUSE bug 1115047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201819967" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-19967</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-19967" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19967" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-19967" ref_url="https://www.suse.com/security/cve/CVE-2018-19967" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005320.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13921-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913921-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14011-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005287.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1199-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.11.x on Intel x86 platforms allowing guest OS users to cause a denial of service (host OS hang) because Xen does not work around Intel's mishandling of certain HLE transactions associated with the KACQUIRE instruction prefix.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19967/">CVE-2018-19967</cve>
	<bugzilla href="https://bugzilla.suse.com/1114988">SUSE bug 1114988</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181999010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1999010</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1999010" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999010" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1999010" ref_url="https://www.suse.com/security/cve/CVE-2018-1999010" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004405.html" source="SUSE-SU"/>
    <description>
    FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in cced03dd667a5df6df8fd40d8de0bff477ee02e8 and later.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999010/">CVE-2018-1999010</cve>
	<bugzilla href="https://bugzilla.suse.com/1102899">SUSE bug 1102899</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181999011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1999011</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1999011" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999011" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1999011" ref_url="https://www.suse.com/security/cve/CVE-2018-1999011" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004405.html" source="SUSE-SU"/>
    <description>
    FFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow vulnerability in asf_o format demuxer that can result in heap-buffer-overflow that may result in remote code execution. This attack appears to be exploitable via specially crafted ASF file that has to be provided as input to FFmpeg. This vulnerability appears to have been fixed in 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 and later.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999011/">CVE-2018-1999011</cve>
	<bugzilla href="https://bugzilla.suse.com/1102689">SUSE bug 1102689</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181999012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1999012</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1999012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999012" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1999012" ref_url="https://www.suse.com/security/cve/CVE-2018-1999012" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004405.html" source="SUSE-SU"/>
    <description>
    FFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop vulnerability in pva format demuxer that can result in a Vulnerability that allows attackers to consume excessive amount of resources like CPU and RAM. This attack appear to be exploitable via specially crafted PVA file has to be provided as input. This vulnerability appears to have been fixed in 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 and later.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999012/">CVE-2018-1999012</cve>
	<bugzilla href="https://bugzilla.suse.com/1102688">SUSE bug 1102688</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181999013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1999013</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-1999013" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1999013" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-1999013" ref_url="https://www.suse.com/security/cve/CVE-2018-1999013" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004405.html" source="SUSE-SU"/>
    <description>
    FFmpeg before commit a7e032a277452366771951e29fd0bf2bd5c029f0 contains a use-after-free vulnerability in the realmedia demuxer that can result in vulnerability allows attacker to read heap memory. This attack appear to be exploitable via specially crafted RM file has to be provided as input. This vulnerability appears to have been fixed in a7e032a277452366771951e29fd0bf2bd5c029f0 and later.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999013/">CVE-2018-1999013</cve>
	<bugzilla href="https://bugzilla.suse.com/1102687">SUSE bug 1102687</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20019</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20019" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20019" ref_url="https://www.suse.com/security/cve/CVE-2018-20019" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0060-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00021.html" source="SUSE-SU"/>
    <description>
    LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code that can result remote code execution
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20019/">CVE-2018-20019</cve>
	<bugzilla href="https://bugzilla.suse.com/1120118">SUSE bug 1120118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123823">SUSE bug 1123823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155442">SUSE bug 1155442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20020</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20020" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20020" ref_url="https://www.suse.com/security/cve/CVE-2018-20020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0060-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00021.html" source="SUSE-SU"/>
    <description>
    LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write vulnerability inside structure in VNC client code that can result remote code execution
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20020/">CVE-2018-20020</cve>
	<bugzilla href="https://bugzilla.suse.com/1120116">SUSE bug 1120116</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155472">SUSE bug 1155472</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20021</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20021" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20021" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20021" ref_url="https://www.suse.com/security/cve/CVE-2018-20021" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0060-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00021.html" source="SUSE-SU"/>
    <description>
    LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code. Vulnerability allows attacker to consume excessive amount of resources like CPU and RAM
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20021/">CVE-2018-20021</cve>
	<bugzilla href="https://bugzilla.suse.com/1120122">SUSE bug 1120122</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20022</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20022" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20022" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20022" ref_url="https://www.suse.com/security/cve/CVE-2018-20022" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0060-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00021.html" source="SUSE-SU"/>
    <description>
    LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC client code that allows attacker to read stack memory and can be abuse for information disclosure. Combined with another vulnerability, it can be used to leak stack memory layout and in bypassing ASLR
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20022/">CVE-2018-20022</cve>
	<bugzilla href="https://bugzilla.suse.com/1120120">SUSE bug 1120120</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820023" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20023</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20023" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20023" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20023" ref_url="https://www.suse.com/security/cve/CVE-2018-20023" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0060-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00021.html" source="SUSE-SU"/>
    <description>
    LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC Repeater client code that allows attacker to read stack memory and can be abuse for information disclosure. Combined with another vulnerability, it can be used to leak stack memory layout and in bypassing ASLR
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20023/">CVE-2018-20023</cve>
	<bugzilla href="https://bugzilla.suse.com/1120119">SUSE bug 1120119</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20024</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20024" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20024" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20024" ref_url="https://www.suse.com/security/cve/CVE-2018-20024" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0060-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00021.html" source="SUSE-SU"/>
    <description>
    LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that can result DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20024/">CVE-2018-20024</cve>
	<bugzilla href="https://bugzilla.suse.com/1120121">SUSE bug 1120121</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20030</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20030" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20030" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20030" ref_url="https://www.suse.com/security/cve/CVE-2018-20030" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0457-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006538.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007105.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0264-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html" source="SUSE-SU"/>
    <description>
    An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20030/">CVE-2018-20030</cve>
	<bugzilla href="https://bugzilla.suse.com/1120943">SUSE bug 1120943</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629201" comment="libexif12-0.6.22-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820060" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20060</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20060" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20060" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20060" ref_url="https://www.suse.com/security/cve/CVE-2018-20060" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005880.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005892.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2370-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192370-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2399-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005931.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended hosts or transmitted in cleartext.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-28"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.6/CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20060/">CVE-2018-20060</cve>
	<bugzilla href="https://bugzilla.suse.com/1119376">SUSE bug 1119376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629005" comment="python3-urllib3-1.25.10-2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177231" comment="python3-urllib3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20073</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20073" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20073" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20073" ref_url="https://www.suse.com/security/cve/CVE-2018-20073" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1815-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00057.html" source="SUSE-SU"/>
    <description>
    Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20073/">CVE-2018-20073</cve>
	<bugzilla href="https://bugzilla.suse.com/1120892">SUSE bug 1120892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20097</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20097" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20097" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20097" ref_url="https://www.suse.com/security/cve/CVE-2018-20097" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:4208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013143.html" source="SUSE-SU"/>
    <description>
    There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-30"/>
	<updated date="2022-11-30"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20097/">CVE-2018-20097</cve>
	<bugzilla href="https://bugzilla.suse.com/1119562">SUSE bug 1119562</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725422" comment="exiv2-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725423" comment="exiv2-lang-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725374" comment="libexiv2-26-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725424" comment="libexiv2-26-32bit-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725375" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725425" comment="libexiv2-doc-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20098</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20098" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20098" ref_url="https://www.suse.com/security/cve/CVE-2018-20098" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:4208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013143.html" source="SUSE-SU"/>
    <description>
    There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-30"/>
	<updated date="2022-11-30"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20098/">CVE-2018-20098</cve>
	<bugzilla href="https://bugzilla.suse.com/1119560">SUSE bug 1119560</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725422" comment="exiv2-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725423" comment="exiv2-lang-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725374" comment="libexiv2-26-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725424" comment="libexiv2-26-32bit-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725375" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725425" comment="libexiv2-doc-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20099</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20099" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20099" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20099" ref_url="https://www.suse.com/security/cve/CVE-2018-20099" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:4208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013143.html" source="SUSE-SU"/>
    <description>
    There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-30"/>
	<updated date="2022-11-30"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20099/">CVE-2018-20099</cve>
	<bugzilla href="https://bugzilla.suse.com/1119559">SUSE bug 1119559</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725422" comment="exiv2-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725423" comment="exiv2-lang-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725374" comment="libexiv2-26-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725424" comment="libexiv2-26-32bit-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725375" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725425" comment="libexiv2-doc-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820123" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20123</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20123" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20123" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20123" ref_url="https://www.suse.com/security/cve/CVE-2018-20123" source="SUSE CVE"/>
    <description>
    pvrdma_realize in hw/rdma/vmw/pvrdma_main.c in QEMU has a Memory leak after an initialisation error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20123/">CVE-2018-20123</cve>
	<bugzilla href="https://bugzilla.suse.com/1119437">SUSE bug 1119437</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119438">SUSE bug 1119438</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820124" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20124</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20124" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20124" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20124" ref_url="https://www.suse.com/security/cve/CVE-2018-20124" source="SUSE CVE"/>
    <description>
    hw/rdma/rdma_backend.c in QEMU allows guest OS users to trigger out-of-bounds access via a PvrdmaSqWqe ring element with a large num_sge value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20124/">CVE-2018-20124</cve>
	<bugzilla href="https://bugzilla.suse.com/1119840">SUSE bug 1119840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119841">SUSE bug 1119841</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20125</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20125" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20125" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20125" ref_url="https://www.suse.com/security/cve/CVE-2018-20125" source="SUSE CVE"/>
    <description>
    hw/rdma/vmw/pvrdma_cmd.c in QEMU allows attackers to cause a denial of service (NULL pointer dereference or excessive memory allocation) in create_cq_ring or create_qp_rings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20125/">CVE-2018-20125</cve>
	<bugzilla href="https://bugzilla.suse.com/1119989">SUSE bug 1119989</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20126" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20126" ref_url="https://www.suse.com/security/cve/CVE-2018-20126" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2955-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192955-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006129.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00034.html" source="SUSE-SU"/>
    <description>
    hw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory leaks because errors are mishandled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20126/">CVE-2018-20126</cve>
	<bugzilla href="https://bugzilla.suse.com/1119991">SUSE bug 1119991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20191</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20191" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20191" ref_url="https://www.suse.com/security/cve/CVE-2018-20191" source="SUSE CVE"/>
    <description>
    hw/rdma/vmw/pvrdma_main.c in QEMU does not implement a read operation (such as uar_read by analogy to uar_write), which allows attackers to cause a denial of service (NULL pointer dereference).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20191/">CVE-2018-20191</cve>
	<bugzilla href="https://bugzilla.suse.com/1119979">SUSE bug 1119979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119980">SUSE bug 1119980</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20216</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20216" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20216" ref_url="https://www.suse.com/security/cve/CVE-2018-20216" source="SUSE CVE"/>
    <description>
    QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishandled).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20216/">CVE-2018-20216</cve>
	<bugzilla href="https://bugzilla.suse.com/1119984">SUSE bug 1119984</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119985">SUSE bug 1119985</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20217</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20217" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20217" ref_url="https://www.suse.com/security/cve/CVE-2018-20217" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0113-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005342.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0063-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0085-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00033.html" source="SUSE-SU"/>
    <description>
    A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20217/">CVE-2018-20217</cve>
	<bugzilla href="https://bugzilla.suse.com/1120489">SUSE bug 1120489</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820337" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20337</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20337" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20337" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20337" ref_url="https://www.suse.com/security/cve/CVE-2018-20337" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00045.html" source="SUSE-SU"/>
    <description>
    There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20337/">CVE-2018-20337</cve>
	<bugzilla href="https://bugzilla.suse.com/1120519">SUSE bug 1120519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820340" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20340</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20340" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20340" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20340" ref_url="https://www.suse.com/security/cve/CVE-2018-20340" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005500.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005663.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1755-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008817.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0199-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1475-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0799-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QRDOETNQVM5LVLJRZMNGQEBNRFW4ZWEV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1755-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W6NOI7O3I53SFL6DVLZH5VWF6EO4AISA/" source="SUSE-SU"/>
    <description>
    Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this to attempt to execute malicious code using a crafted USB device masquerading as a security token on a computer where the affected library is currently in use. It is not possible to perform this attack with a genuine YubiKey.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20340/">CVE-2018-20340</cve>
	<bugzilla href="https://bugzilla.suse.com/1124781">SUSE bug 1124781</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493942" comment="libu2f-host-devel-1.1.10-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244552" comment="libu2f-host-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625260" comment="libu2f-host-doc-1.1.10-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244553" comment="libu2f-host-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493943" comment="libu2f-host0-1.1.10-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244554" comment="libu2f-host0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493944" comment="u2f-host-1.1.10-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244555" comment="u2f-host is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820346" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20346</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20346" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20346" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20346" ref_url="https://www.suse.com/security/cve/CVE-2018-20346" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0788-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190788-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0973-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005281.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1159-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00070.html" source="SUSE-SU"/>
    <description>
    SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20346/">CVE-2018-20346</cve>
	<bugzilla href="https://bugzilla.suse.com/1119687">SUSE bug 1119687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120335">SUSE bug 1120335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131576">SUSE bug 1131576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131918">SUSE bug 1131918</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131919">SUSE bug 1131919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148893">SUSE bug 1148893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169664">SUSE bug 1169664</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482404" comment="libsqlite3-0-3.28.0-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482406" comment="sqlite3-3.28.0-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20363</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20363" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20363" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20363" ref_url="https://www.suse.com/security/cve/CVE-2018-20363" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0127-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00045.html" source="SUSE-SU"/>
    <description>
    LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20363/">CVE-2018-20363</cve>
	<bugzilla href="https://bugzilla.suse.com/1120498">SUSE bug 1120498</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20364</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20364" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20364" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20364" ref_url="https://www.suse.com/security/cve/CVE-2018-20364" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0127-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00045.html" source="SUSE-SU"/>
    <description>
    LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20364/">CVE-2018-20364</cve>
	<bugzilla href="https://bugzilla.suse.com/1120499">SUSE bug 1120499</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20365</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20365" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20365" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20365" ref_url="https://www.suse.com/security/cve/CVE-2018-20365" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0127-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00045.html" source="SUSE-SU"/>
    <description>
    LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-20365/">CVE-2018-20365</cve>
	<bugzilla href="https://bugzilla.suse.com/1120498">SUSE bug 1120498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120499">SUSE bug 1120499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120500">SUSE bug 1120500</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820406" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20406</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20406" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20406" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20406" ref_url="https://www.suse.com/security/cve/CVE-2018-20406" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0243-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005394.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during a "resize to twice the size" attempt. This issue might cause memory exhaustion, but is only relevant if the pickle format is used for serializing tens or hundreds of gigabytes of data. This issue is fixed in: v3.4.10, v3.4.10rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.7rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.7, v3.6.7rc1, v3.6.7rc2, v3.6.8, v3.6.8rc1, v3.6.9, v3.6.9rc1; v3.7.1, v3.7.1rc1, v3.7.1rc2, v3.7.2, v3.7.2rc1, v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20406/">CVE-2018-20406</cve>
	<bugzilla href="https://bugzilla.suse.com/1120644">SUSE bug 1120644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20467</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20467" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20467" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20467" ref_url="https://www.suse.com/security/cve/CVE-2018-20467" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0739-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13993-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13995-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005265.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0016-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html" source="SUSE-SU"/>
    <description>
    In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20467/">CVE-2018-20467</cve>
	<bugzilla href="https://bugzilla.suse.com/1120381">SUSE bug 1120381</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820481" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20481</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20481" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20481" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20481" ref_url="https://www.suse.com/security/cve/CVE-2018-20481" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PDF document, when XRefEntry::setFlag in XRef.h is called from Parser::makeStream in Parser.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20481/">CVE-2018-20481</cve>
	<bugzilla href="https://bugzilla.suse.com/1120495">SUSE bug 1120495</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20482</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20482" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20482" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20482" ref_url="https://www.suse.com/security/cve/CVE-2018-20482" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:632-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:633-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0926-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005322.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006107.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007506.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010950.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1237-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00077.html" source="SUSE-SU"/>
    <description>
    GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different user's process (e.g., a system backup running as root).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20482/">CVE-2018-20482</cve>
	<bugzilla href="https://bugzilla.suse.com/1120610">SUSE bug 1120610</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494279" comment="tar-1.30-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151391" comment="tar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679584" comment="tar-backup-scripts-1.34-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153774" comment="tar-backup-scripts is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679585" comment="tar-doc-1.34-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251575" comment="tar-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494280" comment="tar-lang-1.30-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151392" comment="tar-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494281" comment="tar-rmt-1.30-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177166" comment="tar-rmt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679586" comment="tar-tests-1.34-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153775" comment="tar-tests is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20483</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20483" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20483" ref_url="https://www.suse.com/security/cve/CVE-2018-20483" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00020.html" source="SUSE-SU"/>
    <description>
    set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20483/">CVE-2018-20483</cve>
	<bugzilla href="https://bugzilla.suse.com/1120382">SUSE bug 1120382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482565" comment="wget-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694929" comment="wget-lang-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695522" comment="wget-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20532</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20532" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20532" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20532" ref_url="https://www.suse.com/security/cve/CVE-2018-20532" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005763.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2265-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192265-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2660-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007438.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1927-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00057.html" source="SUSE-SU"/>
    <description>
    There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20532/">CVE-2018-20532</cve>
	<bugzilla href="https://bugzilla.suse.com/1120629">SUSE bug 1120629</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694879" comment="libsolv-tools-0.7.19-3.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009234727" comment="libsolv-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694880" comment="python3-solv-0.7.19-3.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009234730" comment="python3-solv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694881" comment="ruby-solv-0.7.19-3.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009234731" comment="ruby-solv is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20533</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20533" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20533" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20533" ref_url="https://www.suse.com/security/cve/CVE-2018-20533" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005763.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2265-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192265-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2660-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007438.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1927-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00057.html" source="SUSE-SU"/>
    <description>
    There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20533/">CVE-2018-20533</cve>
	<bugzilla href="https://bugzilla.suse.com/1120630">SUSE bug 1120630</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694879" comment="libsolv-tools-0.7.19-3.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009234727" comment="libsolv-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694880" comment="python3-solv-0.7.19-3.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009234730" comment="python3-solv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694881" comment="ruby-solv-0.7.19-3.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009234731" comment="ruby-solv is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20534</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20534" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20534" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20534" ref_url="https://www.suse.com/security/cve/CVE-2018-20534" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005763.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2265-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192265-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2660-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007438.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1927-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00057.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20534/">CVE-2018-20534</cve>
	<bugzilla href="https://bugzilla.suse.com/1120631">SUSE bug 1120631</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694879" comment="libsolv-tools-0.7.19-3.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009234727" comment="libsolv-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694880" comment="python3-solv-0.7.19-3.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009234730" comment="python3-solv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694881" comment="ruby-solv-0.7.19-3.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009234731" comment="ruby-solv is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20544</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20544" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20544" ref_url="https://www.suse.com/security/cve/CVE-2018-20544" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005248.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2745-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2745-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html" source="SUSE-SU"/>
    <description>
    There is floating point exception at caca/dither.c (function caca_dither_bitmap) in libcaca 0.99.beta19.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20544/">CVE-2018-20544</cve>
	<bugzilla href="https://bugzilla.suse.com/1120502">SUSE bug 1120502</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482147" comment="libcaca0-0.99.beta19.git20171003-9.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247106" comment="libcaca0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20545</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20545" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20545" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20545" ref_url="https://www.suse.com/security/cve/CVE-2018-20545" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005248.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2745-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2745-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html" source="SUSE-SU"/>
    <description>
    There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 4bpp data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20545/">CVE-2018-20545</cve>
	<bugzilla href="https://bugzilla.suse.com/1120470">SUSE bug 1120470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120584">SUSE bug 1120584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120589">SUSE bug 1120589</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482147" comment="libcaca0-0.99.beta19.git20171003-9.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247106" comment="libcaca0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20546</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20546" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20546" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20546" ref_url="https://www.suse.com/security/cve/CVE-2018-20546" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005248.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2745-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2745-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html" source="SUSE-SU"/>
    <description>
    There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for the default bpp case.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20546/">CVE-2018-20546</cve>
	<bugzilla href="https://bugzilla.suse.com/1120503">SUSE bug 1120503</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120504">SUSE bug 1120504</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482147" comment="libcaca0-0.99.beta19.git20171003-9.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247106" comment="libcaca0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20547</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20547" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20547" ref_url="https://www.suse.com/security/cve/CVE-2018-20547" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005248.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2745-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2745-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html" source="SUSE-SU"/>
    <description>
    There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for 24bpp data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20547/">CVE-2018-20547</cve>
	<bugzilla href="https://bugzilla.suse.com/1120503">SUSE bug 1120503</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120504">SUSE bug 1120504</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482147" comment="libcaca0-0.99.beta19.git20171003-9.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247106" comment="libcaca0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20548</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20548" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20548" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20548" ref_url="https://www.suse.com/security/cve/CVE-2018-20548" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005248.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2745-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2745-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html" source="SUSE-SU"/>
    <description>
    There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 1bpp data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20548/">CVE-2018-20548</cve>
	<bugzilla href="https://bugzilla.suse.com/1120470">SUSE bug 1120470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120584">SUSE bug 1120584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120589">SUSE bug 1120589</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482147" comment="libcaca0-0.99.beta19.git20171003-9.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247106" comment="libcaca0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20549</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20549" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20549" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20549" ref_url="https://www.suse.com/security/cve/CVE-2018-20549" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005248.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2745-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2745-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html" source="SUSE-SU"/>
    <description>
    There is an illegal WRITE memory access at caca/file.c (function caca_file_read) in libcaca 0.99.beta19.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20549/">CVE-2018-20549</cve>
	<bugzilla href="https://bugzilla.suse.com/1120470">SUSE bug 1120470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120584">SUSE bug 1120584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120589">SUSE bug 1120589</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482147" comment="libcaca0-0.99.beta19.git20171003-9.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247106" comment="libcaca0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20551</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20551" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20551" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20551" ref_url="https://www.suse.com/security/cve/CVE-2018-20551" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20551/">CVE-2018-20551</cve>
	<bugzilla href="https://bugzilla.suse.com/1120496">SUSE bug 1120496</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20570</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20570" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20570" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20570" ref_url="https://www.suse.com/security/cve/CVE-2018-20570" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-17"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20570/">CVE-2018-20570</cve>
	<bugzilla href="https://bugzilla.suse.com/1120807">SUSE bug 1120807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20573</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20573" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20573" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20573" ref_url="https://www.suse.com/security/cve/CVE-2018-20573" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:477-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010620.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:483-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010624.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010625.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:485-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:488-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010629.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010635.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010639.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010640.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010641.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010643.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010644.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:504-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010646.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:516-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:973-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:485-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1072-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010617.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010618.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1073-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010703.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1073-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U5JRSH3JEFDRI2LLKIUVXRRMZJAO5ZPH/" source="SUSE-SU"/>
    <description>
    The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20573/">CVE-2018-20573</cve>
	<bugzilla href="https://bugzilla.suse.com/1121227">SUSE bug 1121227</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671370" comment="libyaml-cpp0_6-0.6.1-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677956" comment="libyaml-cpp0_6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671380" comment="yaml-cpp-devel-0.6.1-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677957" comment="yaml-cpp-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20574</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20574" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20574" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20574" ref_url="https://www.suse.com/security/cve/CVE-2018-20574" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:477-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010620.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:483-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010624.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010625.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:485-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:488-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010629.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010635.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010639.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010640.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010641.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010643.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010644.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:504-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010646.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:516-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:973-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:485-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1072-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010617.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010618.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1073-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010703.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1073-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U5JRSH3JEFDRI2LLKIUVXRRMZJAO5ZPH/" source="SUSE-SU"/>
    <description>
    The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20574/">CVE-2018-20574</cve>
	<bugzilla href="https://bugzilla.suse.com/1121230">SUSE bug 1121230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671370" comment="libyaml-cpp0_6-0.6.1-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677956" comment="libyaml-cpp0_6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671380" comment="yaml-cpp-devel-0.6.1-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677957" comment="yaml-cpp-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20622</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20622" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20622" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20622" ref_url="https://www.suse.com/security/cve/CVE-2018-20622" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-17"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20622/">CVE-2018-20622</cve>
	<bugzilla href="https://bugzilla.suse.com/1115637">SUSE bug 1115637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120805">SUSE bug 1120805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20623</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20623" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20623" ref_url="https://www.suse.com/security/cve/CVE-2018-20623" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readelf.c via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-20623/">CVE-2018-20623</cve>
	<bugzilla href="https://bugzilla.suse.com/1121035">SUSE bug 1121035</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20650</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20650" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20650" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20650" ref_url="https://www.suse.com/security/cve/CVE-2018-20650" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class (in FileSpec.cc) in pdfdetach.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20650/">CVE-2018-20650</cve>
	<bugzilla href="https://bugzilla.suse.com/1120939">SUSE bug 1120939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120956">SUSE bug 1120956</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20651</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20651" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20651" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20651" ref_url="https://www.suse.com/security/cve/CVE-2018-20651" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20651/">CVE-2018-20651</cve>
	<bugzilla href="https://bugzilla.suse.com/1121034">SUSE bug 1121034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820662" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20662</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20662" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20662" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20662" ref_url="https://www.suse.com/security/cve/CVE-2018-20662" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20662/">CVE-2018-20662</cve>
	<bugzilla href="https://bugzilla.suse.com/1120939">SUSE bug 1120939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120956">SUSE bug 1120956</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20669</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20669" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20669" ref_url="https://www.suse.com/security/cve/CVE-2018-20669" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0767-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0784-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190784-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0785-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190785-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007978.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008212.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2193-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4YRSQJNKLIOJJTD3P2UKMHRFMCIG3JDN/" source="SUSE-SU"/>
    <description>
    An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Linux kernel through 4.19.13. A local attacker can craft a malicious IOCTL function call to overwrite arbitrary kernel memory, resulting in a Denial of Service or privilege escalation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20669/">CVE-2018-20669</cve>
	<bugzilla href="https://bugzilla.suse.com/1122971">SUSE bug 1122971</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20671</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20671" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20671" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20671" ref_url="https://www.suse.com/security/cve/CVE-2018-20671" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer overflow via a crafted section size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20671/">CVE-2018-20671</cve>
	<bugzilla href="https://bugzilla.suse.com/1121056">SUSE bug 1121056</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820679" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20679</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20679" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20679" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20679" ref_url="https://www.suse.com/security/cve/CVE-2018-20679" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1408-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LTZHQ6OAWXY23IUCNO7X25C5CHHCWLOM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3531-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EXGVAQ34C33F4R3O65TKB73FYUDCIM6B/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server, client, and relay) allows a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to verification in udhcp_get_option() in networking/udhcp/common.c that 4-byte options are indeed 4 bytes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20679/">CVE-2018-20679</cve>
	<bugzilla href="https://bugzilla.suse.com/1121426">SUSE bug 1121426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121428">SUSE bug 1121428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152555" comment="busybox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653584" comment="busybox-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20685</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20685" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20685" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20685" ref_url="https://www.suse.com/security/cve/CVE-2018-20685" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0125-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005404.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0126-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0132-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005049.html" source="SUSE-SU"/>
		<reference ref_id="TID000019375" ref_url="https://www.suse.com/support/kb/doc/?id=000019375" source="SUSE-SU"/>
		<reference ref_id="TID7023647" ref_url="https://www.suse.com/support/kb/doc/?id=7023647" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0091-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00041.html" source="SUSE-SU"/>
    <description>
    In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20685/">CVE-2018-20685</cve>
	<bugzilla href="https://bugzilla.suse.com/1121571">SUSE bug 1121571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123220">SUSE bug 1123220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131109">SUSE bug 1131109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628954" comment="openssh-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628955" comment="openssh-clients-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659235" comment="openssh-clients is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628956" comment="openssh-common-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659236" comment="openssh-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628958" comment="openssh-server-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659237" comment="openssh-server is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20748</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20748" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20748" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20748" ref_url="https://www.suse.com/security/cve/CVE-2018-20748" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0313-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005401.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0196-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00040.html" source="SUSE-SU"/>
    <description>
    LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20748/">CVE-2018-20748</cve>
	<bugzilla href="https://bugzilla.suse.com/1120118">SUSE bug 1120118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123823">SUSE bug 1123823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155442">SUSE bug 1155442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20749</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20749" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20749" ref_url="https://www.suse.com/security/cve/CVE-2018-20749" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0313-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005401.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0196-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00040.html" source="SUSE-SU"/>
    <description>
    LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20749/">CVE-2018-20749</cve>
	<bugzilla href="https://bugzilla.suse.com/1120117">SUSE bug 1120117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123828">SUSE bug 1123828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123832">SUSE bug 1123832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20750</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20750" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20750" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20750" ref_url="https://www.suse.com/security/cve/CVE-2018-20750" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0313-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005401.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0196-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00040.html" source="SUSE-SU"/>
    <description>
    LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20750/">CVE-2018-20750</cve>
	<bugzilla href="https://bugzilla.suse.com/1120117">SUSE bug 1120117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123832">SUSE bug 1123832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20783</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20783" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20783" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20783" ref_url="https://www.suse.com/security/cve/CVE-2018-20783" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0985-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html" source="SUSE-SU"/>
    <description>
    In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse a .phar file. This is related to phar_parse_pharfile in ext/phar/phar.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20783/">CVE-2018-20783</cve>
	<bugzilla href="https://bugzilla.suse.com/1126713">SUSE bug 1126713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127122">SUSE bug 1127122</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20815</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20815" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20815" ref_url="https://www.suse.com/security/cve/CVE-2018-20815" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1239-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005472.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005510.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005473.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14063-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005492.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00045.html" source="SUSE-SU"/>
    <description>
    In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-20815/">CVE-2018-20815</cve>
	<bugzilla href="https://bugzilla.suse.com/1118900">SUSE bug 1118900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130675">SUSE bug 1130675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130680">SUSE bug 1130680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20843</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20843" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20843" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20843" ref_url="https://www.suse.com/security/cve/CVE-2018-20843" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010840.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005700.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1777-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-07/msg00104.html" source="SUSE-SU"/>
    <description>
    In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20843/">CVE-2018-20843</cve>
	<bugzilla href="https://bugzilla.suse.com/1139937">SUSE bug 1139937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481942" comment="expat-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481944" comment="libexpat1-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481945" comment="libexpat1-32bit-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20845</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20845" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20845" ref_url="https://www.suse.com/security/cve/CVE-2018-20845" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010666.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010745.html" source="SUSE-SU"/>
    <description>
    Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20845/">CVE-2018-20845</cve>
	<bugzilla href="https://bugzilla.suse.com/1140130">SUSE bug 1140130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677917" comment="libopenjp2-7-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678643" comment="libopenjp2-7-32bit-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677918" comment="openjpeg2-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677919" comment="openjpeg2-devel-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20846</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20846" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20846" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20846" ref_url="https://www.suse.com/security/cve/CVE-2018-20846" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010666.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012995.html" source="SUSE-SU"/>
    <description>
    Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-28"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20846/">CVE-2018-20846</cve>
	<bugzilla href="https://bugzilla.suse.com/1140205">SUSE bug 1140205</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721365" comment="libopenjp2-7-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721340" comment="libopenjp2-7-32bit-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722397" comment="libopenjpeg1-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722398" comment="libopenjpeg1-32bit-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153809" comment="libopenjpeg1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722399" comment="openjpeg-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153810" comment="openjpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722400" comment="openjpeg-devel-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153811" comment="openjpeg-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722401" comment="openjpeg-devel-32bit-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153812" comment="openjpeg-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721366" comment="openjpeg2-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721367" comment="openjpeg2-devel-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20852</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20852" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20852" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20852" ref_url="https://www.suse.com/security/cve/CVE-2018-20852" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005804.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005777.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005803.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005811.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0302-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006445.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007449.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20852/">CVE-2018-20852</cve>
	<bugzilla href="https://bugzilla.suse.com/1141853">SUSE bug 1141853</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820860" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20860</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20860" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20860" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20860" ref_url="https://www.suse.com/security/cve/CVE-2018-20860" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005954.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00084.html" source="SUSE-SU"/>
    <description>
    libopenmpt before 0.3.13 allows a crash with malformed MED files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20860/">CVE-2018-20860</cve>
	<bugzilla href="https://bugzilla.suse.com/1143581">SUSE bug 1143581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487555" comment="libopenmpt0-0.3.19-2.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230504" comment="libopenmpt0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201820861" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-20861</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-20861" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20861" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-20861" ref_url="https://www.suse.com/security/cve/CVE-2018-20861" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005954.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00084.html" source="SUSE-SU"/>
    <description>
    libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20861/">CVE-2018-20861</cve>
	<bugzilla href="https://bugzilla.suse.com/1143578">SUSE bug 1143578</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487555" comment="libopenmpt0-0.3.19-2.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230504" comment="libopenmpt0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201821010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-21010</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-21010" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21010" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-21010" ref_url="https://www.suse.com/security/cve/CVE-2018-21010" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012995.html" source="SUSE-SU"/>
    <description>
    OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-28"/>
	<updated date="2022-11-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-21010/">CVE-2018-21010</cve>
	<bugzilla href="https://bugzilla.suse.com/1149789">SUSE bug 1149789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721365" comment="libopenjp2-7-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721340" comment="libopenjp2-7-32bit-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722397" comment="libopenjpeg1-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722398" comment="libopenjpeg1-32bit-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153809" comment="libopenjpeg1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722399" comment="openjpeg-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153810" comment="openjpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722400" comment="openjpeg-devel-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153811" comment="openjpeg-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722401" comment="openjpeg-devel-32bit-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153812" comment="openjpeg-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721366" comment="openjpeg2-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721367" comment="openjpeg2-devel-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201821029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-21029</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-21029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21029" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-21029" ref_url="https://www.suse.com/security/cve/CVE-2018-21029" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication (SNI) is not sent, and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname validation does not have anything to do with this issue (i.e. there is no hostname to be sent).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-21029/">CVE-2018-21029</cve>
	<bugzilla href="https://bugzilla.suse.com/1155539">SUSE bug 1155539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201821247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-21247</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-21247" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21247" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-21247" ref_url="https://www.suse.com/security/cve/CVE-2018-21247" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1922-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2167-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007241.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-21247/">CVE-2018-21247</cve>
	<bugzilla href="https://bugzilla.suse.com/1173477">SUSE bug 1173477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173874">SUSE bug 1173874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201825009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-25009</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-25009" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25009" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-25009" ref_url="https://www.suse.com/security/cve/CVE-2018-25009" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008936.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1860-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ZIJ3ZK5FGNGJN6E65XZKMQPSQ3RKNVG/" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-06"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25009/">CVE-2018-25009</cve>
	<bugzilla href="https://bugzilla.suse.com/1185673">SUSE bug 1185673</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504861" comment="libwebp6-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623316" comment="libwebp6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497908" comment="libwebp6-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623317" comment="libwebp6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504862" comment="libwebpdecoder2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623319" comment="libwebpdecoder2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620676" comment="libwebpdecoder2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623320" comment="libwebpdecoder2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504864" comment="libwebpextras0-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623325" comment="libwebpextras0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620682" comment="libwebpextras0-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623326" comment="libwebpextras0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504865" comment="libwebpmux2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623328" comment="libwebpmux2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620685" comment="libwebpmux2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623329" comment="libwebpmux2-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201825010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-25010</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-25010" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25010" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-25010" ref_url="https://www.suse.com/security/cve/CVE-2018-25010" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008936.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1860-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ZIJ3ZK5FGNGJN6E65XZKMQPSQ3RKNVG/" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-06"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25010/">CVE-2018-25010</cve>
	<bugzilla href="https://bugzilla.suse.com/1185685">SUSE bug 1185685</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504861" comment="libwebp6-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623316" comment="libwebp6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497908" comment="libwebp6-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623317" comment="libwebp6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504862" comment="libwebpdecoder2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623319" comment="libwebpdecoder2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620676" comment="libwebpdecoder2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623320" comment="libwebpdecoder2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504864" comment="libwebpextras0-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623325" comment="libwebpextras0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620682" comment="libwebpextras0-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623326" comment="libwebpextras0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504865" comment="libwebpmux2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623328" comment="libwebpmux2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620685" comment="libwebpmux2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623329" comment="libwebpmux2-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201825011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-25011</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-25011" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25011" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-25011" ref_url="https://www.suse.com/security/cve/CVE-2018-25011" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008936.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1860-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ZIJ3ZK5FGNGJN6E65XZKMQPSQ3RKNVG/" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-06"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25011/">CVE-2018-25011</cve>
	<bugzilla href="https://bugzilla.suse.com/1186247">SUSE bug 1186247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504861" comment="libwebp6-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623316" comment="libwebp6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497908" comment="libwebp6-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623317" comment="libwebp6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504862" comment="libwebpdecoder2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623319" comment="libwebpdecoder2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620676" comment="libwebpdecoder2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623320" comment="libwebpdecoder2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504864" comment="libwebpextras0-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623325" comment="libwebpextras0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620682" comment="libwebpextras0-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623326" comment="libwebpextras0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504865" comment="libwebpmux2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623328" comment="libwebpmux2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620685" comment="libwebpmux2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623329" comment="libwebpmux2-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201825012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-25012</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-25012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25012" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-25012" ref_url="https://www.suse.com/security/cve/CVE-2018-25012" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008936.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1860-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ZIJ3ZK5FGNGJN6E65XZKMQPSQ3RKNVG/" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-06"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25012/">CVE-2018-25012</cve>
	<bugzilla href="https://bugzilla.suse.com/1185690">SUSE bug 1185690</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504861" comment="libwebp6-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623316" comment="libwebp6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497908" comment="libwebp6-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623317" comment="libwebp6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504862" comment="libwebpdecoder2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623319" comment="libwebpdecoder2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620676" comment="libwebpdecoder2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623320" comment="libwebpdecoder2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504864" comment="libwebpextras0-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623325" comment="libwebpextras0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620682" comment="libwebpextras0-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623326" comment="libwebpextras0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504865" comment="libwebpmux2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623328" comment="libwebpmux2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620685" comment="libwebpmux2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623329" comment="libwebpmux2-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201825013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-25013</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-25013" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25013" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-25013" ref_url="https://www.suse.com/security/cve/CVE-2018-25013" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008936.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1860-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ZIJ3ZK5FGNGJN6E65XZKMQPSQ3RKNVG/" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-06"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25013/">CVE-2018-25013</cve>
	<bugzilla href="https://bugzilla.suse.com/1185654">SUSE bug 1185654</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504861" comment="libwebp6-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623316" comment="libwebp6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497908" comment="libwebp6-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623317" comment="libwebp6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504862" comment="libwebpdecoder2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623319" comment="libwebpdecoder2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620676" comment="libwebpdecoder2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623320" comment="libwebpdecoder2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504864" comment="libwebpextras0-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623325" comment="libwebpextras0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620682" comment="libwebpextras0-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623326" comment="libwebpextras0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504865" comment="libwebpmux2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623328" comment="libwebpmux2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620685" comment="libwebpmux2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623329" comment="libwebpmux2-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201825020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-25020</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-25020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25020" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-25020" ref_url="https://www.suse.com/security/cve/CVE-2018-25020" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0329-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0477-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010246.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0366-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CFUCZRWH2IP7FOHVYO3TO3G5PFWQXLP6/" source="SUSE-SU"/>
    <description>
    The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25020/">CVE-2018-25020</cve>
	<bugzilla href="https://bugzilla.suse.com/1193575">SUSE bug 1193575</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667096" comment="kernel-debug-base-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667070" comment="kernel-default-man-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667097" comment="kernel-kvmsmall-base-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667098" comment="kernel-vanilla-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667099" comment="kernel-vanilla-base-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667100" comment="kernel-vanilla-devel-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667101" comment="kernel-vanilla-livepatch-devel-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667102" comment="kernel-zfcpdump-man-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201825032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-25032</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-25032" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-25032" ref_url="https://www.suse.com/security/cve/CVE-2018-25032" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1052-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-May/023165.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1228-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1229-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011214.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1356-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011325.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1360-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011327.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:447-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:449-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010595.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010596.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:457-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:459-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:464-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:467-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:470-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010616.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010635.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010639.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010640.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010641.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010643.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010644.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:504-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:516-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010662.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:589-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:592-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010698.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:720-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010880.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010881.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010882.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010887.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010888.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010942.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:872-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010943.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:873-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:874-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010958.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:973-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:323-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013692.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:485-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1023-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1061-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010707.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1062-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010586.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3225-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012197.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10126-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3URMJJJ2MKM4FNDYFMSSIEJDTNENDZRU/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1061-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q3IAWI5KYTN2PXEFZY7OU7STBINLC3H6/" source="SUSE-SU"/>
    <description>
    zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25032/">CVE-2018-25032</cve>
	<bugzilla href="https://bugzilla.suse.com/1197459">SUSE bug 1197459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197893">SUSE bug 1197893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198667">SUSE bug 1198667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199104">SUSE bug 1199104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200049">SUSE bug 1200049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201732">SUSE bug 1201732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202688">SUSE bug 1202688</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676990" comment="libminizip1-1.2.11-150000.3.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154284" comment="libminizip1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677065" comment="libminizip1-32bit-1.2.11-150000.3.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677870" comment="libminizip1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676991" comment="libz1-1.2.11-150000.3.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153971" comment="libz1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676992" comment="libz1-32bit-1.2.11-150000.3.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153972" comment="libz1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676993" comment="minizip-devel-1.2.11-150000.3.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154285" comment="minizip-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676994" comment="zlib-devel-1.2.11-150000.3.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251909" comment="zlib-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676996" comment="zlib-devel-32bit-1.2.11-150000.3.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153975" comment="zlib-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676995" comment="zlib-devel-static-1.2.11-150000.3.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153976" comment="zlib-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677066" comment="zlib-devel-static-32bit-1.2.11-150000.3.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153977" comment="zlib-devel-static-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2562</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2562" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2562" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2562" ref_url="https://www.suse.com/security/cve/CVE-2018-2562" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0422-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0697-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0730-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00046.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.19 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-2562/">CVE-2018-2562</cve>
	<bugzilla href="https://bugzilla.suse.com/1076369">SUSE bug 1076369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078431">SUSE bug 1078431</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182612" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2612</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2612" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2612" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2612" ref_url="https://www.suse.com/security/cve/CVE-2018-2612" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0697-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0730-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00046.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2612/">CVE-2018-2612</cve>
	<bugzilla href="https://bugzilla.suse.com/1076369">SUSE bug 1076369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078431">SUSE bug 1078431</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2622</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2622" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2622" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2622" ref_url="https://www.suse.com/security/cve/CVE-2018-2622" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0422-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0697-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0730-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00046.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2622/">CVE-2018-2622</cve>
	<bugzilla href="https://bugzilla.suse.com/1076369">SUSE bug 1076369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078431">SUSE bug 1078431</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2640</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2640" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2640" ref_url="https://www.suse.com/security/cve/CVE-2018-2640" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0422-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0697-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0730-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00046.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2640/">CVE-2018-2640</cve>
	<bugzilla href="https://bugzilla.suse.com/1076369">SUSE bug 1076369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078431">SUSE bug 1078431</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2665</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2665" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2665" ref_url="https://www.suse.com/security/cve/CVE-2018-2665" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0422-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0697-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0730-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00046.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2665/">CVE-2018-2665</cve>
	<bugzilla href="https://bugzilla.suse.com/1076369">SUSE bug 1076369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078431">SUSE bug 1078431</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2668</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2668" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2668" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2668" ref_url="https://www.suse.com/security/cve/CVE-2018-2668" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0422-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0697-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0730-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00046.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2668/">CVE-2018-2668</cve>
	<bugzilla href="https://bugzilla.suse.com/1076369">SUSE bug 1076369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078431">SUSE bug 1078431</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2676</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2676" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2676" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2676" ref_url="https://www.suse.com/security/cve/CVE-2018-2676" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2676/">CVE-2018-2676</cve>
	<bugzilla href="https://bugzilla.suse.com/1076372">SUSE bug 1076372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2685</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2685" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2685" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2685" ref_url="https://www.suse.com/security/cve/CVE-2018-2685" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2685/">CVE-2018-2685</cve>
	<bugzilla href="https://bugzilla.suse.com/1076372">SUSE bug 1076372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2686</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2686" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2686" ref_url="https://www.suse.com/security/cve/CVE-2018-2686" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2686/">CVE-2018-2686</cve>
	<bugzilla href="https://bugzilla.suse.com/1076372">SUSE bug 1076372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2687</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2687" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2687" ref_url="https://www.suse.com/security/cve/CVE-2018-2687" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2687/">CVE-2018-2687</cve>
	<bugzilla href="https://bugzilla.suse.com/1076372">SUSE bug 1076372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2688</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2688" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2688" ref_url="https://www.suse.com/security/cve/CVE-2018-2688" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2688/">CVE-2018-2688</cve>
	<bugzilla href="https://bugzilla.suse.com/1076372">SUSE bug 1076372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2689</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2689" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2689" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2689" ref_url="https://www.suse.com/security/cve/CVE-2018-2689" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2689/">CVE-2018-2689</cve>
	<bugzilla href="https://bugzilla.suse.com/1076372">SUSE bug 1076372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2690</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2690" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2690" ref_url="https://www.suse.com/security/cve/CVE-2018-2690" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2690/">CVE-2018-2690</cve>
	<bugzilla href="https://bugzilla.suse.com/1076372">SUSE bug 1076372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2693</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2693" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2693" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2693" ref_url="https://www.suse.com/security/cve/CVE-2018-2693" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Guest Additions). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2693/">CVE-2018-2693</cve>
	<bugzilla href="https://bugzilla.suse.com/1076372">SUSE bug 1076372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2694</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2694" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2694" ref_url="https://www.suse.com/security/cve/CVE-2018-2694" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2694/">CVE-2018-2694</cve>
	<bugzilla href="https://bugzilla.suse.com/1076372">SUSE bug 1076372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2698</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2698" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2698" ref_url="https://www.suse.com/security/cve/CVE-2018-2698" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2698/">CVE-2018-2698</cve>
	<bugzilla href="https://bugzilla.suse.com/1076372">SUSE bug 1076372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2755</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2755" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2755" ref_url="https://www.suse.com/security/cve/CVE-2018-2755" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00042.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2755/">CVE-2018-2755</cve>
	<bugzilla href="https://bugzilla.suse.com/1089987">SUSE bug 1089987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090518">SUSE bug 1090518</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182759" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2759</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2759" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2759" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2759" ref_url="https://www.suse.com/security/cve/CVE-2018-2759" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2759/">CVE-2018-2759</cve>
	<bugzilla href="https://bugzilla.suse.com/1089987">SUSE bug 1089987</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2761</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2761" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2761" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2761" ref_url="https://www.suse.com/security/cve/CVE-2018-2761" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00042.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2761/">CVE-2018-2761</cve>
	<bugzilla href="https://bugzilla.suse.com/1089987">SUSE bug 1089987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090518">SUSE bug 1090518</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2766</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2766" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2766" ref_url="https://www.suse.com/security/cve/CVE-2018-2766" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00042.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2766/">CVE-2018-2766</cve>
	<bugzilla href="https://bugzilla.suse.com/1089987">SUSE bug 1089987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090518">SUSE bug 1090518</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2767</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2767" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2767" ref_url="https://www.suse.com/security/cve/CVE-2018-2767" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00039.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-2767/">CVE-2018-2767</cve>
	<bugzilla href="https://bugzilla.suse.com/1088681">SUSE bug 1088681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101675">SUSE bug 1101675</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2771</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2771" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2771" ref_url="https://www.suse.com/security/cve/CVE-2018-2771" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00042.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.4/CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2771/">CVE-2018-2771</cve>
	<bugzilla href="https://bugzilla.suse.com/1089987">SUSE bug 1089987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090518">SUSE bug 1090518</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2777</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2777" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2777" ref_url="https://www.suse.com/security/cve/CVE-2018-2777" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2777/">CVE-2018-2777</cve>
	<bugzilla href="https://bugzilla.suse.com/1089987">SUSE bug 1089987</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2781</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2781" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2781" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2781" ref_url="https://www.suse.com/security/cve/CVE-2018-2781" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00042.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2781/">CVE-2018-2781</cve>
	<bugzilla href="https://bugzilla.suse.com/1089987">SUSE bug 1089987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090518">SUSE bug 1090518</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2782</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2782" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2782" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2782" ref_url="https://www.suse.com/security/cve/CVE-2018-2782" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00042.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2782/">CVE-2018-2782</cve>
	<bugzilla href="https://bugzilla.suse.com/1089987">SUSE bug 1089987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090518">SUSE bug 1090518</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182784" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2784</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2784" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2784" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2784" ref_url="https://www.suse.com/security/cve/CVE-2018-2784" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00042.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2784/">CVE-2018-2784</cve>
	<bugzilla href="https://bugzilla.suse.com/1089987">SUSE bug 1089987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090518">SUSE bug 1090518</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182786" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2786</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2786" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2786" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2786" ref_url="https://www.suse.com/security/cve/CVE-2018-2786" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-2786/">CVE-2018-2786</cve>
	<bugzilla href="https://bugzilla.suse.com/1089987">SUSE bug 1089987</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2787</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2787" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2787" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2787" ref_url="https://www.suse.com/security/cve/CVE-2018-2787" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00042.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-2787/">CVE-2018-2787</cve>
	<bugzilla href="https://bugzilla.suse.com/1089987">SUSE bug 1089987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090518">SUSE bug 1090518</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2790</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2790" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2790" ref_url="https://www.suse.com/security/cve/CVE-2018-2790" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1447-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1690-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004692.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1692-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004721.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1764-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1938-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1719-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-2790/">CVE-2018-2790</cve>
	<bugzilla href="https://bugzilla.suse.com/1090023">SUSE bug 1090023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093311">SUSE bug 1093311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101637">SUSE bug 1101637</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2794</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2794" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2794" ref_url="https://www.suse.com/security/cve/CVE-2018-2794" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1447-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1690-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004692.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1692-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004721.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1764-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1938-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1719-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2794/">CVE-2018-2794</cve>
	<bugzilla href="https://bugzilla.suse.com/1090024">SUSE bug 1090024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093311">SUSE bug 1093311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182795" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2795</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2795" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2795" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2795" ref_url="https://www.suse.com/security/cve/CVE-2018-2795" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1447-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1690-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004692.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1692-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004721.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1764-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1938-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1719-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-2795/">CVE-2018-2795</cve>
	<bugzilla href="https://bugzilla.suse.com/1090025">SUSE bug 1090025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093311">SUSE bug 1093311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182796" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2796</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2796" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2796" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2796" ref_url="https://www.suse.com/security/cve/CVE-2018-2796" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1447-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1690-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004692.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1692-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004721.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1764-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1938-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1719-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-2796/">CVE-2018-2796</cve>
	<bugzilla href="https://bugzilla.suse.com/1090026">SUSE bug 1090026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093311">SUSE bug 1093311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2797</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2797" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2797" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2797" ref_url="https://www.suse.com/security/cve/CVE-2018-2797" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1447-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1690-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004692.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1692-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004721.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1764-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1938-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1719-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-2797/">CVE-2018-2797</cve>
	<bugzilla href="https://bugzilla.suse.com/1090027">SUSE bug 1090027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093311">SUSE bug 1093311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2798</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2798" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2798" ref_url="https://www.suse.com/security/cve/CVE-2018-2798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1447-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1690-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004692.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1692-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004721.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1764-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1938-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1719-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-2798/">CVE-2018-2798</cve>
	<bugzilla href="https://bugzilla.suse.com/1090028">SUSE bug 1090028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093311">SUSE bug 1093311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2799</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2799" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2799" ref_url="https://www.suse.com/security/cve/CVE-2018-2799" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1447-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1690-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004692.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1692-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004721.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1764-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1938-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1719-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-2799/">CVE-2018-2799</cve>
	<bugzilla href="https://bugzilla.suse.com/1090029">SUSE bug 1090029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093311">SUSE bug 1093311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2810</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2810" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2810" ref_url="https://www.suse.com/security/cve/CVE-2018-2810" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2810/">CVE-2018-2810</cve>
	<bugzilla href="https://bugzilla.suse.com/1089987">SUSE bug 1089987</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2813</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2813" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2813" ref_url="https://www.suse.com/security/cve/CVE-2018-2813" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00042.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-2813/">CVE-2018-2813</cve>
	<bugzilla href="https://bugzilla.suse.com/1089987">SUSE bug 1089987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090518">SUSE bug 1090518</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2814</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2814" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2814" ref_url="https://www.suse.com/security/cve/CVE-2018-2814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1447-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1690-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004692.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1692-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004721.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1764-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1938-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1719-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2814/">CVE-2018-2814</cve>
	<bugzilla href="https://bugzilla.suse.com/1090032">SUSE bug 1090032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093311">SUSE bug 1093311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2817</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2817" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2817" ref_url="https://www.suse.com/security/cve/CVE-2018-2817" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00042.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2817/">CVE-2018-2817</cve>
	<bugzilla href="https://bugzilla.suse.com/1089987">SUSE bug 1089987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090518">SUSE bug 1090518</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2819</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2819" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2819" ref_url="https://www.suse.com/security/cve/CVE-2018-2819" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1781-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00042.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2819/">CVE-2018-2819</cve>
	<bugzilla href="https://bugzilla.suse.com/1089987">SUSE bug 1089987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090518">SUSE bug 1090518</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2825</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2825" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2825" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2825" ref_url="https://www.suse.com/security/cve/CVE-2018-2825" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004314.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2825/">CVE-2018-2825</cve>
	<bugzilla href="https://bugzilla.suse.com/1090196">SUSE bug 1090196</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093311">SUSE bug 1093311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2826</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2826" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2826" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2826" ref_url="https://www.suse.com/security/cve/CVE-2018-2826" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1738-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004314.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2826/">CVE-2018-2826</cve>
	<bugzilla href="https://bugzilla.suse.com/1090197">SUSE bug 1090197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093311">SUSE bug 1093311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2830</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2830" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2830" ref_url="https://www.suse.com/security/cve/CVE-2018-2830" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2830/">CVE-2018-2830</cve>
	<bugzilla href="https://bugzilla.suse.com/1089997">SUSE bug 1089997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2831</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2831" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2831" ref_url="https://www.suse.com/security/cve/CVE-2018-2831" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 3.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-2831/">CVE-2018-2831</cve>
	<bugzilla href="https://bugzilla.suse.com/1089997">SUSE bug 1089997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2835</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2835" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2835" ref_url="https://www.suse.com/security/cve/CVE-2018-2835" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2835/">CVE-2018-2835</cve>
	<bugzilla href="https://bugzilla.suse.com/1089997">SUSE bug 1089997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2836</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2836" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2836" ref_url="https://www.suse.com/security/cve/CVE-2018-2836" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2836/">CVE-2018-2836</cve>
	<bugzilla href="https://bugzilla.suse.com/1089997">SUSE bug 1089997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2837</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2837" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2837" ref_url="https://www.suse.com/security/cve/CVE-2018-2837" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2837/">CVE-2018-2837</cve>
	<bugzilla href="https://bugzilla.suse.com/1089997">SUSE bug 1089997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2842</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2842" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2842" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2842" ref_url="https://www.suse.com/security/cve/CVE-2018-2842" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2842/">CVE-2018-2842</cve>
	<bugzilla href="https://bugzilla.suse.com/1089997">SUSE bug 1089997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2843</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2843" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2843" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2843" ref_url="https://www.suse.com/security/cve/CVE-2018-2843" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2843/">CVE-2018-2843</cve>
	<bugzilla href="https://bugzilla.suse.com/1089997">SUSE bug 1089997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2844</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2844" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2844" ref_url="https://www.suse.com/security/cve/CVE-2018-2844" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2844/">CVE-2018-2844</cve>
	<bugzilla href="https://bugzilla.suse.com/1089997">SUSE bug 1089997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2845</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2845" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2845" ref_url="https://www.suse.com/security/cve/CVE-2018-2845" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-2845/">CVE-2018-2845</cve>
	<bugzilla href="https://bugzilla.suse.com/1089997">SUSE bug 1089997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182860" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2860</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2860" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2860" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2860" ref_url="https://www.suse.com/security/cve/CVE-2018-2860" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2860/">CVE-2018-2860</cve>
	<bugzilla href="https://bugzilla.suse.com/1089997">SUSE bug 1089997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182909" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2909</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2909" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2909" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2909" ref_url="https://www.suse.com/security/cve/CVE-2018-2909" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2909/">CVE-2018-2909</cve>
	<bugzilla href="https://bugzilla.suse.com/1112097">SUSE bug 1112097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182940" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2940</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2940" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2940" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2940" ref_url="https://www.suse.com/security/cve/CVE-2018-2940" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004325.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2583-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2649-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004712.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3045-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3064-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004728.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3064-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005388.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00012.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-2940/">CVE-2018-2940</cve>
	<bugzilla href="https://bugzilla.suse.com/1101645">SUSE bug 1101645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101656">SUSE bug 1101656</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182952" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2952</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2952" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2952" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2952" ref_url="https://www.suse.com/security/cve/CVE-2018-2952" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004325.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2583-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2649-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004712.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3045-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3064-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004728.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3064-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005388.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00012.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2018-2952/">CVE-2018-2952</cve>
	<bugzilla href="https://bugzilla.suse.com/1101645">SUSE bug 1101645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101651">SUSE bug 1101651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101656">SUSE bug 1101656</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2972</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2972" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2972" ref_url="https://www.suse.com/security/cve/CVE-2018-2972" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004325.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). The supported version that is affected is Java SE: 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-2972/">CVE-2018-2972</cve>
	<bugzilla href="https://bugzilla.suse.com/1101655">SUSE bug 1101655</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2973</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-2973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2973" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-2973" ref_url="https://www.suse.com/security/cve/CVE-2018-2973" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004325.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2583-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2649-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004712.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3045-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3064-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004728.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3064-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005388.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00012.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-2973/">CVE-2018-2973</cve>
	<bugzilla href="https://bugzilla.suse.com/1101645">SUSE bug 1101645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101656">SUSE bug 1101656</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3005</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3005" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3005" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3005" ref_url="https://www.suse.com/security/cve/CVE-2018-3005" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 4.0 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-3005/">CVE-2018-3005</cve>
	<bugzilla href="https://bugzilla.suse.com/1101667">SUSE bug 1101667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3055</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3055" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3055" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3055" ref_url="https://www.suse.com/security/cve/CVE-2018-3055" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3055/">CVE-2018-3055</cve>
	<bugzilla href="https://bugzilla.suse.com/1101667">SUSE bug 1101667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203370">SUSE bug 1203370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183058" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3058</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3058" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3058" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3058" ref_url="https://www.suse.com/security/cve/CVE-2018-3058" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3972-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183972-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005775.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-3058/">CVE-2018-3058</cve>
	<bugzilla href="https://bugzilla.suse.com/1101676">SUSE bug 1101676</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183060" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3060</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3060" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3060" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3060" ref_url="https://www.suse.com/security/cve/CVE-2018-3060" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3060/">CVE-2018-3060</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3063</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3063" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3063" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3063" ref_url="https://www.suse.com/security/cve/CVE-2018-3063" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3972-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183972-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005775.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3063/">CVE-2018-3063</cve>
	<bugzilla href="https://bugzilla.suse.com/1101677">SUSE bug 1101677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3064</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3064" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3064" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3064" ref_url="https://www.suse.com/security/cve/CVE-2018-3064" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3972-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183972-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005775.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-3064/">CVE-2018-3064</cve>
	<bugzilla href="https://bugzilla.suse.com/1103342">SUSE bug 1103342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3066</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3066" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3066" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3066" ref_url="https://www.suse.com/security/cve/CVE-2018-3066" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3972-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183972-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005775.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-3066/">CVE-2018-3066</cve>
	<bugzilla href="https://bugzilla.suse.com/1101678">SUSE bug 1101678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183085" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3085</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3085" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3085" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3085" ref_url="https://www.suse.com/security/cve/CVE-2018-3085" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3085/">CVE-2018-3085</cve>
	<bugzilla href="https://bugzilla.suse.com/1101667">SUSE bug 1101667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203370">SUSE bug 1203370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183086" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3086</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3086" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3086" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3086" ref_url="https://www.suse.com/security/cve/CVE-2018-3086" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3086/">CVE-2018-3086</cve>
	<bugzilla href="https://bugzilla.suse.com/1101667">SUSE bug 1101667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3087</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3087" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3087" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3087" ref_url="https://www.suse.com/security/cve/CVE-2018-3087" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3087/">CVE-2018-3087</cve>
	<bugzilla href="https://bugzilla.suse.com/1101667">SUSE bug 1101667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3088</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3088" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3088" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3088" ref_url="https://www.suse.com/security/cve/CVE-2018-3088" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3088/">CVE-2018-3088</cve>
	<bugzilla href="https://bugzilla.suse.com/1101667">SUSE bug 1101667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3089</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3089" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3089" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3089" ref_url="https://www.suse.com/security/cve/CVE-2018-3089" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3089/">CVE-2018-3089</cve>
	<bugzilla href="https://bugzilla.suse.com/1101667">SUSE bug 1101667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183090" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3090</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3090" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3090" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3090" ref_url="https://www.suse.com/security/cve/CVE-2018-3090" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3090/">CVE-2018-3090</cve>
	<bugzilla href="https://bugzilla.suse.com/1101667">SUSE bug 1101667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183091" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3091</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3091" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3091" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3091" ref_url="https://www.suse.com/security/cve/CVE-2018-3091" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3091/">CVE-2018-3091</cve>
	<bugzilla href="https://bugzilla.suse.com/1101667">SUSE bug 1101667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3136</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3136" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3136" ref_url="https://www.suse.com/security/cve/CVE-2018-3136" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3933-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4064-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0057-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0057-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005380.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-3136/">CVE-2018-3136</cve>
	<bugzilla href="https://bugzilla.suse.com/1112142">SUSE bug 1112142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112143">SUSE bug 1112143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112144">SUSE bug 1112144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112146">SUSE bug 1112146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112148">SUSE bug 1112148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112152">SUSE bug 1112152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116574">SUSE bug 1116574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3139</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3139" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3139" ref_url="https://www.suse.com/security/cve/CVE-2018-3139" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3933-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4064-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0057-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0057-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005380.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3139/">CVE-2018-3139</cve>
	<bugzilla href="https://bugzilla.suse.com/1112142">SUSE bug 1112142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112143">SUSE bug 1112143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112144">SUSE bug 1112144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112146">SUSE bug 1112146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112148">SUSE bug 1112148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112152">SUSE bug 1112152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116574">SUSE bug 1116574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3143</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3143" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3143" ref_url="https://www.suse.com/security/cve/CVE-2018-3143" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3972-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183972-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005775.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3478-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3143/">CVE-2018-3143</cve>
	<bugzilla href="https://bugzilla.suse.com/1112421">SUSE bug 1112421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183149" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3149</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3149" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3149" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3149" ref_url="https://www.suse.com/security/cve/CVE-2018-3149" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3933-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4064-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0057-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0057-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005380.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3149/">CVE-2018-3149</cve>
	<bugzilla href="https://bugzilla.suse.com/1112142">SUSE bug 1112142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112143">SUSE bug 1112143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112144">SUSE bug 1112144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112146">SUSE bug 1112146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112148">SUSE bug 1112148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112152">SUSE bug 1112152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116574">SUSE bug 1116574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3150</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3150" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3150" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3150" ref_url="https://www.suse.com/security/cve/CVE-2018-3150" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00041.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-3150/">CVE-2018-3150</cve>
	<bugzilla href="https://bugzilla.suse.com/1112145">SUSE bug 1112145</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3156</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3156" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3156" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3156" ref_url="https://www.suse.com/security/cve/CVE-2018-3156" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3972-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183972-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005775.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3478-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3156/">CVE-2018-3156</cve>
	<bugzilla href="https://bugzilla.suse.com/1112417">SUSE bug 1112417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3157</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3157" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3157" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3157" ref_url="https://www.suse.com/security/cve/CVE-2018-3157" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00041.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Sound). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3157/">CVE-2018-3157</cve>
	<bugzilla href="https://bugzilla.suse.com/1112149">SUSE bug 1112149</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3162</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3162" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3162" ref_url="https://www.suse.com/security/cve/CVE-2018-3162" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3162/">CVE-2018-3162</cve>
	<bugzilla href="https://bugzilla.suse.com/1112415">SUSE bug 1112415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3169</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3169" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3169" ref_url="https://www.suse.com/security/cve/CVE-2018-3169" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3933-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4064-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0057-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0057-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005380.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3169/">CVE-2018-3169</cve>
	<bugzilla href="https://bugzilla.suse.com/1112142">SUSE bug 1112142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112143">SUSE bug 1112143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112144">SUSE bug 1112144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112146">SUSE bug 1112146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112148">SUSE bug 1112148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112152">SUSE bug 1112152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116574">SUSE bug 1116574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3173</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3173" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3173" ref_url="https://www.suse.com/security/cve/CVE-2018-3173" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3173/">CVE-2018-3173</cve>
	<bugzilla href="https://bugzilla.suse.com/1112386">SUSE bug 1112386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3174</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3174" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3174" ref_url="https://www.suse.com/security/cve/CVE-2018-3174" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004805.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3972-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183972-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005775.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3478-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3174/">CVE-2018-3174</cve>
	<bugzilla href="https://bugzilla.suse.com/1112368">SUSE bug 1112368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3180</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3180" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3180" ref_url="https://www.suse.com/security/cve/CVE-2018-3180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3933-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4064-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0057-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0057-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005380.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-3180/">CVE-2018-3180</cve>
	<bugzilla href="https://bugzilla.suse.com/1112142">SUSE bug 1112142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112143">SUSE bug 1112143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112144">SUSE bug 1112144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112146">SUSE bug 1112146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112147">SUSE bug 1112147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112148">SUSE bug 1112148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112152">SUSE bug 1112152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116574">SUSE bug 1116574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3183</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3183" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3183" ref_url="https://www.suse.com/security/cve/CVE-2018-3183" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4064-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0057-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0057-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005380.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3183/">CVE-2018-3183</cve>
	<bugzilla href="https://bugzilla.suse.com/1112142">SUSE bug 1112142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112143">SUSE bug 1112143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112144">SUSE bug 1112144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112146">SUSE bug 1112146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112148">SUSE bug 1112148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112152">SUSE bug 1112152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116574">SUSE bug 1116574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120714">SUSE bug 1120714</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3185</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3185" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3185" ref_url="https://www.suse.com/security/cve/CVE-2018-3185" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-3185/">CVE-2018-3185</cve>
	<bugzilla href="https://bugzilla.suse.com/1112384">SUSE bug 1112384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3200</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3200" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3200" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3200" ref_url="https://www.suse.com/security/cve/CVE-2018-3200" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3200/">CVE-2018-3200</cve>
	<bugzilla href="https://bugzilla.suse.com/1112404">SUSE bug 1112404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3251</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3251" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3251" ref_url="https://www.suse.com/security/cve/CVE-2018-3251" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3972-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183972-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005775.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3478-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3251/">CVE-2018-3251</cve>
	<bugzilla href="https://bugzilla.suse.com/1112397">SUSE bug 1112397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3277</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3277" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3277" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3277" ref_url="https://www.suse.com/security/cve/CVE-2018-3277" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3277/">CVE-2018-3277</cve>
	<bugzilla href="https://bugzilla.suse.com/1112391">SUSE bug 1112391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183282" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3282</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3282" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3282" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3282" ref_url="https://www.suse.com/security/cve/CVE-2018-3282" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004805.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3972-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183972-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005775.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3478-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3282/">CVE-2018-3282</cve>
	<bugzilla href="https://bugzilla.suse.com/1112432">SUSE bug 1112432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183284" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3284</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3284" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3284" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3284" ref_url="https://www.suse.com/security/cve/CVE-2018-3284" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3284/">CVE-2018-3284</cve>
	<bugzilla href="https://bugzilla.suse.com/1112377">SUSE bug 1112377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183287" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3287</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3287" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3287" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3287" ref_url="https://www.suse.com/security/cve/CVE-2018-3287" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3287/">CVE-2018-3287</cve>
	<bugzilla href="https://bugzilla.suse.com/1112097">SUSE bug 1112097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3288</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3288" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3288" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3288" ref_url="https://www.suse.com/security/cve/CVE-2018-3288" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3288/">CVE-2018-3288</cve>
	<bugzilla href="https://bugzilla.suse.com/1112097">SUSE bug 1112097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3289</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3289" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3289" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3289" ref_url="https://www.suse.com/security/cve/CVE-2018-3289" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3289/">CVE-2018-3289</cve>
	<bugzilla href="https://bugzilla.suse.com/1112097">SUSE bug 1112097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3290</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3290" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3290" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3290" ref_url="https://www.suse.com/security/cve/CVE-2018-3290" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3290/">CVE-2018-3290</cve>
	<bugzilla href="https://bugzilla.suse.com/1112097">SUSE bug 1112097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3291</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3291" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3291" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3291" ref_url="https://www.suse.com/security/cve/CVE-2018-3291" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3291/">CVE-2018-3291</cve>
	<bugzilla href="https://bugzilla.suse.com/1112097">SUSE bug 1112097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183292" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3292</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3292" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3292" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3292" ref_url="https://www.suse.com/security/cve/CVE-2018-3292" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3292/">CVE-2018-3292</cve>
	<bugzilla href="https://bugzilla.suse.com/1112097">SUSE bug 1112097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183293" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3293</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3293" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3293" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3293" ref_url="https://www.suse.com/security/cve/CVE-2018-3293" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3293/">CVE-2018-3293</cve>
	<bugzilla href="https://bugzilla.suse.com/1112097">SUSE bug 1112097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3294</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3294" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3294" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3294" ref_url="https://www.suse.com/security/cve/CVE-2018-3294" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows low privileged attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3294/">CVE-2018-3294</cve>
	<bugzilla href="https://bugzilla.suse.com/1112097">SUSE bug 1112097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3295</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3295" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3295" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3295" ref_url="https://www.suse.com/security/cve/CVE-2018-3295" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3295/">CVE-2018-3295</cve>
	<bugzilla href="https://bugzilla.suse.com/1112097">SUSE bug 1112097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3296</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3296" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3296" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3296" ref_url="https://www.suse.com/security/cve/CVE-2018-3296" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3296/">CVE-2018-3296</cve>
	<bugzilla href="https://bugzilla.suse.com/1112097">SUSE bug 1112097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3297</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3297" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3297" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3297" ref_url="https://www.suse.com/security/cve/CVE-2018-3297" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3297/">CVE-2018-3297</cve>
	<bugzilla href="https://bugzilla.suse.com/1112097">SUSE bug 1112097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3298</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3298" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3298" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3298" ref_url="https://www.suse.com/security/cve/CVE-2018-3298" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3298/">CVE-2018-3298</cve>
	<bugzilla href="https://bugzilla.suse.com/1112097">SUSE bug 1112097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3309</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3309" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3309" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3309" ref_url="https://www.suse.com/security/cve/CVE-2018-3309" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is prior to 5.2.22. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3309/">CVE-2018-3309</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3613</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3613" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3613" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3613" ref_url="https://www.suse.com/security/cve/CVE-2018-3613" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004989.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00059.html" source="SUSE-SU"/>
    <description>
    Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3613/">CVE-2018-3613</cve>
	<bugzilla href="https://bugzilla.suse.com/1115916">SUSE bug 1115916</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3630</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3630" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3630" ref_url="https://www.suse.com/security/cve/CVE-2018-3630" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0579-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0581-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005183.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00046.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3630/">CVE-2018-3630</cve>
	<bugzilla href="https://bugzilla.suse.com/1127822">SUSE bug 1127822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3639</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3639" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3639" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3639" ref_url="https://www.suse.com/security/cve/CVE-2018-3639" source="SUSE CVE"/>
		<reference ref_id="BLOG-SPECTREV4" ref_url="https://www.suse.com/c/suse-addresses-spectre-variant-4/" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1362-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1363-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1375-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1376-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1377-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1377-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1378-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004165.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004169.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1699-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004230.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1926-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1935-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004322.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004334.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004357.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2304-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004404.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2331-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004716.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004419.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004511.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2565-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004518.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004532.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004542.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2973-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2973-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004715.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3064-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004728.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3064-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005388.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0049-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005437.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1211-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2028-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005762.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007405.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3969-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009871.html" source="SUSE-SU"/>
		<reference ref_id="TID000019189" ref_url="https://www.suse.com/support/kb/doc/?id=000019189" source="SUSE-SU"/>
		<reference ref_id="TID000019439" ref_url="https://www.suse.com/support/kb/doc/?id=000019439" source="SUSE-SU"/>
		<reference ref_id="TID7022512" ref_url="https://www.suse.com/support/kb/doc/?id=7022512" source="SUSE-SU"/>
		<reference ref_id="TID7022937" ref_url="https://www.suse.com/support/kb/doc/?id=7022937" source="SUSE-SU"/>
		<reference ref_id="TID7023836" ref_url="https://www.suse.com/support/kb/doc/?id=7023836" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1418-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1487-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1623-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1773-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1904-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2402-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3709-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1439-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html" source="SUSE-SU"/>
    <description>
    Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3639/">CVE-2018-3639</cve>
	<bugzilla href="https://bugzilla.suse.com/1074701">SUSE bug 1074701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085235">SUSE bug 1085235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085308">SUSE bug 1085308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087078">SUSE bug 1087078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092631">SUSE bug 1092631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092885">SUSE bug 1092885</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094912">SUSE bug 1094912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1100394">SUSE bug 1100394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102640">SUSE bug 1102640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105412">SUSE bug 1105412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172781">SUSE bug 1172781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172782">SUSE bug 1172782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172783">SUSE bug 1172783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173489">SUSE bug 1173489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201877">SUSE bug 1201877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629040" comment="ucode-intel-20210216-2.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3640</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3640" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3640" ref_url="https://www.suse.com/security/cve/CVE-2018-3640" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1926-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1935-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004322.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2331-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004716.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004419.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004422.html" source="SUSE-SU"/>
		<reference ref_id="TID000019198" ref_url="https://www.suse.com/support/kb/doc/?id=000019198" source="SUSE-SU"/>
		<reference ref_id="TID7022512" ref_url="https://www.suse.com/support/kb/doc/?id=7022512" source="SUSE-SU"/>
		<reference ref_id="TID7022950" ref_url="https://www.suse.com/support/kb/doc/?id=7022950" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1904-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00058.html" source="SUSE-SU"/>
    <description>
    Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3640/">CVE-2018-3640</cve>
	<bugzilla href="https://bugzilla.suse.com/1074701">SUSE bug 1074701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087078">SUSE bug 1087078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087083">SUSE bug 1087083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094912">SUSE bug 1094912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1100394">SUSE bug 1100394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175912">SUSE bug 1175912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201877">SUSE bug 1201877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629040" comment="ucode-intel-20210216-2.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3646</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3646" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3646" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3646" ref_url="https://www.suse.com/security/cve/CVE-2018-3646" source="SUSE CVE"/>
		<reference ref_id="L1TF-BLOG-SUSE" ref_url="https://www.suse.com/c/suse-addresses-the-l1-terminal-fault-issue/" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2331-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004716.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004417.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004419.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2341-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2342-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004426.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2344-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004430.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004435.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004437.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2356-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004440.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004442.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2363-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2364-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004445.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2369-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004450.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004451.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2384-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004452.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004455.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2409-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004464.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2410-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004468.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2414-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2426-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004473.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2450-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004485.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004486.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2474-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004487.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004490.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004492.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2483-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004493.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004529.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2963-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20182963-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005008.html" source="SUSE-SU"/>
		<reference ref_id="TID000019216" ref_url="https://www.suse.com/support/kb/doc/?id=000019216" source="SUSE-SU"/>
		<reference ref_id="TID000019230" ref_url="https://www.suse.com/support/kb/doc/?id=000019230" source="SUSE-SU"/>
		<reference ref_id="TID000019335" ref_url="https://www.suse.com/support/kb/doc/?id=000019335" source="SUSE-SU"/>
		<reference ref_id="TID000019439" ref_url="https://www.suse.com/support/kb/doc/?id=000019439" source="SUSE-SU"/>
		<reference ref_id="TID7023077" ref_url="https://www.suse.com/support/kb/doc/?id=7023077" source="SUSE-SU"/>
		<reference ref_id="TID7023078" ref_url="https://www.suse.com/support/kb/doc/?id=7023078" source="SUSE-SU"/>
		<reference ref_id="TID7023312" ref_url="https://www.suse.com/support/kb/doc/?id=7023312" source="SUSE-SU"/>
		<reference ref_id="TID7023497" ref_url="https://www.suse.com/support/kb/doc/?id=7023497" source="SUSE-SU"/>
		<reference ref_id="TID7023836" ref_url="https://www.suse.com/support/kb/doc/?id=7023836" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00073.html" source="SUSE-SU"/>
    <description>
    Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3646/">CVE-2018-3646</cve>
	<bugzilla href="https://bugzilla.suse.com/1087078">SUSE bug 1087078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087081">SUSE bug 1087081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089343">SUSE bug 1089343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091107">SUSE bug 1091107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099306">SUSE bug 1099306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104365">SUSE bug 1104365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104894">SUSE bug 1104894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106548">SUSE bug 1106548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113534">SUSE bug 1113534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136865">SUSE bug 1136865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201877">SUSE bug 1201877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3665</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3665" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3665" ref_url="https://www.suse.com/security/cve/CVE-2018-3665" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1762-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004211.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004230.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1855-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004261.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1942-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004263.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1943-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004265.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1944-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1946-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004268.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004269.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1981-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2037-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004306.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004315.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2081-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004328.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004329.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004330.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004332.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004333.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004336.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004337.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004338.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2099-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20182099-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004343.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004347.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004348.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004349.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004351.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004385.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2250-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004386.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2254-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004387.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004388.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2262-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004389.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004390.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004391.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004392.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004393.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004394.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004395.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004397.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004499.html" source="SUSE-SU"/>
		<reference ref_id="TID000019231" ref_url="https://www.suse.com/support/kb/doc/?id=000019231" source="SUSE-SU"/>
		<reference ref_id="TID000019261" ref_url="https://www.suse.com/support/kb/doc/?id=000019261" source="SUSE-SU"/>
		<reference ref_id="TID000019439" ref_url="https://www.suse.com/support/kb/doc/?id=000019439" source="SUSE-SU"/>
		<reference ref_id="TID7022512" ref_url="https://www.suse.com/support/kb/doc/?id=7022512" source="SUSE-SU"/>
		<reference ref_id="TID7023076" ref_url="https://www.suse.com/support/kb/doc/?id=7023076" source="SUSE-SU"/>
		<reference ref_id="TID7023167" ref_url="https://www.suse.com/support/kb/doc/?id=7023167" source="SUSE-SU"/>
		<reference ref_id="TID7023836" ref_url="https://www.suse.com/support/kb/doc/?id=7023836" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1773-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2116-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00012.html" source="SUSE-SU"/>
    <description>
    System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3665/">CVE-2018-3665</cve>
	<bugzilla href="https://bugzilla.suse.com/1087078">SUSE bug 1087078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087086">SUSE bug 1087086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090338">SUSE bug 1090338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095241">SUSE bug 1095241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095242">SUSE bug 1095242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096740">SUSE bug 1096740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1100091">SUSE bug 1100091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1100555">SUSE bug 1100555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3740</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3740" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3740" ref_url="https://www.suse.com/security/cve/CVE-2018-3740" source="SUSE CVE"/>
    <description>
    A specially crafted HTML fragment can cause Sanitize gem for Ruby to allow non-whitelisted attributes to be used on a whitelisted HTML element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-3740/">CVE-2018-3740</cve>
	<bugzilla href="https://bugzilla.suse.com/1086191">SUSE bug 1086191</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20183741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-3741</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-3741" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3741" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-3741" ref_url="https://www.suse.com/security/cve/CVE-2018-3741" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005828.html" source="SUSE-SU"/>
    <description>
    There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-3741/">CVE-2018-3741</cve>
	<bugzilla href="https://bugzilla.suse.com/1085967">SUSE bug 1085967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086598">SUSE bug 1086598</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4013</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4013" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4013" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4013" ref_url="https://www.suse.com/security/cve/CVE-2018-4013" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00026.html" source="SUSE-SU"/>
    <description>
    An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4013/">CVE-2018-4013</cve>
	<bugzilla href="https://bugzilla.suse.com/1114779">SUSE bug 1114779</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694827" comment="libBasicUsageEnvironment1-2019.06.28-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260574" comment="libBasicUsageEnvironment1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694828" comment="libUsageEnvironment3-2019.06.28-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260576" comment="libUsageEnvironment3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694829" comment="libgroupsock8-2019.06.28-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260578" comment="libgroupsock8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694830" comment="libliveMedia66-2019.06.28-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260580" comment="libliveMedia66 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4088</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4088" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4088" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4088" ref_url="https://www.suse.com/security/cve/CVE-2018-4088" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4088/">CVE-2018-4088</cve>
	<bugzilla href="https://bugzilla.suse.com/1075775">SUSE bug 1075775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077535">SUSE bug 1077535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184096" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4096</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4096" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4096" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4096" ref_url="https://www.suse.com/security/cve/CVE-2018-4096" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4096/">CVE-2018-4096</cve>
	<bugzilla href="https://bugzilla.suse.com/1075775">SUSE bug 1075775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077535">SUSE bug 1077535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4101</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4101" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4101" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4101" ref_url="https://www.suse.com/security/cve/CVE-2018-4101" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4101/">CVE-2018-4101</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4113</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4113" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4113" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4113" ref_url="https://www.suse.com/security/cve/CVE-2018-4113" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves a JavaScriptCore function in the "WebKit" component. It allows attackers to trigger an assertion failure by leveraging improper array indexing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-4113/">CVE-2018-4113</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4114</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4114" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4114" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4114" ref_url="https://www.suse.com/security/cve/CVE-2018-4114" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4114/">CVE-2018-4114</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4117</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4117" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4117" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4117" ref_url="https://www.suse.com/security/cve/CVE-2018-4117" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-4117/">CVE-2018-4117</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4118</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4118" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4118" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4118" ref_url="https://www.suse.com/security/cve/CVE-2018-4118" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4118/">CVE-2018-4118</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4119</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4119" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4119" ref_url="https://www.suse.com/security/cve/CVE-2018-4119" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4119/">CVE-2018-4119</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4120</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4120" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4120" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4120" ref_url="https://www.suse.com/security/cve/CVE-2018-4120" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4120/">CVE-2018-4120</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184122" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4122</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4122" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4122" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4122" ref_url="https://www.suse.com/security/cve/CVE-2018-4122" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4122/">CVE-2018-4122</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4125</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4125" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4125" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4125" ref_url="https://www.suse.com/security/cve/CVE-2018-4125" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4125/">CVE-2018-4125</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4127</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4127" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4127" ref_url="https://www.suse.com/security/cve/CVE-2018-4127" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4127/">CVE-2018-4127</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4128</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4128" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4128" ref_url="https://www.suse.com/security/cve/CVE-2018-4128" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4128/">CVE-2018-4128</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4129</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4129" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4129" ref_url="https://www.suse.com/security/cve/CVE-2018-4129" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-4129/">CVE-2018-4129</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4133</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4133" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4133" ref_url="https://www.suse.com/security/cve/CVE-2018-4133" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-4133/">CVE-2018-4133</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4146</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4146" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4146" ref_url="https://www.suse.com/security/cve/CVE-2018-4146" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows attackers to cause a denial of service (memory corruption) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-4146/">CVE-2018-4146</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4161</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4161" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4161" ref_url="https://www.suse.com/security/cve/CVE-2018-4161" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4161/">CVE-2018-4161</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4162</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4162" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4162" ref_url="https://www.suse.com/security/cve/CVE-2018-4162" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4162/">CVE-2018-4162</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4163</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4163" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4163" ref_url="https://www.suse.com/security/cve/CVE-2018-4163" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4163/">CVE-2018-4163</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4165</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4165" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4165" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4165" ref_url="https://www.suse.com/security/cve/CVE-2018-4165" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4165/">CVE-2018-4165</cve>
	<bugzilla href="https://bugzilla.suse.com/1088182">SUSE bug 1088182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4180</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4180" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4180" ref_url="https://www.suse.com/security/cve/CVE-2018-4180" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004381.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00038.html" source="SUSE-SU"/>
    <description>
    In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4180/">CVE-2018-4180</cve>
	<bugzilla href="https://bugzilla.suse.com/1096405">SUSE bug 1096405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096408">SUSE bug 1096408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4181</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4181" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4181" ref_url="https://www.suse.com/security/cve/CVE-2018-4181" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004381.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00038.html" source="SUSE-SU"/>
    <description>
    In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-4181/">CVE-2018-4181</cve>
	<bugzilla href="https://bugzilla.suse.com/1096406">SUSE bug 1096406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096408">SUSE bug 1096408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105281">SUSE bug 1105281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4182</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4182" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4182" ref_url="https://www.suse.com/security/cve/CVE-2018-4182" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004381.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00038.html" source="SUSE-SU"/>
    <description>
    In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4182/">CVE-2018-4182</cve>
	<bugzilla href="https://bugzilla.suse.com/1096407">SUSE bug 1096407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096408">SUSE bug 1096408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105281">SUSE bug 1105281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4183</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4183" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4183" ref_url="https://www.suse.com/security/cve/CVE-2018-4183" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004381.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00038.html" source="SUSE-SU"/>
    <description>
    In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4183/">CVE-2018-4183</cve>
	<bugzilla href="https://bugzilla.suse.com/1096407">SUSE bug 1096407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096408">SUSE bug 1096408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4190</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4190" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4190" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4190" ref_url="https://www.suse.com/security/cve/CVE-2018-4190" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004321.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive credential information that is transmitted during a CSS mask-image fetch.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4190/">CVE-2018-4190</cve>
	<bugzilla href="https://bugzilla.suse.com/1097693">SUSE bug 1097693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4191</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4191" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4191" ref_url="https://www.suse.com/security/cve/CVE-2018-4191" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4191/">CVE-2018-4191</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4197</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4197" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4197" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4197" ref_url="https://www.suse.com/security/cve/CVE-2018-4197" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4197/">CVE-2018-4197</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4199</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4199" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4199" ref_url="https://www.suse.com/security/cve/CVE-2018-4199" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004321.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4199/">CVE-2018-4199</cve>
	<bugzilla href="https://bugzilla.suse.com/1097693">SUSE bug 1097693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4200</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4200" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4200" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4200" ref_url="https://www.suse.com/security/cve/CVE-2018-4200" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4200/">CVE-2018-4200</cve>
	<bugzilla href="https://bugzilla.suse.com/1092280">SUSE bug 1092280</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4204</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4204" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4204" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4204" ref_url="https://www.suse.com/security/cve/CVE-2018-4204" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4204/">CVE-2018-4204</cve>
	<bugzilla href="https://bugzilla.suse.com/1092279">SUSE bug 1092279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4207</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4207" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4207" ref_url="https://www.suse.com/security/cve/CVE-2018-4207" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4207/">CVE-2018-4207</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4208</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4208" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4208" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4208" ref_url="https://www.suse.com/security/cve/CVE-2018-4208" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4208/">CVE-2018-4208</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4209</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4209" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4209" ref_url="https://www.suse.com/security/cve/CVE-2018-4209" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4209/">CVE-2018-4209</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4210</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4210" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4210" ref_url="https://www.suse.com/security/cve/CVE-2018-4210" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in javascript core. This issue was addressed with improved checks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4210/">CVE-2018-4210</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4212</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4212" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4212" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4212" ref_url="https://www.suse.com/security/cve/CVE-2018-4212" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4212/">CVE-2018-4212</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4213</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4213" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4213" ref_url="https://www.suse.com/security/cve/CVE-2018-4213" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4213/">CVE-2018-4213</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4218</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4218" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4218" ref_url="https://www.suse.com/security/cve/CVE-2018-4218" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004321.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers an @generatorState use-after-free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4218/">CVE-2018-4218</cve>
	<bugzilla href="https://bugzilla.suse.com/1097693">SUSE bug 1097693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4222</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4222" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4222" ref_url="https://www.suse.com/security/cve/CVE-2018-4222" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004321.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages a getWasmBufferFromValue out-of-bounds read during WebAssembly compilation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4222/">CVE-2018-4222</cve>
	<bugzilla href="https://bugzilla.suse.com/1097693">SUSE bug 1097693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4232</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4232" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4232" ref_url="https://www.suse.com/security/cve/CVE-2018-4232" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004321.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to overwrite cookies via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-4232/">CVE-2018-4232</cve>
	<bugzilla href="https://bugzilla.suse.com/1097693">SUSE bug 1097693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184233" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4233</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4233" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4233" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4233" ref_url="https://www.suse.com/security/cve/CVE-2018-4233" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004321.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4233/">CVE-2018-4233</cve>
	<bugzilla href="https://bugzilla.suse.com/1097693">SUSE bug 1097693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184246" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4246</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4246" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4246" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4246" ref_url="https://www.suse.com/security/cve/CVE-2018-4246" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages type confusion.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4246/">CVE-2018-4246</cve>
	<bugzilla href="https://bugzilla.suse.com/1104169">SUSE bug 1104169</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4261</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4261" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4261" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4261" ref_url="https://www.suse.com/security/cve/CVE-2018-4261" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4261/">CVE-2018-4261</cve>
	<bugzilla href="https://bugzilla.suse.com/1104169">SUSE bug 1104169</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4262</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4262" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4262" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4262" ref_url="https://www.suse.com/security/cve/CVE-2018-4262" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
    <description>
    In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, multiple memory corruption issues were addressed with improved memory handling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4262/">CVE-2018-4262</cve>
	<bugzilla href="https://bugzilla.suse.com/1104169">SUSE bug 1104169</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184263" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4263</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4263" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4263" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4263" ref_url="https://www.suse.com/security/cve/CVE-2018-4263" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4263/">CVE-2018-4263</cve>
	<bugzilla href="https://bugzilla.suse.com/1104169">SUSE bug 1104169</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184264" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4264</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4264" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4264" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4264" ref_url="https://www.suse.com/security/cve/CVE-2018-4264" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4264/">CVE-2018-4264</cve>
	<bugzilla href="https://bugzilla.suse.com/1104169">SUSE bug 1104169</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4265</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4265" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4265" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4265" ref_url="https://www.suse.com/security/cve/CVE-2018-4265" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4265/">CVE-2018-4265</cve>
	<bugzilla href="https://bugzilla.suse.com/1104169">SUSE bug 1104169</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4266</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4266" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4266" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4266" ref_url="https://www.suse.com/security/cve/CVE-2018-4266" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
    <description>
    A race condition was addressed with additional validation. This issue affected versions prior toiVersions prior to: OS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-4266/">CVE-2018-4266</cve>
	<bugzilla href="https://bugzilla.suse.com/1104169">SUSE bug 1104169</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4267</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4267" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4267" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4267" ref_url="https://www.suse.com/security/cve/CVE-2018-4267" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4267/">CVE-2018-4267</cve>
	<bugzilla href="https://bugzilla.suse.com/1104169">SUSE bug 1104169</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4270</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4270" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4270" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4270" ref_url="https://www.suse.com/security/cve/CVE-2018-4270" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4270/">CVE-2018-4270</cve>
	<bugzilla href="https://bugzilla.suse.com/1104169">SUSE bug 1104169</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4272</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4272" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4272" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4272" ref_url="https://www.suse.com/security/cve/CVE-2018-4272" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4272/">CVE-2018-4272</cve>
	<bugzilla href="https://bugzilla.suse.com/1104169">SUSE bug 1104169</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4273</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4273" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4273" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4273" ref_url="https://www.suse.com/security/cve/CVE-2018-4273" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4273/">CVE-2018-4273</cve>
	<bugzilla href="https://bugzilla.suse.com/1104169">SUSE bug 1104169</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184278" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4278</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4278" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4278" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4278" ref_url="https://www.suse.com/security/cve/CVE-2018-4278" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
    <description>
    In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-4278/">CVE-2018-4278</cve>
	<bugzilla href="https://bugzilla.suse.com/1104169">SUSE bug 1104169</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184284" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4284</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4284" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4284" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4284" ref_url="https://www.suse.com/security/cve/CVE-2018-4284" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
    <description>
    A type confusion issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4284/">CVE-2018-4284</cve>
	<bugzilla href="https://bugzilla.suse.com/1104169">SUSE bug 1104169</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184299" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4299</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4299" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4299" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4299" ref_url="https://www.suse.com/security/cve/CVE-2018-4299" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4299/">CVE-2018-4299</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184306" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4306</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4306" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4306" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4306" ref_url="https://www.suse.com/security/cve/CVE-2018-4306" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4306/">CVE-2018-4306</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4309</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4309" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4309" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4309" ref_url="https://www.suse.com/security/cve/CVE-2018-4309" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-4309/">CVE-2018-4309</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4312</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4312" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4312" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4312" ref_url="https://www.suse.com/security/cve/CVE-2018-4312" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4312/">CVE-2018-4312</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184314" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4314</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4314" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4314" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4314" ref_url="https://www.suse.com/security/cve/CVE-2018-4314" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4314/">CVE-2018-4314</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184315" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4315</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4315" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4315" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4315" ref_url="https://www.suse.com/security/cve/CVE-2018-4315" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4315/">CVE-2018-4315</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4316</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4316" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4316" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4316" ref_url="https://www.suse.com/security/cve/CVE-2018-4316" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4316/">CVE-2018-4316</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4317</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4317" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4317" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4317" ref_url="https://www.suse.com/security/cve/CVE-2018-4317" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4317/">CVE-2018-4317</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184318" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4318</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4318" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4318" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4318" ref_url="https://www.suse.com/security/cve/CVE-2018-4318" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4318/">CVE-2018-4318</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184319" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4319</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4319" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4319" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4319" ref_url="https://www.suse.com/security/cve/CVE-2018-4319" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-4319/">CVE-2018-4319</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184323" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4323</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4323" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4323" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4323" ref_url="https://www.suse.com/security/cve/CVE-2018-4323" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4323/">CVE-2018-4323</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184328" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4328</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4328" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4328" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4328" ref_url="https://www.suse.com/security/cve/CVE-2018-4328" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4328/">CVE-2018-4328</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4345</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4345" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4345" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4345" ref_url="https://www.suse.com/security/cve/CVE-2018-4345" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4345/">CVE-2018-4345</cve>
	<bugzilla href="https://bugzilla.suse.com/1116998">SUSE bug 1116998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184358" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4358</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4358" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4358" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4358" ref_url="https://www.suse.com/security/cve/CVE-2018-4358" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4358/">CVE-2018-4358</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184359" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4359</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4359" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4359" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4359" ref_url="https://www.suse.com/security/cve/CVE-2018-4359" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4359/">CVE-2018-4359</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184361" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4361</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4361" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4361" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4361" ref_url="https://www.suse.com/security/cve/CVE-2018-4361" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    A memory consumption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4361/">CVE-2018-4361</cve>
	<bugzilla href="https://bugzilla.suse.com/1110279">SUSE bug 1110279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4372</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4372" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4372" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4372" ref_url="https://www.suse.com/security/cve/CVE-2018-4372" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4372/">CVE-2018-4372</cve>
	<bugzilla href="https://bugzilla.suse.com/1116998">SUSE bug 1116998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4373</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4373" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4373" ref_url="https://www.suse.com/security/cve/CVE-2018-4373" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4373/">CVE-2018-4373</cve>
	<bugzilla href="https://bugzilla.suse.com/1116998">SUSE bug 1116998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4375</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4375" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4375" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4375" ref_url="https://www.suse.com/security/cve/CVE-2018-4375" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4375/">CVE-2018-4375</cve>
	<bugzilla href="https://bugzilla.suse.com/1116998">SUSE bug 1116998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4376</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4376" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4376" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4376" ref_url="https://www.suse.com/security/cve/CVE-2018-4376" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4376/">CVE-2018-4376</cve>
	<bugzilla href="https://bugzilla.suse.com/1116998">SUSE bug 1116998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4378</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4378" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4378" ref_url="https://www.suse.com/security/cve/CVE-2018-4378" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4378/">CVE-2018-4378</cve>
	<bugzilla href="https://bugzilla.suse.com/1116998">SUSE bug 1116998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4382</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4382" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4382" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4382" ref_url="https://www.suse.com/security/cve/CVE-2018-4382" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4382/">CVE-2018-4382</cve>
	<bugzilla href="https://bugzilla.suse.com/1116998">SUSE bug 1116998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4386</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4386" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4386" ref_url="https://www.suse.com/security/cve/CVE-2018-4386" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4386/">CVE-2018-4386</cve>
	<bugzilla href="https://bugzilla.suse.com/1116998">SUSE bug 1116998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4392</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4392" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4392" ref_url="https://www.suse.com/security/cve/CVE-2018-4392" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4392/">CVE-2018-4392</cve>
	<bugzilla href="https://bugzilla.suse.com/1116998">SUSE bug 1116998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4416</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4416" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4416" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4416" ref_url="https://www.suse.com/security/cve/CVE-2018-4416" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4416/">CVE-2018-4416</cve>
	<bugzilla href="https://bugzilla.suse.com/1116998">SUSE bug 1116998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4437</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4437" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4437" ref_url="https://www.suse.com/security/cve/CVE-2018-4437" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005158.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00014.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4437/">CVE-2018-4437</cve>
	<bugzilla href="https://bugzilla.suse.com/1119553">SUSE bug 1119553</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4438</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4438" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4438" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4438" ref_url="https://www.suse.com/security/cve/CVE-2018-4438" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005158.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00014.html" source="SUSE-SU"/>
    <description>
    A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4438/">CVE-2018-4438</cve>
	<bugzilla href="https://bugzilla.suse.com/1119554">SUSE bug 1119554</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4441</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4441" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4441" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4441" ref_url="https://www.suse.com/security/cve/CVE-2018-4441" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005158.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00014.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4441/">CVE-2018-4441</cve>
	<bugzilla href="https://bugzilla.suse.com/1119555">SUSE bug 1119555</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4442</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4442" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4442" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4442" ref_url="https://www.suse.com/security/cve/CVE-2018-4442" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005158.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00014.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4442/">CVE-2018-4442</cve>
	<bugzilla href="https://bugzilla.suse.com/1119556">SUSE bug 1119556</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184443" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4443</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4443" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4443" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4443" ref_url="https://www.suse.com/security/cve/CVE-2018-4443" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005158.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00014.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4443/">CVE-2018-4443</cve>
	<bugzilla href="https://bugzilla.suse.com/1119557">SUSE bug 1119557</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4464</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4464" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4464" ref_url="https://www.suse.com/security/cve/CVE-2018-4464" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005158.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00014.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-4464/">CVE-2018-4464</cve>
	<bugzilla href="https://bugzilla.suse.com/1119553">SUSE bug 1119553</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119558">SUSE bug 1119558</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20184700" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-4700</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-4700" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4700" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-4700" ref_url="https://www.suse.com/security/cve/CVE-2018-4700" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004958.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00039.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a duplicate of CVE-2018-4300. Notes: All CVE users should reference CVE-2018-4300 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4700/">CVE-2018-4700</cve>
	<bugzilla href="https://bugzilla.suse.com/1115750">SUSE bug 1115750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131480">SUSE bug 1131480</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5072</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5072" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5072" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5072" ref_url="https://www.suse.com/security/cve/CVE-2018-5072" source="SUSE CVE"/>
    <description>
    Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.8/CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-5072/">CVE-2018-5072</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694922" comment="transmission-common-2.94-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152179" comment="transmission-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694923" comment="transmission-gtk-2.94-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152180" comment="transmission-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694924" comment="transmission-gtk-lang-2.94-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152181" comment="transmission-gtk-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5089</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5089" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5089" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5089" ref_url="https://www.suse.com/security/cve/CVE-2018-5089" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00077.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 52.6, Firefox ESR &lt; 52.6, and Firefox &lt; 58.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5089/">CVE-2018-5089</cve>
	<bugzilla href="https://bugzilla.suse.com/1077291">SUSE bug 1077291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185091" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5091</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5091" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5091" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5091" ref_url="https://www.suse.com/security/cve/CVE-2018-5091" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00054.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR &lt; 52.6 and Firefox &lt; 58.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5091/">CVE-2018-5091</cve>
	<bugzilla href="https://bugzilla.suse.com/1077291">SUSE bug 1077291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5095</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5095" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5095" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5095" ref_url="https://www.suse.com/security/cve/CVE-2018-5095" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00077.html" source="SUSE-SU"/>
    <description>
    An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.6, Firefox ESR &lt; 52.6, and Firefox &lt; 58.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5095/">CVE-2018-5095</cve>
	<bugzilla href="https://bugzilla.suse.com/1077291">SUSE bug 1077291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185096" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5096</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5096" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5096" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5096" ref_url="https://www.suse.com/security/cve/CVE-2018-5096" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00077.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR &lt; 52.6 and Thunderbird &lt; 52.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5096/">CVE-2018-5096</cve>
	<bugzilla href="https://bugzilla.suse.com/1077291">SUSE bug 1077291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5097</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5097" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5097" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5097" ref_url="https://www.suse.com/security/cve/CVE-2018-5097" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00077.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the transformation. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.6, Firefox ESR &lt; 52.6, and Firefox &lt; 58.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5097/">CVE-2018-5097</cve>
	<bugzilla href="https://bugzilla.suse.com/1077291">SUSE bug 1077291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5098</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5098" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5098" ref_url="https://www.suse.com/security/cve/CVE-2018-5098" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00077.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.6, Firefox ESR &lt; 52.6, and Firefox &lt; 58.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5098/">CVE-2018-5098</cve>
	<bugzilla href="https://bugzilla.suse.com/1077291">SUSE bug 1077291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5099</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5099" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5099" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5099" ref_url="https://www.suse.com/security/cve/CVE-2018-5099" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00077.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been freed, resulting in a potentially exploitable crash when these references are used. This vulnerability affects Thunderbird &lt; 52.6, Firefox ESR &lt; 52.6, and Firefox &lt; 58.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5099/">CVE-2018-5099</cve>
	<bugzilla href="https://bugzilla.suse.com/1077291">SUSE bug 1077291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185102" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5102</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5102" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5102" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5102" ref_url="https://www.suse.com/security/cve/CVE-2018-5102" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00077.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.6, Firefox ESR &lt; 52.6, and Firefox &lt; 58.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5102/">CVE-2018-5102</cve>
	<bugzilla href="https://bugzilla.suse.com/1077291">SUSE bug 1077291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5103</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5103" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5103" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5103" ref_url="https://www.suse.com/security/cve/CVE-2018-5103" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00077.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.6, Firefox ESR &lt; 52.6, and Firefox &lt; 58.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5103/">CVE-2018-5103</cve>
	<bugzilla href="https://bugzilla.suse.com/1077291">SUSE bug 1077291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5104</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5104" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5104" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5104" ref_url="https://www.suse.com/security/cve/CVE-2018-5104" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00077.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.6, Firefox ESR &lt; 52.6, and Firefox &lt; 58.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5104/">CVE-2018-5104</cve>
	<bugzilla href="https://bugzilla.suse.com/1077291">SUSE bug 1077291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5117</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5117" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5117" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5117" ref_url="https://www.suse.com/security/cve/CVE-2018-5117" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00077.html" source="SUSE-SU"/>
    <description>
    If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed URL. This issue could result in the wrong URL being displayed as a location, which can mislead users to believe they are on a different site than the one loaded. This vulnerability affects Thunderbird &lt; 52.6, Firefox ESR &lt; 52.6, and Firefox &lt; 58.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-5117/">CVE-2018-5117</cve>
	<bugzilla href="https://bugzilla.suse.com/1077291">SUSE bug 1077291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5125</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5125" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5125" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5125" ref_url="https://www.suse.com/security/cve/CVE-2018-5125" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003882.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0818-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00101.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 52.7, Firefox ESR &lt; 52.7, and Firefox &lt; 59.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5125/">CVE-2018-5125</cve>
	<bugzilla href="https://bugzilla.suse.com/1085130">SUSE bug 1085130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5127</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5127" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5127" ref_url="https://www.suse.com/security/cve/CVE-2018-5127" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003882.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0818-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00101.html" source="SUSE-SU"/>
    <description>
    A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.7, Firefox ESR &lt; 52.7, and Firefox &lt; 59.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5127/">CVE-2018-5127</cve>
	<bugzilla href="https://bugzilla.suse.com/1085130">SUSE bug 1085130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5129</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5129" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5129" ref_url="https://www.suse.com/security/cve/CVE-2018-5129" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003882.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0818-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00101.html" source="SUSE-SU"/>
    <description>
    A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird &lt; 52.7, Firefox ESR &lt; 52.7, and Firefox &lt; 59.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5129/">CVE-2018-5129</cve>
	<bugzilla href="https://bugzilla.suse.com/1085130">SUSE bug 1085130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5130</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5130" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5130" ref_url="https://www.suse.com/security/cve/CVE-2018-5130" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003882.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00037.html" source="SUSE-SU"/>
    <description>
    When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered. This vulnerability affects Firefox ESR &lt; 52.7 and Firefox &lt; 59.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5130/">CVE-2018-5130</cve>
	<bugzilla href="https://bugzilla.suse.com/1085130">SUSE bug 1085130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5131</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5131" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5131" ref_url="https://www.suse.com/security/cve/CVE-2018-5131" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003882.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00037.html" source="SUSE-SU"/>
    <description>
    Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessible to users if they share a common profile while browsing. This vulnerability affects Firefox ESR &lt; 52.7 and Firefox &lt; 59.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-5131/">CVE-2018-5131</cve>
	<bugzilla href="https://bugzilla.suse.com/1085130">SUSE bug 1085130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5144</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5144" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5144" ref_url="https://www.suse.com/security/cve/CVE-2018-5144" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003882.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0818-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00101.html" source="SUSE-SU"/>
    <description>
    An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR &lt; 52.7 and Thunderbird &lt; 52.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-5144/">CVE-2018-5144</cve>
	<bugzilla href="https://bugzilla.suse.com/1085130">SUSE bug 1085130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5145</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5145" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5145" ref_url="https://www.suse.com/security/cve/CVE-2018-5145" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003882.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0818-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00101.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR &lt; 52.7 and Thunderbird &lt; 52.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5145/">CVE-2018-5145</cve>
	<bugzilla href="https://bugzilla.suse.com/1085130">SUSE bug 1085130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5146</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5146" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5146" ref_url="https://www.suse.com/security/cve/CVE-2018-5146" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003882.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0737-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0805-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0818-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00101.html" source="SUSE-SU"/>
    <description>
    An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox &lt; 59.0.1, Firefox ESR &lt; 52.7.2, and Thunderbird &lt; 52.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5146/">CVE-2018-5146</cve>
	<bugzilla href="https://bugzilla.suse.com/1085671">SUSE bug 1085671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085687">SUSE bug 1085687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180395">SUSE bug 1180395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481533" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151122" comment="libvorbis0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630097" comment="libvorbis0-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151123" comment="libvorbis0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481534" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151124" comment="libvorbisenc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630098" comment="libvorbisenc2-32bit-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151125" comment="libvorbisenc2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481535" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151126" comment="libvorbisfile3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5147</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5147" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5147" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5147" ref_url="https://www.suse.com/security/cve/CVE-2018-5147" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003882.html" source="SUSE-SU"/>
    <description>
    The libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in place of libvorbis on Android and ARM platforms. This vulnerability affects Firefox ESR &lt; 52.7.2 and Firefox &lt; 59.0.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5147/">CVE-2018-5147</cve>
	<bugzilla href="https://bugzilla.suse.com/1085671">SUSE bug 1085671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085687">SUSE bug 1085687</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5148</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5148" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5148" ref_url="https://www.suse.com/security/cve/CVE-2018-5148" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003882.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0843-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00109.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR &lt; 52.7.3 and Firefox &lt; 59.0.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5148/">CVE-2018-5148</cve>
	<bugzilla href="https://bugzilla.suse.com/1087059">SUSE bug 1087059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5150</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5150" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5150" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5150" ref_url="https://www.suse.com/security/cve/CVE-2018-5150" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00089.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 52.8, Thunderbird ESR &lt; 52.8, Firefox &lt; 60, and Firefox ESR &lt; 52.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5150/">CVE-2018-5150</cve>
	<bugzilla href="https://bugzilla.suse.com/1092548">SUSE bug 1092548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092611">SUSE bug 1092611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093969">SUSE bug 1093969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093970">SUSE bug 1093970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093971">SUSE bug 1093971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093972">SUSE bug 1093972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093973">SUSE bug 1093973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5154</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5154" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5154" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5154" ref_url="https://www.suse.com/security/cve/CVE-2018-5154" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00089.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.8, Thunderbird ESR &lt; 52.8, Firefox &lt; 60, and Firefox ESR &lt; 52.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5154/">CVE-2018-5154</cve>
	<bugzilla href="https://bugzilla.suse.com/1092548">SUSE bug 1092548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092611">SUSE bug 1092611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093969">SUSE bug 1093969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093970">SUSE bug 1093970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093971">SUSE bug 1093971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093972">SUSE bug 1093972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093973">SUSE bug 1093973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5155</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5155" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5155" ref_url="https://www.suse.com/security/cve/CVE-2018-5155" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00089.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.8, Thunderbird ESR &lt; 52.8, Firefox &lt; 60, and Firefox ESR &lt; 52.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5155/">CVE-2018-5155</cve>
	<bugzilla href="https://bugzilla.suse.com/1092548">SUSE bug 1092548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092611">SUSE bug 1092611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093969">SUSE bug 1093969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093970">SUSE bug 1093970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093971">SUSE bug 1093971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093972">SUSE bug 1093972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093973">SUSE bug 1093973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5156</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5156" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5156" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5156" ref_url="https://www.suse.com/security/cve/CVE-2018-5156" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2330-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60, Firefox ESR &lt; 60.1, Firefox ESR &lt; 52.9, and Firefox &lt; 61.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5156/">CVE-2018-5156</cve>
	<bugzilla href="https://bugzilla.suse.com/1098998">SUSE bug 1098998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5157</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5157" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5157" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5157" ref_url="https://www.suse.com/security/cve/CVE-2018-5157" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00017.html" source="SUSE-SU"/>
    <description>
    Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for the viewer. This could allow the site to retrieve PDF files restricted to viewing by an authenticated user on a third-party website. This vulnerability affects Firefox ESR &lt; 52.8 and Firefox &lt; 60.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-5157/">CVE-2018-5157</cve>
	<bugzilla href="https://bugzilla.suse.com/1092548">SUSE bug 1092548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092611">SUSE bug 1092611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093969">SUSE bug 1093969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093970">SUSE bug 1093970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093971">SUSE bug 1093971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093972">SUSE bug 1093972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093973">SUSE bug 1093973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5158</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5158" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5158" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5158" ref_url="https://www.suse.com/security/cve/CVE-2018-5158" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00017.html" source="SUSE-SU"/>
    <description>
    The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker. This vulnerability affects Firefox ESR &lt; 52.8 and Firefox &lt; 60.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5158/">CVE-2018-5158</cve>
	<bugzilla href="https://bugzilla.suse.com/1092548">SUSE bug 1092548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092611">SUSE bug 1092611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093969">SUSE bug 1093969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093970">SUSE bug 1093970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093971">SUSE bug 1093971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093972">SUSE bug 1093972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093973">SUSE bug 1093973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185159" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5159</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5159" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5159" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5159" ref_url="https://www.suse.com/security/cve/CVE-2018-5159" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00089.html" source="SUSE-SU"/>
    <description>
    An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes. This could lead to a potentially exploitable crash triggerable by web content. This vulnerability affects Thunderbird &lt; 52.8, Thunderbird ESR &lt; 52.8, Firefox &lt; 60, and Firefox ESR &lt; 52.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5159/">CVE-2018-5159</cve>
	<bugzilla href="https://bugzilla.suse.com/1092548">SUSE bug 1092548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092611">SUSE bug 1092611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093969">SUSE bug 1093969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093970">SUSE bug 1093970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093971">SUSE bug 1093971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093972">SUSE bug 1093972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093973">SUSE bug 1093973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5161</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5161" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5161" ref_url="https://www.suse.com/security/cve/CVE-2018-5161" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00089.html" source="SUSE-SU"/>
    <description>
    Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Thunderbird ESR &lt; 52.8 and Thunderbird &lt; 52.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5161/">CVE-2018-5161</cve>
	<bugzilla href="https://bugzilla.suse.com/1092548">SUSE bug 1092548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092611">SUSE bug 1092611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093969">SUSE bug 1093969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093970">SUSE bug 1093970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093971">SUSE bug 1093971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093972">SUSE bug 1093972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093973">SUSE bug 1093973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5162</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5162" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5162" ref_url="https://www.suse.com/security/cve/CVE-2018-5162" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00089.html" source="SUSE-SU"/>
    <description>
    Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects Thunderbird ESR &lt; 52.8 and Thunderbird &lt; 52.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-5162/">CVE-2018-5162</cve>
	<bugzilla href="https://bugzilla.suse.com/1092548">SUSE bug 1092548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092611">SUSE bug 1092611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093151">SUSE bug 1093151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093969">SUSE bug 1093969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093970">SUSE bug 1093970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093971">SUSE bug 1093971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093972">SUSE bug 1093972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093973">SUSE bug 1093973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5168</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5168" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5168" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5168" ref_url="https://www.suse.com/security/cve/CVE-2018-5168" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00089.html" source="SUSE-SU"/>
    <description>
    Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element. This could allow a malicious site to install a theme without user interaction which could contain offensive or embarrassing images. This vulnerability affects Thunderbird &lt; 52.8, Thunderbird ESR &lt; 52.8, Firefox &lt; 60, and Firefox ESR &lt; 52.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-5168/">CVE-2018-5168</cve>
	<bugzilla href="https://bugzilla.suse.com/1092548">SUSE bug 1092548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092611">SUSE bug 1092611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093969">SUSE bug 1093969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093970">SUSE bug 1093970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093971">SUSE bug 1093971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093972">SUSE bug 1093972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093973">SUSE bug 1093973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5170</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5170" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5170" ref_url="https://www.suse.com/security/cve/CVE-2018-5170" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00089.html" source="SUSE-SU"/>
    <description>
    It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a user opening a remote attachment which is a different file type than expected. This vulnerability affects Thunderbird ESR &lt; 52.8 and Thunderbird &lt; 52.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-5170/">CVE-2018-5170</cve>
	<bugzilla href="https://bugzilla.suse.com/1092548">SUSE bug 1092548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092611">SUSE bug 1092611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093969">SUSE bug 1093969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093970">SUSE bug 1093970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093971">SUSE bug 1093971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093972">SUSE bug 1093972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093973">SUSE bug 1093973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5174</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5174" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5174" ref_url="https://www.suse.com/security/cve/CVE-2018-5174" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00089.html" source="SUSE-SU"/>
    <description>
    In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated with downloaded files and will not show any UI. Files that are unknown and potentially dangerous will be allowed to run because SmartScreen will not prompt the user for a decision, and if the user is offline all files will be allowed to be opened because Windows won't prompt the user to ask what to do. Firefox incorrectly sets this flag when downloading files, leading to less secure behavior from SmartScreen. Note: this issue only affects Windows 10 users running the April 2018 update or later. It does not affect other Windows users or other operating systems. This vulnerability affects Thunderbird &lt; 52.8, Thunderbird ESR &lt; 52.8, Firefox &lt; 60, and Firefox ESR &lt; 52.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-5174/">CVE-2018-5174</cve>
	<bugzilla href="https://bugzilla.suse.com/1092548">SUSE bug 1092548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092611">SUSE bug 1092611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093969">SUSE bug 1093969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093970">SUSE bug 1093970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093971">SUSE bug 1093971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093972">SUSE bug 1093972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093973">SUSE bug 1093973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5178</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5178" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5178" ref_url="https://www.suse.com/security/cve/CVE-2018-5178" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00089.html" source="SUSE-SU"/>
    <description>
    A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR &lt; 52.8, Thunderbird &lt; 52.8, and Firefox ESR &lt; 52.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5178/">CVE-2018-5178</cve>
	<bugzilla href="https://bugzilla.suse.com/1092548">SUSE bug 1092548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092611">SUSE bug 1092611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093969">SUSE bug 1093969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093970">SUSE bug 1093970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093971">SUSE bug 1093971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093972">SUSE bug 1093972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093973">SUSE bug 1093973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5179</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5179" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5179" ref_url="https://www.suse.com/security/cve/CVE-2018-5179" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00035.html" source="SUSE-SU"/>
    <description>
    A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-5179/">CVE-2018-5179</cve>
	<bugzilla href="https://bugzilla.suse.com/1112111">SUSE bug 1112111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5183</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5183" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5183" ref_url="https://www.suse.com/security/cve/CVE-2018-5183" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1334-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00089.html" source="SUSE-SU"/>
    <description>
    Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerability affects Thunderbird ESR &lt; 52.8, Thunderbird &lt; 52.8, and Firefox ESR &lt; 52.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5183/">CVE-2018-5183</cve>
	<bugzilla href="https://bugzilla.suse.com/1092548">SUSE bug 1092548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092611">SUSE bug 1092611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093969">SUSE bug 1093969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093970">SUSE bug 1093970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093971">SUSE bug 1093971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093972">SUSE bug 1093972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093973">SUSE bug 1093973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5184</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5184" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5184" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5184" ref_url="https://www.suse.com/security/cve/CVE-2018-5184" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00089.html" source="SUSE-SU"/>
    <description>
    Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR &lt; 52.8 and Thunderbird &lt; 52.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-5184/">CVE-2018-5184</cve>
	<bugzilla href="https://bugzilla.suse.com/1092548">SUSE bug 1092548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092611">SUSE bug 1092611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093152">SUSE bug 1093152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093969">SUSE bug 1093969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093970">SUSE bug 1093970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093971">SUSE bug 1093971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093972">SUSE bug 1093972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093973">SUSE bug 1093973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5185</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5185" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5185" ref_url="https://www.suse.com/security/cve/CVE-2018-5185" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00089.html" source="SUSE-SU"/>
    <description>
    Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR &lt; 52.8 and Thunderbird &lt; 52.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-5185/">CVE-2018-5185</cve>
	<bugzilla href="https://bugzilla.suse.com/1092548">SUSE bug 1092548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092611">SUSE bug 1092611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093151">SUSE bug 1093151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093969">SUSE bug 1093969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093970">SUSE bug 1093970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093971">SUSE bug 1093971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093972">SUSE bug 1093972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093973">SUSE bug 1093973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5187</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5187" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5187" ref_url="https://www.suse.com/security/cve/CVE-2018-5187" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 60, Firefox ESR &lt; 60.1, and Firefox &lt; 61.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5187/">CVE-2018-5187</cve>
	<bugzilla href="https://bugzilla.suse.com/1098998">SUSE bug 1098998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5188</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5188" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5188" ref_url="https://www.suse.com/security/cve/CVE-2018-5188" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2322-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1907-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2330-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 60, Thunderbird &lt; 52.9, Firefox ESR &lt; 60.1, Firefox ESR &lt; 52.9, and Firefox &lt; 61.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5188/">CVE-2018-5188</cve>
	<bugzilla href="https://bugzilla.suse.com/1098998">SUSE bug 1098998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5244</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5244" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5244" ref_url="https://www.suse.com/security/cve/CVE-2018-5244" source="SUSE CVE"/>
    <description>
    In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service (host OS memory consumption) by rebooting many times.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5244/">CVE-2018-5244</cve>
	<bugzilla href="https://bugzilla.suse.com/1073961">SUSE bug 1073961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074966">SUSE bug 1074966</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5345</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5345" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5345" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5345" ref_url="https://www.suse.com/security/cve/CVE-2018-5345" source="SUSE CVE"/>
    <description>
    A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash or, potentially, execute arbitrary code via a crafted .cab file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5345/">CVE-2018-5345</cve>
	<bugzilla href="https://bugzilla.suse.com/1075745">SUSE bug 1075745</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482681" comment="gcab-1.1-1.15 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152619" comment="gcab is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482683" comment="gcab-lang-1.1-1.15 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152620" comment="gcab-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482684" comment="libgcab-1_0-0-1.1-1.15 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152621" comment="libgcab-1_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5702</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5702" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5702" ref_url="https://www.suse.com/security/cve/CVE-2018-5702" source="SUSE CVE"/>
    <description>
    Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5702/">CVE-2018-5702</cve>
	<bugzilla href="https://bugzilla.suse.com/1075921">SUSE bug 1075921</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694922" comment="transmission-common-2.94-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152179" comment="transmission-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694923" comment="transmission-gtk-2.94-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152180" comment="transmission-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694924" comment="transmission-gtk-lang-2.94-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152181" comment="transmission-gtk-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5711</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5711" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5711" ref_url="https://www.suse.com/security/cve/CVE-2018-5711" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0308-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003690.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0806-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0248-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00103.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0316-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00114.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0318-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00116.html" source="SUSE-SU"/>
    <description>
    gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or imagecreatefromstring PHP function. This is related to GetCode_ and gdImageCreateFromGifCtx.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5711/">CVE-2018-5711</cve>
	<bugzilla href="https://bugzilla.suse.com/1076391">SUSE bug 1076391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185727" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5727</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5727" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5727" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5727" ref_url="https://www.suse.com/security/cve/CVE-2018-5727" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010745.html" source="SUSE-SU"/>
    <description>
    In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function (openjp2/t1.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5727/">CVE-2018-5727</cve>
	<bugzilla href="https://bugzilla.suse.com/1076314">SUSE bug 1076314</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677917" comment="libopenjp2-7-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678643" comment="libopenjp2-7-32bit-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677918" comment="openjpeg2-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677919" comment="openjpeg2-devel-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5729</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5729" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5729" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5729" ref_url="https://www.suse.com/security/cve/CVE-2018-5729" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0175-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0854-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00006.html" source="SUSE-SU"/>
    <description>
    MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5729/">CVE-2018-5729</cve>
	<bugzilla href="https://bugzilla.suse.com/1076211">SUSE bug 1076211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083926">SUSE bug 1083926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122468">SUSE bug 1122468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5730</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5730" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5730" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5730" ref_url="https://www.suse.com/security/cve/CVE-2018-5730" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0175-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0854-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00006.html" source="SUSE-SU"/>
    <description>
    MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-5730/">CVE-2018-5730</cve>
	<bugzilla href="https://bugzilla.suse.com/1076211">SUSE bug 1076211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083927">SUSE bug 1083927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122468">SUSE bug 1122468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5732</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5732" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5732" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5732" ref_url="https://www.suse.com/security/cve/CVE-2018-5732" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0810-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003843.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0827-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00106.html" source="SUSE-SU"/>
    <description>
    Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -&gt; 4.1-ESV-R15, 4.2.0 -&gt; 4.2.8, 4.3.0 -&gt; 4.3.6, 4.4.0
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5732/">CVE-2018-5732</cve>
	<bugzilla href="https://bugzilla.suse.com/1083302">SUSE bug 1083302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085417">SUSE bug 1085417</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628411" comment="dhcp-4.3.5-6.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628412" comment="dhcp-client-4.3.5-6.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5733</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5733" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5733" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5733" ref_url="https://www.suse.com/security/cve/CVE-2018-5733" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0810-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003843.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0827-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00106.html" source="SUSE-SU"/>
    <description>
    A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -&gt; 4.1-ESV-R15, 4.2.0 -&gt; 4.2.8, 4.3.0 -&gt; 4.3.6, 4.4.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5733/">CVE-2018-5733</cve>
	<bugzilla href="https://bugzilla.suse.com/1083303">SUSE bug 1083303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085417">SUSE bug 1085417</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628411" comment="dhcp-4.3.5-6.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628412" comment="dhcp-client-4.3.5-6.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5736</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5736" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5736" ref_url="https://www.suse.com/security/cve/CVE-2018-5736" source="SUSE CVE"/>
    <description>
    An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone in quick succession. This defect could be deliberately exercised by an attacker who is permitted to cause a vulnerable server to initiate zone transfers (for example: by sending valid NOTIFY messages), causing the named process to exit after failing the assertion test. Affects BIND 9.12.0 and 9.12.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5736/">CVE-2018-5736</cve>
	<bugzilla href="https://bugzilla.suse.com/1093448">SUSE bug 1093448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093449">SUSE bug 1093449</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5737</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5737" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5737" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5737" ref_url="https://www.suse.com/security/cve/CVE-2018-5737" source="SUSE CVE"/>
    <description>
    A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause undesirable behavior from named, such as a recursion loop or excessive logging. Deliberate exploitation of this condition could cause operational problems depending on the particular manifestation -- either degradation or denial of service. Affects BIND 9.12.0 and 9.12.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5737/">CVE-2018-5737</cve>
	<bugzilla href="https://bugzilla.suse.com/1093448">SUSE bug 1093448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093449">SUSE bug 1093449</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5738</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5738" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5738" ref_url="https://www.suse.com/security/cve/CVE-2018-5738" source="SUSE CVE"/>
    <description>
    Change #4777 (introduced in October 2017) introduced an unforeseen issue in releases which were issued after that date, affecting which clients are permitted to make recursive queries to a BIND nameserver. The intended (and documented) behavior is that if an operator has not specified a value for the "allow-recursion" setting, it SHOULD default to one of the following: none, if "recursion no;" is set in named.conf; a value inherited from the "allow-query-cache" or "allow-query" settings IF "recursion yes;" (the default for that setting) AND match lists are explicitly set for "allow-query-cache" or "allow-query" (see the BIND9 Administrative Reference Manual section 6.2 for more details); or the intended default of "allow-recursion {localhost; localnets;};" if "recursion yes;" is in effect and no values are explicitly set for "allow-query-cache" or "allow-query". However, because of the regression introduced by change #4777, it is possible when "recursion yes;" is in effect and no match list values are provided for "allow-query-cache" or "allow-query" for the setting of "allow-recursion" to inherit a setting of all hosts from the "allow-query" setting default, improperly permitting recursion to all clients. Affects BIND 9.9.12, 9.10.7, 9.11.3, 9.12.0-&gt;9.12.1-P2, the development release 9.13.0, and also releases 9.9.12-S1, 9.10.7-S1, 9.11.3-S1, and 9.11.3-S2 from BIND 9 Supported Preview Edition.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-5738/">CVE-2018-5738</cve>
	<bugzilla href="https://bugzilla.suse.com/1096864">SUSE bug 1096864</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5740</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5740" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5740" ref_url="https://www.suse.com/security/cve/CVE-2018-5740" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1406-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005528.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1449-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005538.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005975.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1532-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00027.html" source="SUSE-SU"/>
    <description>
    "deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0-&gt;9.8.8, 9.9.0-&gt;9.9.13, 9.10.0-&gt;9.10.8, 9.11.0-&gt;9.11.4, 9.12.0-&gt;9.12.2, 9.13.0-&gt;9.13.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5740/">CVE-2018-5740</cve>
	<bugzilla href="https://bugzilla.suse.com/1104129">SUSE bug 1104129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148887">SUSE bug 1148887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177790">SUSE bug 1177790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5743</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5743" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5743" ref_url="https://www.suse.com/security/cve/CVE-2018-5743" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1406-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005528.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1449-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005538.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005975.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1532-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00027.html" source="SUSE-SU"/>
    <description>
    By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of simultaneous connections contained an error which could be exploited to grow the number of simultaneous connections beyond this limit. Versions affected: BIND 9.9.0 -&gt; 9.10.8-P1, 9.11.0 -&gt; 9.11.6, 9.12.0 -&gt; 9.12.4, 9.14.0. BIND 9 Supported Preview Edition versions 9.9.3-S1 -&gt; 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -&gt; 9.13.7 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5743.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5743/">CVE-2018-5743</cve>
	<bugzilla href="https://bugzilla.suse.com/1133185">SUSE bug 1133185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148887">SUSE bug 1148887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157051">SUSE bug 1157051</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5744</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5744" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5744" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5744" ref_url="https://www.suse.com/security/cve/CVE-2018-5744" source="SUSE CVE"/>
    <description>
    A failure to free memory can occur when processing messages having a specific combination of EDNS options. Versions affected are: BIND 9.10.7 -&gt; 9.10.8-P1, 9.11.3 -&gt; 9.11.5-P1, 9.12.0 -&gt; 9.12.3-P1, and versions 9.10.7-S1 -&gt; 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -&gt; 9.13.6 of the 9.13 development branch are also affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5744/">CVE-2018-5744</cve>
	<bugzilla href="https://bugzilla.suse.com/1126066">SUSE bug 1126066</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5745</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5745" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5745" ref_url="https://www.suse.com/security/cve/CVE-2018-5745" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1406-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005528.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1449-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005538.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005975.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1532-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00027.html" source="SUSE-SU"/>
    <description>
    "managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys to exit due to an assertion failure if, during key rollover, a trust anchor's keys are replaced with keys which use an unsupported algorithm. Versions affected: BIND 9.9.0 -&gt; 9.10.8-P1, 9.11.0 -&gt; 9.11.5-P1, 9.12.0 -&gt; 9.12.3-P1, and versions 9.9.3-S1 -&gt; 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -&gt; 9.13.6 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5745.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5745/">CVE-2018-5745</cve>
	<bugzilla href="https://bugzilla.suse.com/1126068">SUSE bug 1126068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148887">SUSE bug 1148887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177790">SUSE bug 1177790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5748</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5748" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5748" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5748" ref_url="https://www.suse.com/security/cve/CVE-2018-5748" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003674.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0838-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004357.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0322-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00120.html" source="SUSE-SU"/>
    <description>
    qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5748/">CVE-2018-5748</cve>
	<bugzilla href="https://bugzilla.suse.com/1076500">SUSE bug 1076500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083625">SUSE bug 1083625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087887">SUSE bug 1087887</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5764</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5764" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5764" ref_url="https://www.suse.com/security/cve/CVE-2018-5764" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003617.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003619.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0643-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00026.html" source="SUSE-SU"/>
    <description>
    The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-5764/">CVE-2018-5764</cve>
	<bugzilla href="https://bugzilla.suse.com/1076503">SUSE bug 1076503</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482539" comment="rsync-3.1.3-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151567" comment="rsync is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5772</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5772" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5772" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5772" ref_url="https://www.suse.com/security/cve/CVE-2018-5772" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3598-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-October/025597.html" source="SUSE-SU"/>
    <description>
    In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-18"/>
	<updated date="2022-10-18"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5772/">CVE-2018-5772</cve>
	<bugzilla href="https://bugzilla.suse.com/1076579">SUSE bug 1076579</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716317" comment="exiv2-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716318" comment="exiv2-lang-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716207" comment="libexiv2-26-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716319" comment="libexiv2-26-32bit-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716208" comment="libexiv2-devel-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716320" comment="libexiv2-doc-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185784" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5784</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5784" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5784" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5784" ref_url="https://www.suse.com/security/cve/CVE-2018-5784" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003985.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-05/msg00025.html" source="SUSE-SU"/>
    <description>
    In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated against the actual number of directory entries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5784/">CVE-2018-5784</cve>
	<bugzilla href="https://bugzilla.suse.com/1081690">SUSE bug 1081690</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185785" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5785</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5785" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5785" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5785" ref_url="https://www.suse.com/security/cve/CVE-2018-5785" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010745.html" source="SUSE-SU"/>
    <description>
    In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder function (openjp2/j2k.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-5785/">CVE-2018-5785</cve>
	<bugzilla href="https://bugzilla.suse.com/1076967">SUSE bug 1076967</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677917" comment="libopenjp2-7-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678643" comment="libopenjp2-7-32bit-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677918" comment="openjpeg2-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677919" comment="openjpeg2-devel-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5801</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5801" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5801" ref_url="https://www.suse.com/security/cve/CVE-2018-5801" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3343-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004772.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0731-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00063.html" source="SUSE-SU"/>
    <description>
    An error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5801/">CVE-2018-5801</cve>
	<bugzilla href="https://bugzilla.suse.com/1084690">SUSE bug 1084690</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679588" comment="dcraw-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680722" comment="dcraw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679589" comment="dcraw-lang-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680723" comment="dcraw-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5805</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5805" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5805" ref_url="https://www.suse.com/security/cve/CVE-2018-5805" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0002-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190002-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00072.html" source="SUSE-SU"/>
    <description>
    A boundary error within the "quicktake_100_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to cause a stack-based buffer overflow and subsequently cause a crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5805/">CVE-2018-5805</cve>
	<bugzilla href="https://bugzilla.suse.com/1097973">SUSE bug 1097973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679588" comment="dcraw-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680722" comment="dcraw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679589" comment="dcraw-lang-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680723" comment="dcraw-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5806</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5806" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5806" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5806" ref_url="https://www.suse.com/security/cve/CVE-2018-5806" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0002-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190002-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00072.html" source="SUSE-SU"/>
    <description>
    An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to trigger a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5806/">CVE-2018-5806</cve>
	<bugzilla href="https://bugzilla.suse.com/1097974">SUSE bug 1097974</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679588" comment="dcraw-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680722" comment="dcraw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679589" comment="dcraw-lang-9.28.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680723" comment="dcraw-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5813</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5813" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5813" ref_url="https://www.suse.com/security/cve/CVE-2018-5813" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3343-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004772.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2286-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00003.html" source="SUSE-SU"/>
    <description>
    An error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18.11 can be exploited to trigger an infinite loop via a specially crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5813/">CVE-2018-5813</cve>
	<bugzilla href="https://bugzilla.suse.com/1103200">SUSE bug 1103200</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5815</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5815" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5815" ref_url="https://www.suse.com/security/cve/CVE-2018-5815" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2286-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00003.html" source="SUSE-SU"/>
    <description>
    An integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited to trigger an infinite loop via a specially crafted Apple QuickTime file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5815/">CVE-2018-5815</cve>
	<bugzilla href="https://bugzilla.suse.com/1103206">SUSE bug 1103206</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5816</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5816" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5816" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5816" ref_url="https://www.suse.com/security/cve/CVE-2018-5816" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00003.html" source="SUSE-SU"/>
    <description>
    An integer overflow error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited to trigger a division by zero via specially crafted NOKIARAW file (Note: This vulnerability is caused due to an incomplete fix of CVE-2018-5804).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5816/">CVE-2018-5816</cve>
	<bugzilla href="https://bugzilla.suse.com/1097975">SUSE bug 1097975</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5817</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5817" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5817" ref_url="https://www.suse.com/security/cve/CVE-2018-5817" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0127-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00045.html" source="SUSE-SU"/>
    <description>
    A type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to 0.19.1 (internal/dcraw_common.cpp) can be exploited to trigger an infinite loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5817/">CVE-2018-5817</cve>
	<bugzilla href="https://bugzilla.suse.com/1120515">SUSE bug 1120515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5818</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5818" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5818" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5818" ref_url="https://www.suse.com/security/cve/CVE-2018-5818" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0127-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00045.html" source="SUSE-SU"/>
    <description>
    An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5818/">CVE-2018-5818</cve>
	<bugzilla href="https://bugzilla.suse.com/1120516">SUSE bug 1120516</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5819</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-5819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5819" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-5819" ref_url="https://www.suse.com/security/cve/CVE-2018-5819" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0127-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00045.html" source="SUSE-SU"/>
    <description>
    An error within the "parse_sinar_ia()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to exhaust available CPU resources.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5819/">CVE-2018-5819</cve>
	<bugzilla href="https://bugzilla.suse.com/1120517">SUSE bug 1120517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186003" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6003</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6003" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6003" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6003" ref_url="https://www.suse.com/security/cve/CVE-2018-6003" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003682.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0324-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00122.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6003/">CVE-2018-6003</cve>
	<bugzilla href="https://bugzilla.suse.com/1076832">SUSE bug 1076832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482427" comment="libtasn1-4.13-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152119" comment="libtasn1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482428" comment="libtasn1-6-4.13-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152120" comment="libtasn1-6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482429" comment="libtasn1-6-32bit-4.13-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152121" comment="libtasn1-6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6031</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6031" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6031" ref_url="https://www.suse.com/security/cve/CVE-2018-6031" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Use after free in PDFium in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6031/">CVE-2018-6031</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6032</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6032" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6032" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6032" ref_url="https://www.suse.com/security/cve/CVE-2018-6032" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6032/">CVE-2018-6032</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186033" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6033</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6033" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6033" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6033" ref_url="https://www.suse.com/security/cve/CVE-2018-6033" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6033/">CVE-2018-6033</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186034" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6034</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6034" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6034" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6034" ref_url="https://www.suse.com/security/cve/CVE-2018-6034" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6034/">CVE-2018-6034</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6035</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6035" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6035" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6035" ref_url="https://www.suse.com/security/cve/CVE-2018-6035" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6035/">CVE-2018-6035</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186036" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6036</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6036" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6036" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6036" ref_url="https://www.suse.com/security/cve/CVE-2018-6036" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6036/">CVE-2018-6036</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6037</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6037" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6037" ref_url="https://www.suse.com/security/cve/CVE-2018-6037" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain autofill data with insufficient user gestures via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6037/">CVE-2018-6037</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6038</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6038" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6038" ref_url="https://www.suse.com/security/cve/CVE-2018-6038" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6038/">CVE-2018-6038</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6039</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6039" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6039" ref_url="https://www.suse.com/security/cve/CVE-2018-6039" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6039/">CVE-2018-6039</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6040</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6040" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6040" ref_url="https://www.suse.com/security/cve/CVE-2018-6040" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6040/">CVE-2018-6040</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6041</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6041" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6041" ref_url="https://www.suse.com/security/cve/CVE-2018-6041" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in navigation in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6041/">CVE-2018-6041</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6042</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6042" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6042" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6042" ref_url="https://www.suse.com/security/cve/CVE-2018-6042" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6042/">CVE-2018-6042</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186043" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6043</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6043" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6043" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6043" ref_url="https://www.suse.com/security/cve/CVE-2018-6043" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially execute arbitrary programs on user machine via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6043/">CVE-2018-6043</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6044</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6044" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6044" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6044" ref_url="https://www.suse.com/security/cve/CVE-2018-6044" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-16064. Reason: This candidate is a reservation duplicate of CVE-2018-16064. Notes: All CVE users should reference CVE-2018-16064 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2018-6044/">CVE-2018-6044</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6045</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6045" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6045" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6045" ref_url="https://www.suse.com/security/cve/CVE-2018-6045" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6045/">CVE-2018-6045</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186046" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6046</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6046" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6046" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6046" ref_url="https://www.suse.com/security/cve/CVE-2018-6046" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6046/">CVE-2018-6046</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186047" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6047</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6047" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6047" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6047" ref_url="https://www.suse.com/security/cve/CVE-2018-6047" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user redirect URL via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6047/">CVE-2018-6047</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6048</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6048" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6048" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6048" ref_url="https://www.suse.com/security/cve/CVE-2018-6048" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak referrer information via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6048/">CVE-2018-6048</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6049</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6049" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6049" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6049" ref_url="https://www.suse.com/security/cve/CVE-2018-6049" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the origin to which permission is granted via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6049/">CVE-2018-6049</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6050</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6050" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6050" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6050" ref_url="https://www.suse.com/security/cve/CVE-2018-6050" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6050/">CVE-2018-6050</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186051" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6051</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6051" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6051" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6051" ref_url="https://www.suse.com/security/cve/CVE-2018-6051" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which allowed a remote attacker to obtain referrer details via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6051/">CVE-2018-6051</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6052</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6052" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6052" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6052" ref_url="https://www.suse.com/security/cve/CVE-2018-6052" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain referrer details from a web page that had thought it had opted out of sending referrer data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6052/">CVE-2018-6052</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6053</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6053" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6053" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6053" ref_url="https://www.suse.com/security/cve/CVE-2018-6053" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6053/">CVE-2018-6053</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6054</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6054" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6054" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6054" ref_url="https://www.suse.com/security/cve/CVE-2018-6054" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00104.html" source="SUSE-SU"/>
    <description>
    Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6054/">CVE-2018-6054</cve>
	<bugzilla href="https://bugzilla.suse.com/1077571">SUSE bug 1077571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6056</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6056" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6056" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6056" ref_url="https://www.suse.com/security/cve/CVE-2018-6056" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0453-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0454-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00028.html" source="SUSE-SU"/>
    <description>
    Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282.168 allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6056/">CVE-2018-6056</cve>
	<bugzilla href="https://bugzilla.suse.com/1080920">SUSE bug 1080920</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186057" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6057</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6057" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6057" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6057" ref_url="https://www.suse.com/security/cve/CVE-2018-6057" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Lack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to bypass inter-process read only guarantees via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6057/">CVE-2018-6057</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186060" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6060</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6060" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6060" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6060" ref_url="https://www.suse.com/security/cve/CVE-2018-6060" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Use after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6060/">CVE-2018-6060</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186061" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6061</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6061" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6061" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6061" ref_url="https://www.suse.com/security/cve/CVE-2018-6061" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    A race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6061/">CVE-2018-6061</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6062</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6062" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6062" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6062" ref_url="https://www.suse.com/security/cve/CVE-2018-6062" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Heap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6062/">CVE-2018-6062</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6063</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6063" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6063" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6063" ref_url="https://www.suse.com/security/cve/CVE-2018-6063" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Incorrect use of mojo::WrapSharedMemoryHandle in Mojo in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6063/">CVE-2018-6063</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6064</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6064" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6064" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6064" ref_url="https://www.suse.com/security/cve/CVE-2018-6064" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6064/">CVE-2018-6064</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6065</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6065" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6065" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6065" ref_url="https://www.suse.com/security/cve/CVE-2018-6065" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6065/">CVE-2018-6065</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6066</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6066" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6066" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6066" ref_url="https://www.suse.com/security/cve/CVE-2018-6066" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6066/">CVE-2018-6066</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6067</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6067" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6067" ref_url="https://www.suse.com/security/cve/CVE-2018-6067" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Incorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6067/">CVE-2018-6067</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6068</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6068" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6068" ref_url="https://www.suse.com/security/cve/CVE-2018-6068" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Object lifecycle issue in Chrome Custom Tab in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6068/">CVE-2018-6068</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6069</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6069" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6069" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6069" ref_url="https://www.suse.com/security/cve/CVE-2018-6069" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Stack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6069/">CVE-2018-6069</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6070</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6070" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6070" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6070" ref_url="https://www.suse.com/security/cve/CVE-2018-6070" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Lack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6070/">CVE-2018-6070</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6071</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6071" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6071" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6071" ref_url="https://www.suse.com/security/cve/CVE-2018-6071" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    An integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6071/">CVE-2018-6071</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6072</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6072" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6072" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6072" ref_url="https://www.suse.com/security/cve/CVE-2018-6072" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6072/">CVE-2018-6072</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6073</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6073" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6073" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6073" ref_url="https://www.suse.com/security/cve/CVE-2018-6073" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    A heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6073/">CVE-2018-6073</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6074</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6074" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6074" ref_url="https://www.suse.com/security/cve/CVE-2018-6074" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6074/">CVE-2018-6074</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6075</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6075" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6075" ref_url="https://www.suse.com/security/cve/CVE-2018-6075" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page and user interaction.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6075/">CVE-2018-6075</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6076</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6076" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6076" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6076" ref_url="https://www.suse.com/security/cve/CVE-2018-6076" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Insufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform a DOM based XSS attack via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6076/">CVE-2018-6076</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6077</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6077" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6077" ref_url="https://www.suse.com/security/cve/CVE-2018-6077" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Displacement map filters being applied to cross-origin images in Blink SVG rendering in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6077/">CVE-2018-6077</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6078</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6078" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6078" ref_url="https://www.suse.com/security/cve/CVE-2018-6078" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6078/">CVE-2018-6078</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6079</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6079" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6079" ref_url="https://www.suse.com/security/cve/CVE-2018-6079" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Inappropriate sharing of TEXTURE_2D_ARRAY/TEXTURE_3D data between tabs in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6079/">CVE-2018-6079</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6080</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6080" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6080" ref_url="https://www.suse.com/security/cve/CVE-2018-6080" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Lack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to obtain memory metadata from privileged processes .
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6080/">CVE-2018-6080</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6081</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6081" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6081" ref_url="https://www.suse.com/security/cve/CVE-2018-6081" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    XSS vulnerabilities in Interstitials in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension or open Developer Console to inject arbitrary scripts or HTML via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6081/">CVE-2018-6081</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186082" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6082</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6082" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6082" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6082" ref_url="https://www.suse.com/security/cve/CVE-2018-6082" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Including port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially enumerate internal host services via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.7/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6082/">CVE-2018-6082</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6083</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6083" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6083" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6083" ref_url="https://www.suse.com/security/cve/CVE-2018-6083" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6083/">CVE-2018-6083</cve>
	<bugzilla href="https://bugzilla.suse.com/1084296">SUSE bug 1084296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186085" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6085</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6085" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6085" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6085" ref_url="https://www.suse.com/security/cve/CVE-2018-6085" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Re-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6085/">CVE-2018-6085</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186086" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6086</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6086" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6086" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6086" ref_url="https://www.suse.com/security/cve/CVE-2018-6086" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6086/">CVE-2018-6086</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6087</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6087" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6087" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6087" ref_url="https://www.suse.com/security/cve/CVE-2018-6087" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    A use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6087/">CVE-2018-6087</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6088</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6088" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6088" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6088" ref_url="https://www.suse.com/security/cve/CVE-2018-6088" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    An iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6088/">CVE-2018-6088</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6089</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6089" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6089" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6089" ref_url="https://www.suse.com/security/cve/CVE-2018-6089" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6089/">CVE-2018-6089</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186090" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6090</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6090" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6090" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6090" ref_url="https://www.suse.com/security/cve/CVE-2018-6090" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    An integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6090/">CVE-2018-6090</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186091" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6091</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6091" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6091" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6091" ref_url="https://www.suse.com/security/cve/CVE-2018-6091" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Service Workers can intercept any request made by an &lt;embed&gt; or &lt;object&gt; tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6091/">CVE-2018-6091</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6092</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6092" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6092" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6092" ref_url="https://www.suse.com/security/cve/CVE-2018-6092" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6092/">CVE-2018-6092</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6093</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6093" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6093" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6093" ref_url="https://www.suse.com/security/cve/CVE-2018-6093" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6093/">CVE-2018-6093</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6094</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6094" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6094" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6094" ref_url="https://www.suse.com/security/cve/CVE-2018-6094" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6094/">CVE-2018-6094</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6095</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6095" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6095" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6095" ref_url="https://www.suse.com/security/cve/CVE-2018-6095" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to read local files via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6095/">CVE-2018-6095</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186096" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6096</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6096" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6096" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6096" ref_url="https://www.suse.com/security/cve/CVE-2018-6096" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    A JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6096/">CVE-2018-6096</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6097</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6097" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6097" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6097" ref_url="https://www.suse.com/security/cve/CVE-2018-6097" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to enter full screen without showing a warning via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6097/">CVE-2018-6097</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6098</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6098" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6098" ref_url="https://www.suse.com/security/cve/CVE-2018-6098" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6098/">CVE-2018-6098</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6099</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6099" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6099" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6099" ref_url="https://www.suse.com/security/cve/CVE-2018-6099" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    A lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6099/">CVE-2018-6099</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186100" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6100</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6100" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6100" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6100" ref_url="https://www.suse.com/security/cve/CVE-2018-6100" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6100/">CVE-2018-6100</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6101</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6101" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6101" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6101" ref_url="https://www.suse.com/security/cve/CVE-2018-6101" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    A lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page, if the user is running a remote DevTools debugging server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6101/">CVE-2018-6101</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186102" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6102</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6102" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6102" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6102" ref_url="https://www.suse.com/security/cve/CVE-2018-6102" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Missing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6102/">CVE-2018-6102</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6103</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6103" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6103" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6103" ref_url="https://www.suse.com/security/cve/CVE-2018-6103" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass permission policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6103/">CVE-2018-6103</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6104</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6104" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6104" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6104" ref_url="https://www.suse.com/security/cve/CVE-2018-6104" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6104/">CVE-2018-6104</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6105</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6105" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6105" ref_url="https://www.suse.com/security/cve/CVE-2018-6105" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6105/">CVE-2018-6105</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6106</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6106" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6106" ref_url="https://www.suse.com/security/cve/CVE-2018-6106" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    An asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359.117 allowing a remote attacker to potentially exploit object corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6106/">CVE-2018-6106</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6107</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6107" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6107" ref_url="https://www.suse.com/security/cve/CVE-2018-6107" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6107/">CVE-2018-6107</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6108</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6108" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6108" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6108" ref_url="https://www.suse.com/security/cve/CVE-2018-6108" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6108/">CVE-2018-6108</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6109</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6109" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6109" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6109" ref_url="https://www.suse.com/security/cve/CVE-2018-6109" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    readAsText() can indefinitely read the file picked by the user, rather than only once at the time the file is picked in File API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to access data on the user file system without explicit consent via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6109/">CVE-2018-6109</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6110</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6110" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6110" ref_url="https://www.suse.com/security/cve/CVE-2018-6110" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Parsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to cause Chrome to execute scripts via a local non-HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6110/">CVE-2018-6110</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6111</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6111" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6111" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6111" ref_url="https://www.suse.com/security/cve/CVE-2018-6111" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    An object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6111/">CVE-2018-6111</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6112</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6112" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6112" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6112" ref_url="https://www.suse.com/security/cve/CVE-2018-6112" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6112/">CVE-2018-6112</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6113</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6113" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6113" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6113" ref_url="https://www.suse.com/security/cve/CVE-2018-6113" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6113/">CVE-2018-6113</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6114</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6114" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6114" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6114" ref_url="https://www.suse.com/security/cve/CVE-2018-6114" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Incorrect enforcement of CSP for &lt;object&gt; tags in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6114/">CVE-2018-6114</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186115" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6115</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6115" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6115" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6115" ref_url="https://www.suse.com/security/cve/CVE-2018-6115" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Inappropriate setting of the SEE_MASK_FLAG_NO_UI flag in file downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially bypass OS malware checks via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6115/">CVE-2018-6115</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6116</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6116" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6116" ref_url="https://www.suse.com/security/cve/CVE-2018-6116" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6116/">CVE-2018-6116</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6117</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6117" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6117" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6117" ref_url="https://www.suse.com/security/cve/CVE-2018-6117" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Confusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6117/">CVE-2018-6117</cve>
	<bugzilla href="https://bugzilla.suse.com/1090000">SUSE bug 1090000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6118</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6118" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6118" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6118" ref_url="https://www.suse.com/security/cve/CVE-2018-6118" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1104-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0.3359.139 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6118/">CVE-2018-6118</cve>
	<bugzilla href="https://bugzilla.suse.com/1091288">SUSE bug 1091288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6120</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6120" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6120" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6120" ref_url="https://www.suse.com/security/cve/CVE-2018-6120" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    An integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6120/">CVE-2018-6120</cve>
	<bugzilla href="https://bugzilla.suse.com/1092923">SUSE bug 1092923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6121</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6121" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6121" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6121" ref_url="https://www.suse.com/security/cve/CVE-2018-6121" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of input in Blink in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to perform privilege escalation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6121/">CVE-2018-6121</cve>
	<bugzilla href="https://bugzilla.suse.com/1092923">SUSE bug 1092923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186122" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6122</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6122" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6122" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6122" ref_url="https://www.suse.com/security/cve/CVE-2018-6122" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00105.html" source="SUSE-SU"/>
    <description>
    Type confusion in WebAssembly in Google Chrome prior to 66.0.3359.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.8/CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6122/">CVE-2018-6122</cve>
	<bugzilla href="https://bugzilla.suse.com/1092923">SUSE bug 1092923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186123" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6123</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6123" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6123" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6123" ref_url="https://www.suse.com/security/cve/CVE-2018-6123" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    A use after free in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6123/">CVE-2018-6123</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186124" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6124</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6124" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6124" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6124" ref_url="https://www.suse.com/security/cve/CVE-2018-6124" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Type confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6124/">CVE-2018-6124</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6125</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6125" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6125" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6125" ref_url="https://www.suse.com/security/cve/CVE-2018-6125" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in USB in Google Chrome on Windows prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2018-6125/">CVE-2018-6125</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6126" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6126" ref_url="https://www.suse.com/security/cve/CVE-2018-6126" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004214.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1783-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004719.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004400.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6126/">CVE-2018-6126</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096449">SUSE bug 1096449</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6127</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6127" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6127" ref_url="https://www.suse.com/security/cve/CVE-2018-6127" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Early free of object in use in IndexDB in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6127/">CVE-2018-6127</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6128</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6128" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6128" ref_url="https://www.suse.com/security/cve/CVE-2018-6128" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Incorrect URL parsing in WebKit in Google Chrome on iOS prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6128/">CVE-2018-6128</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6129</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6129" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6129" ref_url="https://www.suse.com/security/cve/CVE-2018-6129" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Out of bounds array access in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6129/">CVE-2018-6129</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6130</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6130" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6130" ref_url="https://www.suse.com/security/cve/CVE-2018-6130" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6130/">CVE-2018-6130</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6131</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6131" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6131" ref_url="https://www.suse.com/security/cve/CVE-2018-6131" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Object lifecycle issue in WebAssembly in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6131/">CVE-2018-6131</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6132</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6132" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6132" ref_url="https://www.suse.com/security/cve/CVE-2018-6132" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Uninitialized data in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6132/">CVE-2018-6132</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6133</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6133" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6133" ref_url="https://www.suse.com/security/cve/CVE-2018-6133" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6133/">CVE-2018-6133</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6134</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6134" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6134" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6134" ref_url="https://www.suse.com/security/cve/CVE-2018-6134" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Information leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6134/">CVE-2018-6134</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6135</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6135" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6135" ref_url="https://www.suse.com/security/cve/CVE-2018-6135" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Lack of clearing the previous site before loading alerts from a new one in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6135/">CVE-2018-6135</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6136</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6136" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6136" ref_url="https://www.suse.com/security/cve/CVE-2018-6136" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Missing type check in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6136/">CVE-2018-6136</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6137</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6137" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6137" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6137" ref_url="https://www.suse.com/security/cve/CVE-2018-6137" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    CSS Paint API in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6137/">CVE-2018-6137</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6138</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6138" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6138" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6138" ref_url="https://www.suse.com/security/cve/CVE-2018-6138" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2018-6138/">CVE-2018-6138</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6139</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6139" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6139" ref_url="https://www.suse.com/security/cve/CVE-2018-6139" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Insufficient target checks on the chrome.debugger API in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6139/">CVE-2018-6139</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6140</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6140" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6140" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6140" ref_url="https://www.suse.com/security/cve/CVE-2018-6140" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6140/">CVE-2018-6140</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6141</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6141" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6141" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6141" ref_url="https://www.suse.com/security/cve/CVE-2018-6141" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of an image filter in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6141/">CVE-2018-6141</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6142</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6142" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6142" ref_url="https://www.suse.com/security/cve/CVE-2018-6142" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Array bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6142/">CVE-2018-6142</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6143</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6143" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6143" ref_url="https://www.suse.com/security/cve/CVE-2018-6143" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Insufficient validation in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6143/">CVE-2018-6143</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6144</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6144" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6144" ref_url="https://www.suse.com/security/cve/CVE-2018-6144" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6144/">CVE-2018-6144</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6145</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6145" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6145" ref_url="https://www.suse.com/security/cve/CVE-2018-6145" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in HTML parser in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6145/">CVE-2018-6145</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6147</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6147" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6147" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6147" ref_url="https://www.suse.com/security/cve/CVE-2018-6147" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Lack of secure text entry mode in Browser UI in Google Chrome on Mac prior to 67.0.3396.62 allowed a local attacker to obtain potentially sensitive information from process memory via a local process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6147/">CVE-2018-6147</cve>
	<bugzilla href="https://bugzilla.suse.com/1095163">SUSE bug 1095163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6148</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6148" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6148" ref_url="https://www.suse.com/security/cve/CVE-2018-6148" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1859-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6148/">CVE-2018-6148</cve>
	<bugzilla href="https://bugzilla.suse.com/1096508">SUSE bug 1096508</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186149" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6149</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6149" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6149" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6149" ref_url="https://www.suse.com/security/cve/CVE-2018-6149" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2054-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Type confusion in JavaScript in Google Chrome prior to 67.0.3396.87 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6149/">CVE-2018-6149</cve>
	<bugzilla href="https://bugzilla.suse.com/1097452">SUSE bug 1097452</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6153</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6153" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6153" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6153" ref_url="https://www.suse.com/security/cve/CVE-2018-6153" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    A precision error in Skia in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6153/">CVE-2018-6153</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6154</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6154" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6154" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6154" ref_url="https://www.suse.com/security/cve/CVE-2018-6154" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6154/">CVE-2018-6154</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6155</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6155" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6155" ref_url="https://www.suse.com/security/cve/CVE-2018-6155" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of frames in the VP8 parser in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6155/">CVE-2018-6155</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6156</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6156" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6156" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6156" ref_url="https://www.suse.com/security/cve/CVE-2018-6156" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6156/">CVE-2018-6156</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6157</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6157" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6157" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6157" ref_url="https://www.suse.com/security/cve/CVE-2018-6157" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Type confusion in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6157/">CVE-2018-6157</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6158</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6158" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6158" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6158" ref_url="https://www.suse.com/security/cve/CVE-2018-6158" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    A race condition in Oilpan in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6158/">CVE-2018-6158</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186159" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6159</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6159" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6159" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6159" ref_url="https://www.suse.com/security/cve/CVE-2018-6159" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6159/">CVE-2018-6159</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6160</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6160" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6160" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6160" ref_url="https://www.suse.com/security/cve/CVE-2018-6160" source="SUSE CVE"/>
    <description>
    JavaScript alert handling in Prompts in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6160/">CVE-2018-6160</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6161</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6161" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6161" ref_url="https://www.suse.com/security/cve/CVE-2018-6161" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6161/">CVE-2018-6161</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6162</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6162" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6162" ref_url="https://www.suse.com/security/cve/CVE-2018-6162" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Improper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6162/">CVE-2018-6162</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6163</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6163" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6163" ref_url="https://www.suse.com/security/cve/CVE-2018-6163" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6163/">CVE-2018-6163</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6164</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6164" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6164" ref_url="https://www.suse.com/security/cve/CVE-2018-6164" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Insufficient origin checks for CSS content in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6164/">CVE-2018-6164</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6165</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6165" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6165" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6165" ref_url="https://www.suse.com/security/cve/CVE-2018-6165" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of reloads in Navigation in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6165/">CVE-2018-6165</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6166</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6166" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6166" ref_url="https://www.suse.com/security/cve/CVE-2018-6166" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6166/">CVE-2018-6166</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6167</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6167" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6167" ref_url="https://www.suse.com/security/cve/CVE-2018-6167" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6167/">CVE-2018-6167</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6168</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6168" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6168" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6168" ref_url="https://www.suse.com/security/cve/CVE-2018-6168" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6168/">CVE-2018-6168</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6169</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6169" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6169" ref_url="https://www.suse.com/security/cve/CVE-2018-6169" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Lack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to trigger installation of an unwanted extension via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6169/">CVE-2018-6169</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6170</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6170" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6170" ref_url="https://www.suse.com/security/cve/CVE-2018-6170" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    A bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6170/">CVE-2018-6170</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6171</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6171" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6171" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6171" ref_url="https://www.suse.com/security/cve/CVE-2018-6171" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.7/CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6171/">CVE-2018-6171</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6172</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6172" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6172" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6172" ref_url="https://www.suse.com/security/cve/CVE-2018-6172" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6172/">CVE-2018-6172</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6173</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6173" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6173" ref_url="https://www.suse.com/security/cve/CVE-2018-6173" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6173/">CVE-2018-6173</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6174</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6174" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6174" ref_url="https://www.suse.com/security/cve/CVE-2018-6174" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Integer overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a remote attacker to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6174/">CVE-2018-6174</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6175</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6175" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6175" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6175" ref_url="https://www.suse.com/security/cve/CVE-2018-6175" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6175/">CVE-2018-6175</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6176</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6176" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6176" ref_url="https://www.suse.com/security/cve/CVE-2018-6176" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6176/">CVE-2018-6176</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6177</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6177" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6177" ref_url="https://www.suse.com/security/cve/CVE-2018-6177" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6177/">CVE-2018-6177</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6178</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6178" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6178" ref_url="https://www.suse.com/security/cve/CVE-2018-6178" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Eliding from the wrong side in an infobar in DevTools in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to Hide Chrome Security UI via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6178/">CVE-2018-6178</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6179</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6179" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6179" ref_url="https://www.suse.com/security/cve/CVE-2018-6179" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:2134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Insufficient enforcement of file access permission in the activeTab case in Extensions in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6179/">CVE-2018-6179</cve>
	<bugzilla href="https://bugzilla.suse.com/1086124">SUSE bug 1086124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102530">SUSE bug 1102530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107235">SUSE bug 1107235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6196</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6196" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6196" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6196" ref_url="https://www.suse.com/security/cve/CVE-2018-6196" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005254.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006875.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00028.html" source="SUSE-SU"/>
    <description>
    w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feed_table_block_tag function in table.c does not prevent a negative indent value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6196/">CVE-2018-6196</cve>
	<bugzilla href="https://bugzilla.suse.com/1077559">SUSE bug 1077559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189667">SUSE bug 1189667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6197</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6197" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6197" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6197" ref_url="https://www.suse.com/security/cve/CVE-2018-6197" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005254.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006875.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00028.html" source="SUSE-SU"/>
    <description>
    w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6197/">CVE-2018-6197</cve>
	<bugzilla href="https://bugzilla.suse.com/1077559">SUSE bug 1077559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077568">SUSE bug 1077568</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189667">SUSE bug 1189667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6198</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6198" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6198" ref_url="https://www.suse.com/security/cve/CVE-2018-6198" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005254.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006875.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00028.html" source="SUSE-SU"/>
    <description>
    w3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to overwrite arbitrary files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6198/">CVE-2018-6198</cve>
	<bugzilla href="https://bugzilla.suse.com/1077559">SUSE bug 1077559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077572">SUSE bug 1077572</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186307" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6307</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6307" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6307" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6307" ref_url="https://www.suse.com/security/cve/CVE-2018-6307" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0060-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00021.html" source="SUSE-SU"/>
    <description>
    LibVNC before commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b contains heap use-after-free vulnerability in server code of file transfer extension that can result remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6307/">CVE-2018-6307</cve>
	<bugzilla href="https://bugzilla.suse.com/1120115">SUSE bug 1120115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186323" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6323</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6323" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6323" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6323" ref_url="https://www.suse.com/security/cve/CVE-2018-6323" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has an unsigned integer overflow because bfd_size_type multiplication is not used. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6323/">CVE-2018-6323</cve>
	<bugzilla href="https://bugzilla.suse.com/1077745">SUSE bug 1077745</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6392</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6392" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6392" ref_url="https://www.suse.com/security/cve/CVE-2018-6392" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0470-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0476-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00062.html" source="SUSE-SU"/>
    <description>
    The filter_slice function in libavfilter/vf_transpose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service (out-of-array access) via a crafted MP4 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6392/">CVE-2018-6392</cve>
	<bugzilla href="https://bugzilla.suse.com/1078488">SUSE bug 1078488</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186406" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6406</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6406" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6406" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6406" ref_url="https://www.suse.com/security/cve/CVE-2018-6406" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0359-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0360-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00009.html" source="SUSE-SU"/>
    <description>
    The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not validate the child_frame_length data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service (heap-based buffer over-read and later out-of-bounds write), or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6406/">CVE-2018-6406</cve>
	<bugzilla href="https://bugzilla.suse.com/1078463">SUSE bug 1078463</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6485</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6485" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6485" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6485" ref_url="https://www.suse.com/security/cve/CVE-2018-6485" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00039.html" source="SUSE-SU"/>
    <description>
    An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-6485/">CVE-2018-6485</cve>
	<bugzilla href="https://bugzilla.suse.com/1079036">SUSE bug 1079036</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6543</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6543" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6543" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6543" ref_url="https://www.suse.com/security/cve/CVE-2018-6543" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    In GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section() in objdump.c, which results in `malloc()` with 0 size. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6543/">CVE-2018-6543</cve>
	<bugzilla href="https://bugzilla.suse.com/1079103">SUSE bug 1079103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6551</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6551" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6551" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6551" ref_url="https://www.suse.com/security/cve/CVE-2018-6551" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00039.html" source="SUSE-SU"/>
    <description>
    The malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on powerpc, and only in version 2.26 on i386, did not properly handle malloc calls with arguments close to SIZE_MAX and could return a pointer to a heap region that is smaller than requested, eventually leading to heap corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6551/">CVE-2018-6551</cve>
	<bugzilla href="https://bugzilla.suse.com/1079036">SUSE bug 1079036</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6616</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6616" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6616" ref_url="https://www.suse.com/security/cve/CVE-2018-6616" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010745.html" source="SUSE-SU"/>
    <description>
    In OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6616/">CVE-2018-6616</cve>
	<bugzilla href="https://bugzilla.suse.com/1079845">SUSE bug 1079845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140359">SUSE bug 1140359</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677917" comment="libopenjp2-7-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678643" comment="libopenjp2-7-32bit-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677918" comment="openjpeg2-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677919" comment="openjpeg2-devel-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6621</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6621" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6621" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6621" ref_url="https://www.suse.com/security/cve/CVE-2018-6621" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0470-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0476-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00062.html" source="SUSE-SU"/>
    <description>
    The decode_frame function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service (out of array read) via a crafted AVI file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6621/">CVE-2018-6621</cve>
	<bugzilla href="https://bugzilla.suse.com/1079368">SUSE bug 1079368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186759" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6759</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6759" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6759" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6759" ref_url="https://www.suse.com/security/cve/CVE-2018-6759" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6759/">CVE-2018-6759</cve>
	<bugzilla href="https://bugzilla.suse.com/1079741">SUSE bug 1079741</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6767</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6767" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6767" ref_url="https://www.suse.com/security/cve/CVE-2018-6767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0153-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EK4DH6BBB2WPBM677O7MFUOO5UBKUW37/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0154-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FD5IPNZ6LGJLORJOQVT3MAHBWF3ORQPT/" source="SUSE-SU"/>
    <description>
    A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service attack or possibly have unspecified other impact via a maliciously crafted RF64 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6767/">CVE-2018-6767</cve>
	<bugzilla href="https://bugzilla.suse.com/1079746">SUSE bug 1079746</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628918" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172747" comment="libwavpack1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186871" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6871</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6871" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6871" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6871" ref_url="https://www.suse.com/security/cve/CVE-2018-6871" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0443-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003960.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00025.html" source="SUSE-SU"/>
    <description>
    LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6871/">CVE-2018-6871</cve>
	<bugzilla href="https://bugzilla.suse.com/1080249">SUSE bug 1080249</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186872" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6872</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6872" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6872" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6872" ref_url="https://www.suse.com/security/cve/CVE-2018-6872" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (out-of-bounds read and segmentation violation) via a note with a large alignment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6872/">CVE-2018-6872</cve>
	<bugzilla href="https://bugzilla.suse.com/1080556">SUSE bug 1080556</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186914" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6914</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6914" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6914" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6914" ref_url="https://www.suse.com/security/cve/CVE-2018-6914" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 might allow attackers to create arbitrary directories or files via a .. (dot dot) in the prefix argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6914/">CVE-2018-6914</cve>
	<bugzilla href="https://bugzilla.suse.com/1087441">SUSE bug 1087441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136906">SUSE bug 1136906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6942</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6942" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6942" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6942" ref_url="https://www.suse.com/security/cve/CVE-2018-6942" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006839.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00054.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6942/">CVE-2018-6942</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186952" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6952</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6952" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6952" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6952" ref_url="https://www.suse.com/security/cve/CVE-2018-6952" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011322.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011232.html" source="SUSE-SU"/>
    <description>
    A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-03"/>
	<updated date="2022-07-19"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6952/">CVE-2018-6952</cve>
	<bugzilla href="https://bugzilla.suse.com/1080985">SUSE bug 1080985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167721">SUSE bug 1167721</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684273" comment="patch-2.7.6-150000.5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151547" comment="patch is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20186954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-6954</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-6954" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6954" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-6954" ref_url="https://www.suse.com/security/cve/CVE-2018-6954" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005467.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html" source="SUSE-SU"/>
    <description>
    systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6954/">CVE-2018-6954</cve>
	<bugzilla href="https://bugzilla.suse.com/1080919">SUSE bug 1080919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7169</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7169" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7169" ref_url="https://www.suse.com/security/cve/CVE-2018-7169" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003805.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0667-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00036.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is setuid and allows an unprivileged user to be placed in a user namespace where setgroups(2) is permitted. This allows an attacker to remove themselves from a supplementary group, which may allow access to certain filesystem paths if the administrator has used "group blacklisting" (e.g., chmod g-rwx) to restrict access to paths. This flaw effectively reverts a security feature in the kernel (in particular, the /proc/self/setgroups knob) to prevent this sort of privilege escalation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-7169/">CVE-2018-7169</cve>
	<bugzilla href="https://bugzilla.suse.com/1081294">SUSE bug 1081294</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628939" comment="login_defs-4.8.1-2.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009670997" comment="login_defs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628940" comment="shadow-4.8.1-2.43 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166874" comment="shadow is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7208</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7208" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7208" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7208" ref_url="https://www.suse.com/security/cve/CVE-2018-7208" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted file, as demonstrated by objcopy of a COFF object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7208/">CVE-2018-7208</cve>
	<bugzilla href="https://bugzilla.suse.com/1081527">SUSE bug 1081527</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7225</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7225" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7225" ref_url="https://www.suse.com/security/cve/CVE-2018-7225" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0830-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003871.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0851-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00073.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7225/">CVE-2018-7225</cve>
	<bugzilla href="https://bugzilla.suse.com/1081493">SUSE bug 1081493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090647">SUSE bug 1090647</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187253" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7253</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7253" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7253" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7253" ref_url="https://www.suse.com/security/cve/CVE-2018-7253" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0153-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EK4DH6BBB2WPBM677O7MFUOO5UBKUW37/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0154-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FD5IPNZ6LGJLORJOQVT3MAHBWF3ORQPT/" source="SUSE-SU"/>
    <description>
    The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (heap-based buffer over-read) or possibly overwrite the heap via a maliciously crafted DSDIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7253/">CVE-2018-7253</cve>
	<bugzilla href="https://bugzilla.suse.com/1081692">SUSE bug 1081692</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628918" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172747" comment="libwavpack1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7254</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7254" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7254" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7254" ref_url="https://www.suse.com/security/cve/CVE-2018-7254" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0153-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EK4DH6BBB2WPBM677O7MFUOO5UBKUW37/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0154-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FD5IPNZ6LGJLORJOQVT3MAHBWF3ORQPT/" source="SUSE-SU"/>
    <description>
    The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (global buffer over-read), or possibly trigger a buffer overflow or incorrect memory allocation, via a maliciously crafted CAF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7254/">CVE-2018-7254</cve>
	<bugzilla href="https://bugzilla.suse.com/1081693">SUSE bug 1081693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628918" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172747" comment="libwavpack1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187409" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7409</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7409" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7409" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7409" ref_url="https://www.suse.com/security/cve/CVE-2018-7409" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004227.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1845-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00050.html" source="SUSE-SU"/>
    <description>
    In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-7409/">CVE-2018-7409</cve>
	<bugzilla href="https://bugzilla.suse.com/1082290">SUSE bug 1082290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629042" comment="unixODBC-2.3.6-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151569" comment="unixODBC is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7456</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7456" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7456" ref_url="https://www.suse.com/security/cve/CVE-2018-7456" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004247.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00017.html" source="SUSE-SU"/>
    <description>
    A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. (This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.)
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7456/">CVE-2018-7456</cve>
	<bugzilla href="https://bugzilla.suse.com/1074317">SUSE bug 1074317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082825">SUSE bug 1082825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7485</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7485" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7485" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7485" ref_url="https://www.suse.com/security/cve/CVE-2018-7485" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004227.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1845-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00050.html" source="SUSE-SU"/>
    <description>
    The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attackers to cause a denial of service or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-7485/">CVE-2018-7485</cve>
	<bugzilla href="https://bugzilla.suse.com/1082484">SUSE bug 1082484</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629042" comment="unixODBC-2.3.6-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151569" comment="unixODBC is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7540</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7540" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7540" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7540" ref_url="https://www.suse.com/security/cve/CVE-2018-7540" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00059.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (host OS CPU hang) via non-preemptable L3/L4 pagetable freeing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7540/">CVE-2018-7540</cve>
	<bugzilla href="https://bugzilla.suse.com/1080635">SUSE bug 1080635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7541</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7541" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7541" ref_url="https://www.suse.com/security/cve/CVE-2018-7541" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00059.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.10.x allowing guest OS users to cause a denial of service (hypervisor crash) or gain privileges by triggering a grant-table transition from v2 to v1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-7541/">CVE-2018-7541</cve>
	<bugzilla href="https://bugzilla.suse.com/1080662">SUSE bug 1080662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7542</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7542" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7542" ref_url="https://www.suse.com/security/cve/CVE-2018-7542" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00059.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen 4.8.x through 4.10.x allowing x86 PVH guest OS users to cause a denial of service (NULL pointer dereference and hypervisor crash) by leveraging the mishandling of configurations that lack a Local APIC.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7542/">CVE-2018-7542</cve>
	<bugzilla href="https://bugzilla.suse.com/1080634">SUSE bug 1080634</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7544</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7544" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7544" ref_url="https://www.suse.com/security/cve/CVE-2018-7544" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008765.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1576-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008761.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008762.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0734-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C5VK3H4AGK4ZRCLIB2D3IB7SS5RI4AZK/" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** A cross-protocol scripting issue was discovered in the management interface in OpenVPN through 2.4.5. When this interface is enabled over TCP without a password, and when no other clients are connected to this interface, attackers can execute arbitrary management commands, obtain sensitive information, or cause a denial of service (SIGTERM) by triggering XMLHttpRequest actions in a web browser. This is demonstrated by a multipart/form-data POST to http://localhost:23000 with a "signal SIGTERM" command in a TEXTAREA element. NOTE: The vendor disputes that this is a vulnerability. They state that this is the result of improper configuration of the OpenVPN instance rather than an intrinsic vulnerability, and now more explicitly warn against such configurations in both the management-interface documentation, and with a runtime warning.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7544/">CVE-2018-7544</cve>
	<bugzilla href="https://bugzilla.suse.com/1085803">SUSE bug 1085803</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694906" comment="openvpn-2.4.3-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152221" comment="openvpn is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187550" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7550</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7550" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7550" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7550" ref_url="https://www.suse.com/security/cve/CVE-2018-7550" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1202-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1308-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004424.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2402-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00060.html" source="SUSE-SU"/>
    <description>
    The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh_load_end_addr value greater than mh_bss_end_addr, which triggers an out-of-bounds read or write memory access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-7550/">CVE-2018-7550</cve>
	<bugzilla href="https://bugzilla.suse.com/1083291">SUSE bug 1083291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083292">SUSE bug 1083292</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7568</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7568" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7568" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7568" ref_url="https://www.suse.com/security/cve/CVE-2018-7568" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer overflow and application crash) via an ELF file with corrupt dwarf1 debug information, as demonstrated by nm.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7568/">CVE-2018-7568</cve>
	<bugzilla href="https://bugzilla.suse.com/1086788">SUSE bug 1086788</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7569</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7569" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7569" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7569" ref_url="https://www.suse.com/security/cve/CVE-2018-7569" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer underflow or overflow, and application crash) via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7569/">CVE-2018-7569</cve>
	<bugzilla href="https://bugzilla.suse.com/1083532">SUSE bug 1083532</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7570</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7570" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7570" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7570" ref_url="https://www.suse.com/security/cve/CVE-2018-7570" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    The assign_file_positions_for_non_load_sections function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an ELF file with a RELRO segment that lacks a matching LOAD segment, as demonstrated by objcopy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7570/">CVE-2018-7570</cve>
	<bugzilla href="https://bugzilla.suse.com/1083528">SUSE bug 1083528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7642</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7642" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7642" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7642" ref_url="https://www.suse.com/security/cve/CVE-2018-7642" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    The swap_std_reloc_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (aout_32_swap_std_reloc_out NULL pointer dereference and application crash) via a crafted ELF file, as demonstrated by objcopy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7642/">CVE-2018-7642</cve>
	<bugzilla href="https://bugzilla.suse.com/1086786">SUSE bug 1086786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128518">SUSE bug 1128518</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7643</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7643" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7643" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7643" ref_url="https://www.suse.com/security/cve/CVE-2018-7643" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, as demonstrated by objdump.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7643/">CVE-2018-7643</cve>
	<bugzilla href="https://bugzilla.suse.com/1086784">SUSE bug 1086784</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7685</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7685" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7685" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7685" ref_url="https://www.suse.com/security/cve/CVE-2018-7685" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004510.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2688-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2716-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004582.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2739-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2881-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00079.html" source="SUSE-SU"/>
    <description>
    The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not display the corrupted RPM warning and allow installation, a problem caused by malicious warnings only displayed during download.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-7685/">CVE-2018-7685</cve>
	<bugzilla href="https://bugzilla.suse.com/1045735">SUSE bug 1045735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088705">SUSE bug 1088705</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091624">SUSE bug 1091624</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694899" comment="libzypp-17.25.10-3.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161722" comment="libzypp is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7728</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7728" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7728" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7728" ref_url="https://www.suse.com/security/cve/CVE-2018-7728" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004783.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0732-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00064.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFF_Handler.cpp mishandles a case of a zero length, leading to a heap-based buffer over-read in the MD5Update() function in third-party/zuid/interfaces/MD5.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7728/">CVE-2018-7728</cve>
	<bugzilla href="https://bugzilla.suse.com/1085297">SUSE bug 1085297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085585">SUSE bug 1085585</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487347" comment="libexempi3-2.4.5-3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173304" comment="libexempi3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7729</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7729" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7729" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7729" ref_url="https://www.suse.com/security/cve/CVE-2018-7729" source="SUSE CVE"/>
    <description>
    An issue was discovered in Exempi through 2.4.4. There is a stack-based buffer over-read in the PostScript_MetaHandler::ParsePSFile() function in XMPFiles/source/FileHandlers/PostScript_Handler.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7729/">CVE-2018-7729</cve>
	<bugzilla href="https://bugzilla.suse.com/1085296">SUSE bug 1085296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085585">SUSE bug 1085585</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487347" comment="libexempi3-2.4.5-3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173304" comment="libexempi3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7730</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7730" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7730" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7730" ref_url="https://www.suse.com/security/cve/CVE-2018-7730" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004783.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0732-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00064.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is mishandled in XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp, leading to a heap-based buffer over-read in the PSD_MetaHandler::CacheFileData() function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7730/">CVE-2018-7730</cve>
	<bugzilla href="https://bugzilla.suse.com/1085295">SUSE bug 1085295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085585">SUSE bug 1085585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103718">SUSE bug 1103718</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487347" comment="libexempi3-2.4.5-3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173304" comment="libexempi3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7731</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7731" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7731" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7731" ref_url="https://www.suse.com/security/cve/CVE-2018-7731" source="SUSE CVE"/>
    <description>
    An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FormatSupport/WEBP_Support.cpp does not check whether a bitstream has a NULL value, leading to a NULL pointer dereference in the WEBP::VP8XChunk class.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7731/">CVE-2018-7731</cve>
	<bugzilla href="https://bugzilla.suse.com/1085294">SUSE bug 1085294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085585">SUSE bug 1085585</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487347" comment="libexempi3-2.4.5-3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173304" comment="libexempi3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7751</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7751" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7751" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7751" ref_url="https://www.suse.com/security/cve/CVE-2018-7751" source="SUSE CVE"/>
    <description>
    The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7751/">CVE-2018-7751</cve>
	<bugzilla href="https://bugzilla.suse.com/1090826">SUSE bug 1090826</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7755</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7755" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7755" ref_url="https://www.suse.com/security/cve/CVE-2018-7755" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1651-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1668-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011310.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-18"/>
	<updated date="2022-07-19"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-7755/">CVE-2018-7755</cve>
	<bugzilla href="https://bugzilla.suse.com/1084513">SUSE bug 1084513</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695342" comment="kernel-debug-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009693407" comment="kernel-default-man-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695343" comment="kernel-kvmsmall-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695344" comment="kernel-vanilla-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695345" comment="kernel-vanilla-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695346" comment="kernel-vanilla-devel-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695347" comment="kernel-vanilla-livepatch-devel-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695348" comment="kernel-zfcpdump-man-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7858</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7858" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7858" ref_url="https://www.suse.com/security/cve/CVE-2018-7858" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005184.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html" source="SUSE-SU"/>
    <description>
    Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds access and QEMU process crash) by leveraging incorrect region calculation when updating VGA display.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7858/">CVE-2018-7858</cve>
	<bugzilla href="https://bugzilla.suse.com/1084604">SUSE bug 1084604</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20187999" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-7999</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-7999" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7999" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-7999" ref_url="https://www.suse.com/security/cve/CVE-2018-7999" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003860.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0883-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00002.html" source="SUSE-SU"/>
    <description>
    In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7999/">CVE-2018-7999</cve>
	<bugzilla href="https://bugzilla.suse.com/1084850">SUSE bug 1084850</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009480302" comment="libgraphite2-3-1.3.11-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153578" comment="libgraphite2-3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8048</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8048" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8048" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8048" ref_url="https://www.suse.com/security/cve/CVE-2018-8048" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005122.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012986.html" source="SUSE-SU"/>
    <description>
    In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-8048/">CVE-2018-8048</cve>
	<bugzilla href="https://bugzilla.suse.com/1085967">SUSE bug 1085967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086598">SUSE bug 1086598</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8098</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8098" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8098" ref_url="https://www.suse.com/security/cve/CVE-2018-8098" source="SUSE CVE"/>
    <description>
    Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial of service (out-of-bounds read) via a crafted repository index file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-8098/">CVE-2018-8098</cve>
	<bugzilla href="https://bugzilla.suse.com/1085256">SUSE bug 1085256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085257">SUSE bug 1085257</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8099</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8099" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8099" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8099" ref_url="https://www.suse.com/security/cve/CVE-2018-8099" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004790.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00078.html" source="SUSE-SU"/>
    <description>
    Incorrect returning of an error code in the index.c:read_entry() function leads to a double free in libgit2 before v0.26.2, which allows an attacker to cause a denial of service via a crafted repository index file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-8099/">CVE-2018-8099</cve>
	<bugzilla href="https://bugzilla.suse.com/1085256">SUSE bug 1085256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085257">SUSE bug 1085257</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8740</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8740" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8740" ref_url="https://www.suse.com/security/cve/CVE-2018-8740" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005442.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14228-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00050.html" source="SUSE-SU"/>
    <description>
    In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8740/">CVE-2018-8740</cve>
	<bugzilla href="https://bugzilla.suse.com/1085790">SUSE bug 1085790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131919">SUSE bug 1131919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482404" comment="libsqlite3-0-3.28.0-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482406" comment="sqlite3-3.28.0-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8777</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8777" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8777" ref_url="https://www.suse.com/security/cve/CVE-2018-8777" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, an attacker can pass a large HTTP request with a crafted header to WEBrick server or a crafted body to WEBrick server/handler and cause a denial of service (memory consumption).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-8777/">CVE-2018-8777</cve>
	<bugzilla href="https://bugzilla.suse.com/1087436">SUSE bug 1087436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136906">SUSE bug 1136906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8778</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8778" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8778" ref_url="https://www.suse.com/security/cve/CVE-2018-8778" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, an attacker controlling the unpacking format (similar to format string vulnerabilities) can trigger a buffer under-read in the String#unpack method, resulting in a massive and controlled information disclosure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-8778/">CVE-2018-8778</cve>
	<bugzilla href="https://bugzilla.suse.com/1087433">SUSE bug 1087433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136906">SUSE bug 1136906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8779</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8779" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8779" ref_url="https://www.suse.com/security/cve/CVE-2018-8779" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the UNIXServer.open and UNIXSocket.open methods are not checked for null characters. It may be connected to an unintended socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-8779/">CVE-2018-8779</cve>
	<bugzilla href="https://bugzilla.suse.com/1087440">SUSE bug 1087440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136906">SUSE bug 1136906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188780" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8780</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8780" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8780" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8780" ref_url="https://www.suse.com/security/cve/CVE-2018-8780" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the Dir.open, Dir.new, Dir.entries and Dir.empty? methods do not check NULL characters. When using the corresponding method, unintentional directory traversal may be performed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-8780/">CVE-2018-8780</cve>
	<bugzilla href="https://bugzilla.suse.com/1087437">SUSE bug 1087437</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136906">SUSE bug 1136906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188784" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8784</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8784" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8784" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8784" ref_url="https://www.suse.com/security/cve/CVE-2018-8784" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0539-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0096-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00022.html" source="SUSE-SU"/>
    <description>
    FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress_segment() that results in a memory corruption and probably even a remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8784/">CVE-2018-8784</cve>
	<bugzilla href="https://bugzilla.suse.com/1116708">SUSE bug 1116708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117963">SUSE bug 1117963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131873">SUSE bug 1131873</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188785" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8785</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8785" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8785" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8785" ref_url="https://www.suse.com/security/cve/CVE-2018-8785" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0539-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0096-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00022.html" source="SUSE-SU"/>
    <description>
    FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress() that results in a memory corruption and probably even a remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8785/">CVE-2018-8785</cve>
	<bugzilla href="https://bugzilla.suse.com/1117963">SUSE bug 1117963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117967">SUSE bug 1117967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131873">SUSE bug 1131873</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188786" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8786</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8786" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8786" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8786" ref_url="https://www.suse.com/security/cve/CVE-2018-8786" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0539-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0096-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00022.html" source="SUSE-SU"/>
    <description>
    FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory corruption and probably even a remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8786/">CVE-2018-8786</cve>
	<bugzilla href="https://bugzilla.suse.com/1116708">SUSE bug 1116708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117963">SUSE bug 1117963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117966">SUSE bug 1117966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131873">SUSE bug 1131873</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8787</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8787" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8787" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8787" ref_url="https://www.suse.com/security/cve/CVE-2018-8787" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0539-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0096-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00022.html" source="SUSE-SU"/>
    <description>
    FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption and probably even a remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8787/">CVE-2018-8787</cve>
	<bugzilla href="https://bugzilla.suse.com/1116708">SUSE bug 1116708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117963">SUSE bug 1117963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117964">SUSE bug 1117964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131873">SUSE bug 1131873</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8788</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8788" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8788" ref_url="https://www.suse.com/security/cve/CVE-2018-8788" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0539-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0096-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00022.html" source="SUSE-SU"/>
    <description>
    FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode() that results in a memory corruption and possibly even a remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8788/">CVE-2018-8788</cve>
	<bugzilla href="https://bugzilla.suse.com/1116708">SUSE bug 1116708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117963">SUSE bug 1117963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131873">SUSE bug 1131873</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8789</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8789" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8789" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8789" ref_url="https://www.suse.com/security/cve/CVE-2018-8789" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0539-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0096-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00022.html" source="SUSE-SU"/>
    <description>
    FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8789/">CVE-2018-8789</cve>
	<bugzilla href="https://bugzilla.suse.com/1117963">SUSE bug 1117963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117965">SUSE bug 1117965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131873">SUSE bug 1131873</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188897" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8897</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8897" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8897" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8897" ref_url="https://www.suse.com/security/cve/CVE-2018-8897" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1173-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1202-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1220-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1221-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004122.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1514-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1516-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004124.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1517-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004126.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1523-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004134.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1529-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1533-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1537-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1539-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1543-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1636-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1641-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1642-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1644-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1645-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004740.html" source="SUSE-SU"/>
		<reference ref_id="TID000019188" ref_url="https://www.suse.com/support/kb/doc/?id=000019188" source="SUSE-SU"/>
		<reference ref_id="TID7022916" ref_url="https://www.suse.com/support/kb/doc/?id=7022916" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00059.html" source="SUSE-SU"/>
    <description>
    A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that are deferred by MOV SS or POP SS, as demonstrated by (for example) privilege escalation in Windows, macOS, some Xen configurations, or FreeBSD, or a Linux kernel crash. The MOV to SS and POP SS instructions inhibit interrupts (including NMIs), data breakpoints, and single step trap exceptions until the instruction boundary following the next instruction (SDM Vol. 3A; section 6.8.3). (The inhibited data breakpoints are those on memory accessed by the MOV to SS or POP to SS instruction itself.) Note that debug exceptions are not inhibited by the interrupt enable (EFLAGS.IF) system flag (SDM Vol. 3A; section 2.3). If the instruction following the MOV to SS or POP to SS instruction is an instruction like SYSCALL, SYSENTER, INT 3, etc. that transfers control to the operating system at CPL &lt; 3, the debug exception is delivered after the transfer to CPL &lt; 3 is complete. OS kernels may not expect this order of events and may therefore experience unexpected behavior when it occurs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8897/">CVE-2018-8897</cve>
	<bugzilla href="https://bugzilla.suse.com/1087078">SUSE bug 1087078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087088">SUSE bug 1087088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090368">SUSE bug 1090368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090820">SUSE bug 1090820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090869">SUSE bug 1090869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092497">SUSE bug 1092497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093522">SUSE bug 1093522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1100835">SUSE bug 1100835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8905</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8905" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8905" ref_url="https://www.suse.com/security/cve/CVE-2018-8905" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004247.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00017.html" source="SUSE-SU"/>
    <description>
    In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-8905/">CVE-2018-8905</cve>
	<bugzilla href="https://bugzilla.suse.com/1086408">SUSE bug 1086408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8945</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8945" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8945" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8945" ref_url="https://www.suse.com/security/cve/CVE-2018-8945" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
    <description>
    The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (segmentation fault) via a large attribute section.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8945/">CVE-2018-8945</cve>
	<bugzilla href="https://bugzilla.suse.com/1086608">SUSE bug 1086608</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8975</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8975" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8975" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8975" ref_url="https://www.suse.com/security/cve/CVE-2018-8975" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005288.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1645-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005619.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00056.html" source="SUSE-SU"/>
    <description>
    The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, as demonstrated by pbmmask.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8975/">CVE-2018-8975</cve>
	<bugzilla href="https://bugzilla.suse.com/1086777">SUSE bug 1086777</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628803" comment="libnetpbm11-10.80.1-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153785" comment="libnetpbm11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628804" comment="netpbm-10.80.1-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153787" comment="netpbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8976</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8976" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8976" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8976" ref_url="https://www.suse.com/security/cve/CVE-2018-8976" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3598-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-October/025597.html" source="SUSE-SU"/>
    <description>
    In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds read) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-18"/>
	<updated date="2022-10-18"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8976/">CVE-2018-8976</cve>
	<bugzilla href="https://bugzilla.suse.com/1086810">SUSE bug 1086810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716317" comment="exiv2-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716318" comment="exiv2-lang-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716207" comment="libexiv2-26-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716319" comment="libexiv2-26-32bit-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716208" comment="libexiv2-devel-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716320" comment="libexiv2-doc-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20188977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-8977</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-8977" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8977" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-8977" ref_url="https://www.suse.com/security/cve/CVE-2018-8977" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3598-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-October/025597.html" source="SUSE-SU"/>
    <description>
    In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp allows remote attackers to cause a denial of service (invalid memory access) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-18"/>
	<updated date="2022-10-18"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8977/">CVE-2018-8977</cve>
	<bugzilla href="https://bugzilla.suse.com/1086798">SUSE bug 1086798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716317" comment="exiv2-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716318" comment="exiv2-lang-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716207" comment="libexiv2-26-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716319" comment="libexiv2-26-32bit-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716208" comment="libexiv2-devel-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716320" comment="libexiv2-doc-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20189055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-9055</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-9055" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9055" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-9055" ref_url="https://www.suse.com/security/cve/CVE-2018-9055" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005972.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00108.html" source="SUSE-SU"/>
    <description>
    JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9055/">CVE-2018-9055</cve>
	<bugzilla href="https://bugzilla.suse.com/1087020">SUSE bug 1087020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088278">SUSE bug 1088278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20189135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-9135</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-9135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9135" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-9135" ref_url="https://www.suse.com/security/cve/CVE-2018-9135" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-05/msg00026.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-9135/">CVE-2018-9135</cve>
	<bugzilla href="https://bugzilla.suse.com/1087825">SUSE bug 1087825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20189154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-9154</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-9154" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9154" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-9154" ref_url="https://www.suse.com/security/cve/CVE-2018-9154" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1420-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1420-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0734-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00065.html" source="SUSE-SU"/>
    <description>
    There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by triggering an unexpected jas_alloc2 return value, a different vulnerability than CVE-2017-13745.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9154/">CVE-2018-9154</cve>
	<bugzilla href="https://bugzilla.suse.com/1092115">SUSE bug 1092115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20189234" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-9234</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-9234" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9234" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-9234" ref_url="https://www.suse.com/security/cve/CVE-2018-9234" source="SUSE CVE"/>
    <description>
    GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-9234/">CVE-2018-9234</cve>
	<bugzilla href="https://bugzilla.suse.com/1088255">SUSE bug 1088255</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090647">SUSE bug 1090647</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628414" comment="dirmngr-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695558" comment="dirmngr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628415" comment="gpg2-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151446" comment="gpg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628416" comment="gpg2-lang-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151447" comment="gpg2-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20189251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-9251</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-9251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9251" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-9251" ref_url="https://www.suse.com/security/cve/CVE-2018-9251" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004657.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3110-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00029.html" source="SUSE-SU"/>
    <description>
    The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9251/">CVE-2018-9251</cve>
	<bugzilla href="https://bugzilla.suse.com/1088279">SUSE bug 1088279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088601">SUSE bug 1088601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105166">SUSE bug 1105166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20189252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-9252</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-9252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9252" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-9252" ref_url="https://www.suse.com/security/cve/CVE-2018-9252" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9252/">CVE-2018-9252</cve>
	<bugzilla href="https://bugzilla.suse.com/1088278">SUSE bug 1088278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20189305" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-9305</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-9305" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9305" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-9305" ref_url="https://www.suse.com/security/cve/CVE-2018-9305" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006676.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html" source="SUSE-SU"/>
    <description>
    In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9305/">CVE-2018-9305</cve>
	<bugzilla href="https://bugzilla.suse.com/1088424">SUSE bug 1088424</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20189336" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-9336</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-9336" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9336" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-9336" ref_url="https://www.suse.com/security/cve/CVE-2018-9336" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004246.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00011.html" source="SUSE-SU"/>
    <description>
    openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-9336/">CVE-2018-9336</cve>
	<bugzilla href="https://bugzilla.suse.com/1090647">SUSE bug 1090647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090839">SUSE bug 1090839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694906" comment="openvpn-2.4.3-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152221" comment="openvpn is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20189517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-9517</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2018-9517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9517" source="CVE"/>
    <reference ref_id="SUSE CVE-2018-9517" ref_url="https://www.suse.com/security/cve/CVE-2018-9517" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009486.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3217-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-September/020289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3969-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009872.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3876-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JOIHHN3KQX7O34NG25NJOF7PFEZF2TVP/" source="SUSE-SU"/>
    <description>
    In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38159931.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-9517/">CVE-2018-9517</cve>
	<bugzilla href="https://bugzilla.suse.com/1108488">SUSE bug 1108488</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658245" comment="kernel-debug-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658155" comment="kernel-default-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658246" comment="kernel-kvmsmall-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658247" comment="kernel-vanilla-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658248" comment="kernel-vanilla-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658249" comment="kernel-vanilla-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658250" comment="kernel-vanilla-livepatch-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658251" comment="kernel-zfcpdump-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20190154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-0154</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-0154" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0154" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-0154" ref_url="https://www.suse.com/security/cve/CVE-2019-0154" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2946-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192946-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html" source="SUSE-SU"/>
    <description>
    Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may allow an authenticated user to potentially enable denial of service via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-0154/">CVE-2019-0154</cve>
	<bugzilla href="https://bugzilla.suse.com/1135966">SUSE bug 1135966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181720">SUSE bug 1181720</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20190155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-0155</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-0155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0155" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-0155" ref_url="https://www.suse.com/security/cve/CVE-2019-0155" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2946-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192946-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007365.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html" source="SUSE-SU"/>
    <description>
    Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6, E-2100 and E-2200 Processor Families; Intel(R) Graphics Driver for Windows before 26.20.100.6813 (DCH) or 26.20.100.6812 and before 21.20.x.5077 (aka15.45.5077), i915 Linux Driver for Intel(R) Processor Graphics before versions 5.4-rc7, 5.3.11, 4.19.84, 4.14.154, 4.9.201, 4.4.201 may allow an authenticated user to potentially enable escalation of privilege via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-0155/">CVE-2019-0155</cve>
	<bugzilla href="https://bugzilla.suse.com/1135966">SUSE bug 1135966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135967">SUSE bug 1135967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173663">SUSE bug 1173663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20190160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-0160</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-0160" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0160" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-0160" ref_url="https://www.suse.com/security/cve/CVE-2019-0160" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005247.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005268.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00048.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-0160/">CVE-2019-0160</cve>
	<bugzilla href="https://bugzilla.suse.com/1130267">SUSE bug 1130267</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20190161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-0161</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-0161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0161" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-0161" ref_url="https://www.suse.com/security/cve/CVE-2019-0161" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1157-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1204-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20191204-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1352-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00046.html" source="SUSE-SU"/>
    <description>
    Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-0161/">CVE-2019-0161</cve>
	<bugzilla href="https://bugzilla.suse.com/1131361">SUSE bug 1131361</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191000019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1000019</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1000019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1000019" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1000019" ref_url="https://www.suse.com/security/cve/CVE-2019-1000019" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006196.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1196-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2632-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00015.html" source="SUSE-SU"/>
    <description>
    libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1000019/">CVE-2019-1000019</cve>
	<bugzilla href="https://bugzilla.suse.com/1124341">SUSE bug 1124341</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191000020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1000020</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1000020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1000020" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1000020" ref_url="https://www.suse.com/security/cve/CVE-2019-1000020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006196.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1196-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2632-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00015.html" source="SUSE-SU"/>
    <description>
    libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1000020/">CVE-2019-1000020</cve>
	<bugzilla href="https://bugzilla.suse.com/1124342">SUSE bug 1124342</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10063</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10063" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10063" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10063" ref_url="https://www.suse.com/security/cve/CVE-2019-10063" source="SUSE CVE"/>
    <description>
    Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-5226 by using a seccomp filter to prevent sandboxed apps from using the TIOCSTI ioctl, which could otherwise be used to inject commands into the controlling terminal so that they would be executed outside the sandbox after the sandboxed app exits. This fix was incomplete: on 64-bit platforms, the seccomp filter could be bypassed by an ioctl request number that has TIOCSTI in its 32 least significant bits and an arbitrary nonzero value in its 32 most significant bits, which the Linux kernel would treat as equivalent to TIOCSTI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10063/">CVE-2019-10063</cve>
	<bugzilla href="https://bugzilla.suse.com/1130637">SUSE bug 1130637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133041">SUSE bug 1133041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133043">SUSE bug 1133043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629101" comment="flatpak-1.10.2-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171006" comment="flatpak is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629104" comment="libflatpak0-1.10.2-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171009" comment="libflatpak0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629105" comment="system-user-flatpak-1.10.2-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009350838" comment="system-user-flatpak is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10081</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10081" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10081" ref_url="https://www.suse.com/security/cve/CVE-2019-10081" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005849.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2329-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005889.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00004.html" source="SUSE-SU"/>
    <description>
    HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10081/">CVE-2019-10081</cve>
	<bugzilla href="https://bugzilla.suse.com/1145742">SUSE bug 1145742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910082" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10082</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10082" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10082" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10082" ref_url="https://www.suse.com/security/cve/CVE-2019-10082" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005849.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2329-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005889.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00004.html" source="SUSE-SU"/>
    <description>
    In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10082/">CVE-2019-10082</cve>
	<bugzilla href="https://bugzilla.suse.com/1145741">SUSE bug 1145741</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10092</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10092" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10092" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10092" ref_url="https://www.suse.com/security/cve/CVE-2019-10092" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005849.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2329-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005889.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00004.html" source="SUSE-SU"/>
    <description>
    In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server was set up with proxying enabled but was misconfigured in such a way that the Proxy Error page was displayed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-10092/">CVE-2019-10092</cve>
	<bugzilla href="https://bugzilla.suse.com/1145740">SUSE bug 1145740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182703">SUSE bug 1182703</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10097</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10097" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10097" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10097" ref_url="https://www.suse.com/security/cve/CVE-2019-10097" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005849.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00004.html" source="SUSE-SU"/>
    <description>
    In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-10097/">CVE-2019-10097</cve>
	<bugzilla href="https://bugzilla.suse.com/1145739">SUSE bug 1145739</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10098</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10098" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10098" ref_url="https://www.suse.com/security/cve/CVE-2019-10098" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005849.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2329-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005889.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00004.html" source="SUSE-SU"/>
    <description>
    In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-10098/">CVE-2019-10098</cve>
	<bugzilla href="https://bugzilla.suse.com/1145738">SUSE bug 1145738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168407">SUSE bug 1168407</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191010006" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1010006</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1010006" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010006" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1010006" ref_url="https://www.suse.com/security/cve/CVE-2019-1010006" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005796.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005779.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2080-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005806.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00046.html" source="SUSE-SU"/>
    <description>
    Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-1010006/">CVE-2019-1010006</cve>
	<bugzilla href="https://bugzilla.suse.com/1141619">SUSE bug 1141619</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487204" comment="evince-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151448" comment="evince is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487206" comment="evince-lang-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151449" comment="evince-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487209" comment="evince-plugin-pdfdocument-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154095" comment="evince-plugin-pdfdocument is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487213" comment="libevdocument3-4-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151450" comment="libevdocument3-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487214" comment="libevview3-3-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151451" comment="libevview3-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487215" comment="nautilus-evince-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151452" comment="nautilus-evince is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487216" comment="typelib-1_0-EvinceDocument-3_0-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151453" comment="typelib-1_0-EvinceDocument-3_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487217" comment="typelib-1_0-EvinceView-3_0-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151454" comment="typelib-1_0-EvinceView-3_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191010180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1010180</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1010180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010180" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1010180" ref_url="https://www.suse.com/security/cve/CVE-2019-1010180" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2650-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2780-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2902-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2432-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2493-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00028.html" source="SUSE-SU"/>
    <description>
    GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-1010180/">CVE-2019-1010180</cve>
	<bugzilla href="https://bugzilla.suse.com/1142772">SUSE bug 1142772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629348" comment="gdb-10.1-8.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152905" comment="gdb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191010204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1010204</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1010204" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010204" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1010204" ref_url="https://www.suse.com/security/cve/CVE-2019-1010204" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3131-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3145-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013145.html" source="SUSE-SU"/>
    <description>
    GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcpp_file.h:644. The attack vector is: An ELF file with an invalid e_shoff header field must be opened.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-22"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1010204/">CVE-2019-1010204</cve>
	<bugzilla href="https://bugzilla.suse.com/1142579">SUSE bug 1142579</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723071" comment="binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723072" comment="binutils-devel-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723073" comment="binutils-devel-32bit-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723074" comment="binutils-gold-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723075" comment="cross-aarch64-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723076" comment="cross-arm-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723077" comment="cross-avr-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723078" comment="cross-epiphany-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238034" comment="cross-epiphany-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723079" comment="cross-hppa-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723080" comment="cross-hppa64-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723081" comment="cross-i386-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723082" comment="cross-ia64-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723083" comment="cross-m68k-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723084" comment="cross-mips-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723085" comment="cross-ppc-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723086" comment="cross-ppc64-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723087" comment="cross-ppc64le-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723088" comment="cross-riscv64-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238035" comment="cross-riscv64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723089" comment="cross-rx-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238036" comment="cross-rx-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723090" comment="cross-s390-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723091" comment="cross-s390x-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723092" comment="cross-sparc-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723093" comment="cross-sparc64-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723094" comment="cross-spu-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723095" comment="cross-x86_64-binutils-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723096" comment="libctf-nobfd0-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723097" comment="libctf0-2.39-150100.7.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191010305" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1010305</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1010305" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010305" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1010305" ref_url="https://www.suse.com/security/cve/CVE-2019-1010305" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2711-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007450.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00068.html" source="SUSE-SU"/>
    <description>
    libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmd_read_headers() in libmspack(file libmspack/mspack/chmd.c). The attack vector is: the victim must open a specially crafted chm file. The fixed version is: after commit 2f084136cfe0d05e5bf5703f3e83c6d955234b4d.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1010305/">CVE-2019-1010305</cve>
	<bugzilla href="https://bugzilla.suse.com/1141680">SUSE bug 1141680</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482310" comment="libmspack0-0.6-3.8.19 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151459" comment="libmspack0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191010319" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1010319</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1010319" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010319" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1010319" ref_url="https://www.suse.com/security/cve/CVE-2019-1010319" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0153-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EK4DH6BBB2WPBM677O7MFUOO5UBKUW37/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0154-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FD5IPNZ6LGJLORJOQVT3MAHBWF3ORQPT/" source="SUSE-SU"/>
    <description>
    WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig (wave64.c:211). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/33a0025d1d63ccd05d9dbaa6923d52b1446a62fe.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-1010319/">CVE-2019-1010319</cve>
	<bugzilla href="https://bugzilla.suse.com/1141334">SUSE bug 1141334</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628918" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172747" comment="libwavpack1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10132</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10132" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10132" ref_url="https://www.suse.com/security/cve/CVE-2019-10132" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005555.html" source="SUSE-SU"/>
    <description>
    A flaw was found in libvirt in version 4.1.0 and earlier. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-10132/">CVE-2019-10132</cve>
	<bugzilla href="https://bugzilla.suse.com/1134348">SUSE bug 1134348</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10156</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10156" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10156" ref_url="https://www.suse.com/security/cve/CVE-2019-10156" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-10156/">CVE-2019-10156</cve>
	<bugzilla href="https://bugzilla.suse.com/1137528">SUSE bug 1137528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10160</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10160" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10160" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10160" ref_url="https://www.suse.com/security/cve/CVE-2019-10160" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005804.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005777.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2053-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005803.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0302-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006445.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    A security regression of CVE-2019-9636 was discovered in python, since commit d537ab0ff9767ef024f26246899728f0116b1ec3, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10160/">CVE-2019-10160</cve>
	<bugzilla href="https://bugzilla.suse.com/1138459">SUSE bug 1138459</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10161</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10161" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10161" ref_url="https://www.suse.com/security/cve/CVE-2019-10161" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005613.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005612.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005629.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005809.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2227-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2227-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005908.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1753-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00019.html" source="SUSE-SU"/>
    <description>
    It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of arbitrary files, cause denial of service or cause libvirtd to execute arbitrary programs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10161/">CVE-2019-10161</cve>
	<bugzilla href="https://bugzilla.suse.com/1138301">SUSE bug 1138301</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10166</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10166" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10166" ref_url="https://www.suse.com/security/cve/CVE-2019-10166" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005612.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005615.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1753-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00019.html" source="SUSE-SU"/>
    <description>
    It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would execute an arbitrary program when the domain was resumed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10166/">CVE-2019-10166</cve>
	<bugzilla href="https://bugzilla.suse.com/1138302">SUSE bug 1138302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10167</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10167" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10167" ref_url="https://www.suse.com/security/cve/CVE-2019-10167" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005612.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005809.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2227-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2227-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005908.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1753-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00019.html" source="SUSE-SU"/>
    <description>
    The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10167/">CVE-2019-10167</cve>
	<bugzilla href="https://bugzilla.suse.com/1138303">SUSE bug 1138303</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10168</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10168" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10168" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10168" ref_url="https://www.suse.com/security/cve/CVE-2019-10168" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005615.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1753-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00019.html" source="SUSE-SU"/>
    <description>
    The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10168/">CVE-2019-10168</cve>
	<bugzilla href="https://bugzilla.suse.com/1138305">SUSE bug 1138305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138582">SUSE bug 1138582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10181</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10181" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10181" ref_url="https://www.suse.com/security/cve/CVE-2019-10181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010747.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00045.html" source="SUSE-SU"/>
    <description>
    It was found that executable code could be injected in a JAR file without compromising the signature verification. An attacker could use this flaw to inject code in a trusted JAR. The code would be executed inside the sandbox.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10181/">CVE-2019-10181</cve>
	<bugzilla href="https://bugzilla.suse.com/1142835">SUSE bug 1142835</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678962" comment="icedtea-web-1.7.2-150100.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177171" comment="icedtea-web is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678645" comment="icedtea-web-javadoc-1.7.2-150100.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151624" comment="icedtea-web-javadoc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10182</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10182" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10182" ref_url="https://www.suse.com/security/cve/CVE-2019-10182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010747.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00045.html" source="SUSE-SU"/>
    <description>
    It was found that icedtea-web did not properly sanitize paths from &lt;jar/&gt; elements in JNLP files. An attacker could trick a victim into running a specially crafted application and use this flaw to upload arbitrary files to arbitrary locations in the context of the user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10182/">CVE-2019-10182</cve>
	<bugzilla href="https://bugzilla.suse.com/1142825">SUSE bug 1142825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678962" comment="icedtea-web-1.7.2-150100.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177171" comment="icedtea-web is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678645" comment="icedtea-web-javadoc-1.7.2-150100.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151624" comment="icedtea-web-javadoc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10183</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10183" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10183" ref_url="https://www.suse.com/security/cve/CVE-2019-10183" source="SUSE CVE"/>
    <description>
    The virt-install utility used to provision new virtual machines, in virt-manager v2.2.0, has introduced an option '--unattended' to create VMs without user interaction. This option accepts guest VM password as command line arguments. An attacker could obtain these passwords though process listings on the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.2/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10183/">CVE-2019-10183</cve>
	<bugzilla href="https://bugzilla.suse.com/1140211">SUSE bug 1140211</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629995" comment="virt-install-3.2.0-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174429" comment="virt-install is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629996" comment="virt-manager-3.2.0-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174430" comment="virt-manager is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629997" comment="virt-manager-common-3.2.0-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174431" comment="virt-manager-common is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10185</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10185" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10185" ref_url="https://www.suse.com/security/cve/CVE-2019-10185" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010747.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00045.html" source="SUSE-SU"/>
    <description>
    It was found that icedtea-web was vulnerable to a zip-slip attack during auto-extraction of a JAR file. An attacker could use this flaw to write files to arbitrary locations. This could also be used to replace the main running application and, possibly, break out of the sandbox.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10185/">CVE-2019-10185</cve>
	<bugzilla href="https://bugzilla.suse.com/1142832">SUSE bug 1142832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678962" comment="icedtea-web-1.7.2-150100.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177171" comment="icedtea-web is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678645" comment="icedtea-web-javadoc-1.7.2-150100.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151624" comment="icedtea-web-javadoc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10197</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10197" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10197" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10197" ref_url="https://www.suse.com/security/cve/CVE-2019-10197" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007440.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00045.html" source="SUSE-SU"/>
    <description>
    A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10197/">CVE-2019-10197</cve>
	<bugzilla href="https://bugzilla.suse.com/1141267">SUSE bug 1141267</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10214</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10214" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10214" ref_url="https://www.suse.com/security/cve/CVE-2019-10214" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2341-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005898.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2368-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192368-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2369-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192369-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006624.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3423-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010404.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2137-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2159-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0554-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2106-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q7YYGMTZ4T4RLHDVCMQD3K6CDIAXO3O3/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0310-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/P4DQSPUPKAZCPS5MQYTAYGS7YM76UIHZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0770-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WFIDXN6UAK2I4PPVFPBE4STNQH2FZQ4A/" source="SUSE-SU"/>
    <description>
    The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launch a MiTM attack and steal login credentials or bearer tokens.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10214/">CVE-2019-10214</cve>
	<bugzilla href="https://bugzilla.suse.com/1144065">SUSE bug 1144065</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667813" comment="buildah-1.23.1-150300.8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266828" comment="buildah is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10216</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10216" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10216" ref_url="https://www.suse.com/security/cve/CVE-2019-10216" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005903.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2160-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10216/">CVE-2019-10216</cve>
	<bugzilla href="https://bugzilla.suse.com/1144621">SUSE bug 1144621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146882">SUSE bug 1146882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146884">SUSE bug 1146884</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10218</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10218" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10218" ref_url="https://www.suse.com/security/cve/CVE-2019-10218" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2866-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192866-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2868-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192868-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2875-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192875-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007440.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2442-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00015.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this vulnerability to create files outside of the current working directory using the privileges of the client user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-10218/">CVE-2019-10218</cve>
	<bugzilla href="https://bugzilla.suse.com/1144902">SUSE bug 1144902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910220" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10220</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10220" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10220" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2829-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192829-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2859-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192859-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2946-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192946-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2947-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2951-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006134.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2953-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192953-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3019-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193019-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006226.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3224-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006230.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3225-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3228-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006242.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006241.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3258-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006244.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006247.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3261-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006243.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html" source="SUSE-SU"/>
    <description>
    Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153108">SUSE bug 1153108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10222</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10222" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10222" ref_url="https://www.suse.com/security/cve/CVE-2019-10222" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006435.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006442.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2994-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006152.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-10222/">CVE-2019-10222</cve>
	<bugzilla href="https://bugzilla.suse.com/1139399">SUSE bug 1139399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145093">SUSE bug 1145093</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694875" comment="librados2-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694876" comment="librbd1-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10650</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10650" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10650" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10650" ref_url="https://www.suse.com/security/cve/CVE-2019-10650" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1019-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005441.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00010.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or information disclosure via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10650/">CVE-2019-10650</cve>
	<bugzilla href="https://bugzilla.suse.com/1131317">SUSE bug 1131317</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10732</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10732" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10732" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10732" ref_url="https://www.suse.com/security/cve/CVE-2019-10732" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0188-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UIP7JD6E7AKTOSG2IAFVY4AE7G4NZIKB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0227-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YLC7UQIBHAGRFRPYNNT4MHJGHGZKGOLU/" source="SUSE-SU"/>
    <description>
    In KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended receiver. If the receiver replies to this (benign looking) email, they unknowingly leak the plaintext of the encrypted message part(s) back to the attacker.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-10732/">CVE-2019-10732</cve>
	<bugzilla href="https://bugzilla.suse.com/1131885">SUSE bug 1131885</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694900" comment="messagelib-20.04.2-bp153.1.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009157848" comment="messagelib is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694901" comment="messagelib-lang-20.04.2-bp153.1.29 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009241457" comment="messagelib-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10740</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10740" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10740" ref_url="https://www.suse.com/security/cve/CVE-2019-10740" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1516-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3WUL4HE7A5MLE433XPBQYBUU6265EYNA/" source="SUSE-SU"/>
    <description>
    In Roundcube Webmail before 1.3.10, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended receiver. If the receiver replies to this (benign looking) email, they unknowingly leak the plaintext of the encrypted message part(s) back to the attacker.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-10740/">CVE-2019-10740</cve>
	<bugzilla href="https://bugzilla.suse.com/1131801">SUSE bug 1131801</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175135">SUSE bug 1175135</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009718212" comment="roundcubemail-1.5.3-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152670" comment="roundcubemail is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910784" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10784</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10784" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10784" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10784" ref_url="https://www.suse.com/security/cve/CVE-2019-10784" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:10065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4YEBNCIRQOKETS4R7J5GXRP3TKF2YKFJ/" source="SUSE-SU"/>
    <description>
    phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the application. One such area, "database.php" does not verify the source of an HTTP request. This can be leveraged by a remote attacker to trick a logged-in administrator to visit a malicious page with a CSRF exploit and execute arbitrary system commands on the server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-26"/>
	<updated date="2022-07-26"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10784/">CVE-2019-10784</cve>
	<bugzilla href="https://bugzilla.suse.com/1162794">SUSE bug 1162794</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009702115" comment="phpPgAdmin-7.13.0-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009702116" comment="phpPgAdmin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009702117" comment="phpPgAdmin-apache-7.13.0-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009702118" comment="phpPgAdmin-apache is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10800</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10800" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10800" ref_url="https://www.suse.com/security/cve/CVE-2019-10800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:2752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011881.html" source="SUSE-SU"/>
    <description>
    This affects the package codecov before 2.0.16. The vulnerability occurs due to not sanitizing gcov arguments before being being provided to the popen method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-13"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10800/">CVE-2019-10800</cve>
	<bugzilla href="https://bugzilla.suse.com/1201494">SUSE bug 1201494</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699895" comment="python2-codecov-2.0.15-150100.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009706497" comment="python2-codecov is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699896" comment="python3-codecov-2.0.15-150100.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009706498" comment="python3-codecov is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910871" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10871</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10871" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10871" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10871" ref_url="https://www.suse.com/security/cve/CVE-2019-10871" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10871/">CVE-2019-10871</cve>
	<bugzilla href="https://bugzilla.suse.com/1131696">SUSE bug 1131696</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201910872" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-10872</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-10872" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10872" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-10872" ref_url="https://www.suse.com/security/cve/CVE-2019-10872" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10872/">CVE-2019-10872</cve>
	<bugzilla href="https://bugzilla.suse.com/1131722">SUSE bug 1131722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911007" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11007</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11007" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11007" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11007" ref_url="https://www.suse.com/security/cve/CVE-2019-11007" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1019-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005441.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00010.html" source="SUSE-SU"/>
    <description>
    In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the ReadMNGImage function of coders/png.c, which allows attackers to cause a denial of service or information disclosure via an image colormap.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11007/">CVE-2019-11007</cve>
	<bugzilla href="https://bugzilla.suse.com/1132060">SUSE bug 1132060</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911008" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11008</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11008" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11008" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11008" ref_url="https://www.suse.com/security/cve/CVE-2019-11008" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1019-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005375.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1355-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00055.html" source="SUSE-SU"/>
    <description>
    In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11008/">CVE-2019-11008</cve>
	<bugzilla href="https://bugzilla.suse.com/1132054">SUSE bug 1132054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133202">SUSE bug 1133202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133203">SUSE bug 1133203</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911023" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11023</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11023" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11023" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11023" ref_url="https://www.suse.com/security/cve/CVE-2019-11023" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1267-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005647.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1267-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007119.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00065.html" source="SUSE-SU"/>
    <description>
    The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graphml2gv.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11023/">CVE-2019-11023</cve>
	<bugzilla href="https://bugzilla.suse.com/1132091">SUSE bug 1132091</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628497" comment="graphviz-2.40.1-6.6.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167847" comment="graphviz is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694752" comment="graphviz-gd-2.40.1-6.6.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167853" comment="graphviz-gd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630157" comment="graphviz-gnome-2.40.1-6.6.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167855" comment="graphviz-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628499" comment="graphviz-plugins-core-2.40.1-6.6.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009254560" comment="graphviz-plugins-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628500" comment="libgraphviz6-2.40.1-6.6.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009254561" comment="libgraphviz6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911034" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11034</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11034" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11034" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11034" ref_url="https://www.suse.com/security/cve/CVE-2019-11034" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005489.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1360-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005507.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html" source="SUSE-SU"/>
    <description>
    When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11034/">CVE-2019-11034</cve>
	<bugzilla href="https://bugzilla.suse.com/1132838">SUSE bug 1132838</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11035</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11035" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11035" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11035" ref_url="https://www.suse.com/security/cve/CVE-2019-11035" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005489.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1360-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005507.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html" source="SUSE-SU"/>
    <description>
    When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11035/">CVE-2019-11035</cve>
	<bugzilla href="https://bugzilla.suse.com/1132837">SUSE bug 1132837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911036" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11036</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11036" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11036" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11036" ref_url="https://www.suse.com/security/cve/CVE-2019-11036" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005489.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1360-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005507.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html" source="SUSE-SU"/>
    <description>
    When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11036/">CVE-2019-11036</cve>
	<bugzilla href="https://bugzilla.suse.com/1134322">SUSE bug 1134322</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11038</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11038" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11038" ref_url="https://www.suse.com/security/cve/CVE-2019-11038" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005875.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006579.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0594-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006586.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.html" source="SUSE-SU"/>
    <description>
    When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11038/">CVE-2019-11038</cve>
	<bugzilla href="https://bugzilla.suse.com/1140118">SUSE bug 1140118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140120">SUSE bug 1140120</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11039</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11039" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11039" ref_url="https://www.suse.com/security/cve/CVE-2019-11039" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1724-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20191724-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00029.html" source="SUSE-SU"/>
    <description>
    Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11039/">CVE-2019-11039</cve>
	<bugzilla href="https://bugzilla.suse.com/1138173">SUSE bug 1138173</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11040</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11040" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11040" ref_url="https://www.suse.com/security/cve/CVE-2019-11040" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1724-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20191724-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00029.html" source="SUSE-SU"/>
    <description>
    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11040/">CVE-2019-11040</cve>
	<bugzilla href="https://bugzilla.suse.com/1138172">SUSE bug 1138172</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11041</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11041" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11041" ref_url="https://www.suse.com/security/cve/CVE-2019-11041" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005875.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005873.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006550.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2271-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00019.html" source="SUSE-SU"/>
    <description>
    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11041/">CVE-2019-11041</cve>
	<bugzilla href="https://bugzilla.suse.com/1146360">SUSE bug 1146360</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11042</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11042" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11042" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11042" ref_url="https://www.suse.com/security/cve/CVE-2019-11042" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005875.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005873.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006550.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2271-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00019.html" source="SUSE-SU"/>
    <description>
    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11042/">CVE-2019-11042</cve>
	<bugzilla href="https://bugzilla.suse.com/1145095">SUSE bug 1145095</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911043" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11043</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11043" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11043" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11043" ref_url="https://www.suse.com/security/cve/CVE-2019-11043" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2909-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006550.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2457-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00014.html" source="SUSE-SU"/>
    <description>
    In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11043/">CVE-2019-11043</cve>
	<bugzilla href="https://bugzilla.suse.com/1154999">SUSE bug 1154999</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11045</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11045" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11045" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11045" ref_url="https://www.suse.com/security/cve/CVE-2019-11045" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006419.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006550.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006513.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html" source="SUSE-SU"/>
    <description>
    In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11045/">CVE-2019-11045</cve>
	<bugzilla href="https://bugzilla.suse.com/1159923">SUSE bug 1159923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911046" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11046</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11046" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11046" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11046" ref_url="https://www.suse.com/security/cve/CVE-2019-11046" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006419.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006550.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006513.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html" source="SUSE-SU"/>
    <description>
    In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP bcmath extension functions on some systems, including Windows, can be tricked into reading beyond the allocated space by supplying it with string containing characters that are identified as numeric by the OS but aren't ASCII numbers. This can read to disclosure of the content of some memory locations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11046/">CVE-2019-11046</cve>
	<bugzilla href="https://bugzilla.suse.com/1159924">SUSE bug 1159924</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911047" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11047</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11047" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11047" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11047" ref_url="https://www.suse.com/security/cve/CVE-2019-11047" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006419.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006550.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006513.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html" source="SUSE-SU"/>
    <description>
    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11047/">CVE-2019-11047</cve>
	<bugzilla href="https://bugzilla.suse.com/1159922">SUSE bug 1159922</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11050</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11050" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11050" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11050" ref_url="https://www.suse.com/security/cve/CVE-2019-11050" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006419.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006550.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006513.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html" source="SUSE-SU"/>
    <description>
    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11050/">CVE-2019-11050</cve>
	<bugzilla href="https://bugzilla.suse.com/1159927">SUSE bug 1159927</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11068</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11068" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11068" ref_url="https://www.suse.com/security/cve/CVE-2019-11068" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1221-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005639.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005516.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1862-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1973-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005753.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005772.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1527-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1824-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00001.html" source="SUSE-SU"/>
    <description>
    libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-11068/">CVE-2019-11068</cve>
	<bugzilla href="https://bugzilla.suse.com/1132160">SUSE bug 1132160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482466" comment="libxslt-tools-1.1.32-3.8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155747" comment="libxslt-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482467" comment="libxslt1-1.1.32-3.8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155748" comment="libxslt1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11070</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11070" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11070" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11070" ref_url="https://www.suse.com/security/cve/CVE-2019-11070" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005426.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html" source="SUSE-SU"/>
    <description>
    WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11070/">CVE-2019-11070</cve>
	<bugzilla href="https://bugzilla.suse.com/1132196">SUSE bug 1132196</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911091" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11091</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11091" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11091" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11091" ref_url="https://www.suse.com/security/cve/CVE-2019-11091" source="SUSE CVE"/>
		<reference ref_id="MDS-BLOG-SUSE" ref_url="https://www.suse.com/c/suse-addresses-microarchitectural-data-sampling-vulnerabilities/" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1239-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005464.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005451.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005456.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005450.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005472.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005474.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005486.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005495.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1356-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005510.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005455.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005473.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14063-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005492.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1423-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005530.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005540.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005581.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1909-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="TID000019406" ref_url="https://www.suse.com/support/kb/doc/?id=000019406" source="SUSE-SU"/>
		<reference ref_id="TID000019455" ref_url="https://www.suse.com/support/kb/doc/?id=000019455" source="SUSE-SU"/>
		<reference ref_id="TID7023736" ref_url="https://www.suse.com/support/kb/doc/?id=7023736" source="SUSE-SU"/>
		<reference ref_id="TID7023881" ref_url="https://www.suse.com/support/kb/doc/?id=7023881" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1402-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1403-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1805-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1806-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11091/">CVE-2019-11091</cve>
	<bugzilla href="https://bugzilla.suse.com/1103186">SUSE bug 1103186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111331">SUSE bug 1111331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132686">SUSE bug 1132686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133319">SUSE bug 1133319</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135394">SUSE bug 1135394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138534">SUSE bug 1138534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141977">SUSE bug 1141977</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201877">SUSE bug 1201877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629040" comment="ucode-intel-20210216-2.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11135</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11135" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11135" ref_url="https://www.suse.com/security/cve/CVE-2019-11135" source="SUSE CVE"/>
		<reference ref_id="SUSE-BLOG-TAA-IFU" ref_url="https://www.suse.com/c/suse-addresses-transactional-asynchronous-abort-and-machine-check-error-on-page-size-changes-issues/" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2946-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192946-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2947-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2951-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006134.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2953-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192953-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2955-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192955-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2957-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006122.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2958-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192958-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2959-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192959-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2960-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2961-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192961-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2986-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2987-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3297-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006253.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006456.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006485.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007221.html" source="SUSE-SU"/>
		<reference ref_id="TID000019563" ref_url="https://www.suse.com/support/kb/doc/?id=000019563" source="SUSE-SU"/>
		<reference ref_id="TID7024251" ref_url="https://www.suse.com/support/kb/doc/?id=7024251" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2504-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2506-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2527-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00042.html" source="SUSE-SU"/>
    <description>
    TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11135/">CVE-2019-11135</cve>
	<bugzilla href="https://bugzilla.suse.com/1139073">SUSE bug 1139073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152497">SUSE bug 1152497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152505">SUSE bug 1152505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152506">SUSE bug 1152506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201877">SUSE bug 1201877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629040" comment="ucode-intel-20210216-2.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11139</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11139" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11139" ref_url="https://www.suse.com/security/cve/CVE-2019-11139" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2957-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006122.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2958-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192958-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2959-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192959-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2986-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2987-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006195.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2504-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2527-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00045.html" source="SUSE-SU"/>
    <description>
    Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11139/">CVE-2019-11139</cve>
	<bugzilla href="https://bugzilla.suse.com/1141035">SUSE bug 1141035</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629040" comment="ucode-intel-20210216-2.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11236</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11236" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11236" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11236" ref_url="https://www.suse.com/security/cve/CVE-2019-11236" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005880.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005892.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2370-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192370-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2399-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005931.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2133-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11236/">CVE-2019-11236</cve>
	<bugzilla href="https://bugzilla.suse.com/1129071">SUSE bug 1129071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132663">SUSE bug 1132663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629005" comment="python3-urllib3-1.25.10-2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177231" comment="python3-urllib3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911324" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11324</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11324" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11324" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11324" ref_url="https://www.suse.com/security/cve/CVE-2019-11324" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005880.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005892.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2370-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192370-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005927.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2133-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-28"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11324/">CVE-2019-11324</cve>
	<bugzilla href="https://bugzilla.suse.com/1132900">SUSE bug 1132900</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629005" comment="python3-urllib3-1.25.10-2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177231" comment="python3-urllib3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11338</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11338" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11338" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11338" ref_url="https://www.suse.com/security/cve/CVE-2019-11338" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html" source="SUSE-SU"/>
    <description>
    libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11338/">CVE-2019-11338</cve>
	<bugzilla href="https://bugzilla.suse.com/1133155">SUSE bug 1133155</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911339" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11339</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11339" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11339" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11339" ref_url="https://www.suse.com/security/cve/CVE-2019-11339" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html" source="SUSE-SU"/>
    <description>
    The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via crafted MPEG-4 video data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11339/">CVE-2019-11339</cve>
	<bugzilla href="https://bugzilla.suse.com/1133153">SUSE bug 1133153</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11459</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11459" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11459" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11459" ref_url="https://www.suse.com/security/cve/CVE-2019-11459" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005796.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2080-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005806.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1667-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00089.html" source="SUSE-SU"/>
    <description>
    The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11459/">CVE-2019-11459</cve>
	<bugzilla href="https://bugzilla.suse.com/1133037">SUSE bug 1133037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487204" comment="evince-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151448" comment="evince is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487206" comment="evince-lang-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151449" comment="evince-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487209" comment="evince-plugin-pdfdocument-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154095" comment="evince-plugin-pdfdocument is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487213" comment="libevdocument3-4-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151450" comment="libevdocument3-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487214" comment="libevview3-3-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151451" comment="libevview3-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487215" comment="nautilus-evince-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151452" comment="nautilus-evince is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487216" comment="typelib-1_0-EvinceDocument-3_0-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151453" comment="typelib-1_0-EvinceDocument-3_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487217" comment="typelib-1_0-EvinceView-3_0-3.34.2-1.115 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151454" comment="typelib-1_0-EvinceView-3_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11460</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11460" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11460" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11460" ref_url="https://www.suse.com/security/cve/CVE-2019-11460" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012788.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00088.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in GNOME gnome-desktop 3.26, 3.28, and 3.30 prior to 3.30.2.2, and 3.32 prior to 3.32.1.1. A compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl to push characters into the input buffer of the thumbnailer's controlling terminal, allowing an attacker to escape the sandbox if the thumbnailer has a controlling terminal. This is due to improper filtering of the TIOCSTI ioctl on 64-bit systems, similar to CVE-2019-10063.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11460/">CVE-2019-11460</cve>
	<bugzilla href="https://bugzilla.suse.com/1133043">SUSE bug 1133043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629134" comment="gnome-desktop-lang-3.34.7-3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695656" comment="gnome-desktop-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629135" comment="gnome-version-3.34.7-3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695657" comment="gnome-version is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721955" comment="libgnome-desktop-3-12-3.26.2-150000.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009722459" comment="libgnome-desktop-3-12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721956" comment="libgnome-desktop-3-12-32bit-3.26.2-150000.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009722460" comment="libgnome-desktop-3-12-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629136" comment="libgnome-desktop-3-18-3.34.7-3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695658" comment="libgnome-desktop-3-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629138" comment="libgnome-desktop-3_0-common-3.34.7-3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695659" comment="libgnome-desktop-3_0-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629139" comment="typelib-1_0-GnomeDesktop-3_0-3.34.7-3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695660" comment="typelib-1_0-GnomeDesktop-3_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11461</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11461" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11461" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11461" ref_url="https://www.suse.com/security/cve/CVE-2019-11461" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005831.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00088.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in GNOME Nautilus 3.30 prior to 3.30.6 and 3.32 prior to 3.32.1. A compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl to push characters into the input buffer of the thumbnailer's controlling terminal, allowing an attacker to escape the sandbox if the thumbnailer has a controlling terminal. This is due to improper filtering of the TIOCSTI ioctl on 64-bit systems, similar to CVE-2019-10063.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<cve href="https://www.suse.com/security/cve/CVE-2019-11461/">CVE-2019-11461</cve>
	<bugzilla href="https://bugzilla.suse.com/1133041">SUSE bug 1133041</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629146" comment="gnome-shell-search-provider-nautilus-3.34.3-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231392" comment="gnome-shell-search-provider-nautilus is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629147" comment="libnautilus-extension1-3.34.3-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231393" comment="libnautilus-extension1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629148" comment="nautilus-3.34.3-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231395" comment="nautilus is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629150" comment="nautilus-lang-3.34.3-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231397" comment="nautilus-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11470</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11470" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11470" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11470" ref_url="https://www.suse.com/security/cve/CVE-2019-11470" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1523-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005633.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1603-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1683-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html" source="SUSE-SU"/>
    <description>
    The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled resource consumption) by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for insufficient image data in a file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11470/">CVE-2019-11470</cve>
	<bugzilla href="https://bugzilla.suse.com/1133205">SUSE bug 1133205</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11472</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11472" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11472" ref_url="https://www.suse.com/security/cve/CVE-2019-11472" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1523-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005633.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1603-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1683-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html" source="SUSE-SU"/>
    <description>
    ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (divide-by-zero error) by crafting an XWD image file in which the header indicates neither LSB first nor MSB first.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11472/">CVE-2019-11472</cve>
	<bugzilla href="https://bugzilla.suse.com/1133202">SUSE bug 1133202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133203">SUSE bug 1133203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133204">SUSE bug 1133204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146213">SUSE bug 1146213</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11477</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11477" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11477" ref_url="https://www.suse.com/security/cve/CVE-2019-11477" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005579.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1529-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1533-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005578.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005577.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005581.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1581-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1588-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1668-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005618.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005617.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005620.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1924-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005744.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2450-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005958.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2658-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192658-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006131.html" source="SUSE-SU"/>
		<reference ref_id="TID000019472" ref_url="https://www.suse.com/support/kb/doc/?id=000019472" source="SUSE-SU"/>
		<reference ref_id="TID7023928" ref_url="https://www.suse.com/support/kb/doc/?id=7023928" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1571-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1579-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Jonathan Looney discovered that the TCP_SKB_CB(skb)-&gt;tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-11477/">CVE-2019-11477</cve>
	<bugzilla href="https://bugzilla.suse.com/1132686">SUSE bug 1132686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137586">SUSE bug 1137586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142129">SUSE bug 1142129</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11478</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11478" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11478" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11478" ref_url="https://www.suse.com/security/cve/CVE-2019-11478" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005579.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1529-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1533-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005578.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005577.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005581.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1581-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1588-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1668-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005618.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005617.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005620.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1851-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20191851-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1924-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005744.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2450-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005958.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006072.html" source="SUSE-SU"/>
		<reference ref_id="TID000019472" ref_url="https://www.suse.com/support/kb/doc/?id=000019472" source="SUSE-SU"/>
		<reference ref_id="TID7023928" ref_url="https://www.suse.com/support/kb/doc/?id=7023928" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1571-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1579-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11478/">CVE-2019-11478</cve>
	<bugzilla href="https://bugzilla.suse.com/1132686">SUSE bug 1132686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137586">SUSE bug 1137586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142129">SUSE bug 1142129</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11479</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11479" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11479" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11479" ref_url="https://www.suse.com/security/cve/CVE-2019-11479" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005579.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1529-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1533-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005578.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005577.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005581.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2756-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006049.html" source="SUSE-SU"/>
		<reference ref_id="TID000019472" ref_url="https://www.suse.com/support/kb/doc/?id=000019472" source="SUSE-SU"/>
		<reference ref_id="TID7023928" ref_url="https://www.suse.com/support/kb/doc/?id=7023928" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1571-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1579-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c2221478101ee72f5cb4654b9fc363.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11479/">CVE-2019-11479</cve>
	<bugzilla href="https://bugzilla.suse.com/1132686">SUSE bug 1132686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137586">SUSE bug 1137586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142129">SUSE bug 1142129</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11498</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11498" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11498" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11498" ref_url="https://www.suse.com/security/cve/CVE-2019-11498" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0153-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EK4DH6BBB2WPBM677O7MFUOO5UBKUW37/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0154-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FD5IPNZ6LGJLORJOQVT3MAHBWF3ORQPT/" source="SUSE-SU"/>
    <description>
    WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition, which might allow attackers to cause a denial of service (application crash) via a DFF file that lacks valid sample-rate data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11498/">CVE-2019-11498</cve>
	<bugzilla href="https://bugzilla.suse.com/1133384">SUSE bug 1133384</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628918" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172747" comment="libwavpack1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11505</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11505" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11505" ref_url="https://www.suse.com/security/cve/CVE-2019-11505" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1523-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005633.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1355-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1603-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1683-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html" source="SUSE-SU"/>
    <description>
    In GraphicsMagick from version 1.3.8 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WritePDBImage of coders/pdb.c, which allows an attacker to cause a denial of service or possibly have unspecified other impact via a crafted image file. This is related to MagickBitStreamMSBWrite in magick/bit_stream.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11505/">CVE-2019-11505</cve>
	<bugzilla href="https://bugzilla.suse.com/1133501">SUSE bug 1133501</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11506</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11506" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11506" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11506" ref_url="https://www.suse.com/security/cve/CVE-2019-11506" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1523-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005633.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1355-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1603-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1683-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html" source="SUSE-SU"/>
    <description>
    In GraphicsMagick from version 1.3.30 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WriteMATLABImage of coders/mat.c, which allows an attacker to cause a denial of service or possibly have unspecified other impact via a crafted image file. This is related to ExportRedQuantumType in magick/export.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11506/">CVE-2019-11506</cve>
	<bugzilla href="https://bugzilla.suse.com/1133498">SUSE bug 1133498</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11555</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11555" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11555" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11555" ref_url="https://www.suse.com/security/cve/CVE-2019-11555" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL pointer dereference (denial of service). This affects eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11555/">CVE-2019-11555</cve>
	<bugzilla href="https://bugzilla.suse.com/1133640">SUSE bug 1133640</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11597</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11597" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11597" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11597" ref_url="https://www.suse.com/security/cve/CVE-2019-11597" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005670.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1683-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1795-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00043.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11597/">CVE-2019-11597</cve>
	<bugzilla href="https://bugzilla.suse.com/1138464">SUSE bug 1138464</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146211">SUSE bug 1146211</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11598</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11598" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11598" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11598" ref_url="https://www.suse.com/security/cve/CVE-2019-11598" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1523-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005633.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1603-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1683-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11598/">CVE-2019-11598</cve>
	<bugzilla href="https://bugzilla.suse.com/1136732">SUSE bug 1136732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179313">SUSE bug 1179313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179336">SUSE bug 1179336</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11691</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11691" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11691" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11691" ref_url="https://www.suse.com/security/cve/CVE-2019-11691" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60.7, Firefox &lt; 67, and Firefox ESR &lt; 60.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11691/">CVE-2019-11691</cve>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11692</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11692" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11692" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11692" ref_url="https://www.suse.com/security/cve/CVE-2019-11692" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60.7, Firefox &lt; 67, and Firefox ESR &lt; 60.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11692/">CVE-2019-11692</cve>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11693</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11693" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11693" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11693" ref_url="https://www.suse.com/security/cve/CVE-2019-11693" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird &lt; 60.7, Firefox &lt; 67, and Firefox ESR &lt; 60.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11693/">CVE-2019-11693</cve>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11694</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11694" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11694" ref_url="https://www.suse.com/security/cve/CVE-2019-11694" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to access an otherwise unavailable file. This results in the potential leaking of information stored at that memory location. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird &lt; 60.7, Firefox &lt; 67, and Firefox ESR &lt; 60.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11694/">CVE-2019-11694</cve>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11698</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11698" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11698" ref_url="https://www.suse.com/security/cve/CVE-2019-11698" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user's browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird &lt; 60.7, Firefox &lt; 67, and Firefox ESR &lt; 60.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11698/">CVE-2019-11698</cve>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911703" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11703</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11703" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11703" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11703" ref_url="https://www.suse.com/security/cve/CVE-2019-11703" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005558.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1577-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1583-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1606-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in parser_get_next_char when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60.7.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11703/">CVE-2019-11703</cve>
	<bugzilla href="https://bugzilla.suse.com/1137595">SUSE bug 1137595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11704</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11704" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11704" ref_url="https://www.suse.com/security/cve/CVE-2019-11704" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005558.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1577-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1583-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1606-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in icalmemory_strdup_and_dequote when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60.7.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11704/">CVE-2019-11704</cve>
	<bugzilla href="https://bugzilla.suse.com/1137595">SUSE bug 1137595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11705</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11705" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11705" ref_url="https://www.suse.com/security/cve/CVE-2019-11705" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005558.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1577-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1583-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1606-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in icalrecur_add_bydayrules when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60.7.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11705/">CVE-2019-11705</cve>
	<bugzilla href="https://bugzilla.suse.com/1137595">SUSE bug 1137595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11706</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11706" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11706" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11706" ref_url="https://www.suse.com/security/cve/CVE-2019-11706" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005558.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1577-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1583-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1606-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    A flaw in Thunderbird's implementation of iCal causes a type confusion in icaltimezone_get_vtimezone_properties when processing certain email messages, resulting in a crash. This vulnerability affects Thunderbird &lt; 60.7.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11706/">CVE-2019-11706</cve>
	<bugzilla href="https://bugzilla.suse.com/1137595">SUSE bug 1137595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11707</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11707" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11707" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11707" ref_url="https://www.suse.com/security/cve/CVE-2019-11707" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1593-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1606-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR &lt; 60.7.1, Firefox &lt; 67.0.3, and Thunderbird &lt; 60.7.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11707/">CVE-2019-11707</cve>
	<bugzilla href="https://bugzilla.suse.com/1138614">SUSE bug 1138614</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11708</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11708" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11708" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11708" ref_url="https://www.suse.com/security/cve/CVE-2019-11708" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005624.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1606-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing arbitrary code on the user's computer. This vulnerability affects Firefox ESR &lt; 60.7.2, Firefox &lt; 67.0.4, and Thunderbird &lt; 60.7.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="10/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11708/">CVE-2019-11708</cve>
	<bugzilla href="https://bugzilla.suse.com/1138872">SUSE bug 1138872</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11709</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11709" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11709" ref_url="https://www.suse.com/security/cve/CVE-2019-11709" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1960-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1782-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-07/msg00107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members reported memory safety bugs present in Firefox 67 and Firefox ESR 60.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR &lt; 60.8, Firefox &lt; 68, and Thunderbird &lt; 60.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11709/">CVE-2019-11709</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11710</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11710" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11710" ref_url="https://www.suse.com/security/cve/CVE-2019-11710" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members reported memory safety bugs present in Firefox 67. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11710/">CVE-2019-11710</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11711</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11711" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11711" ref_url="https://www.suse.com/security/cve/CVE-2019-11711" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1960-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1782-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-07/msg00107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
    <description>
    When an inner window is reused, it does not consider the use of document.domain for cross-origin protections. If pages on different subdomains ever cooperatively use document.domain, then either page can abuse this to inject script into arbitrary pages on the other subdomain, even those that did not use document.domain to relax their origin security. This vulnerability affects Firefox ESR &lt; 60.8, Firefox &lt; 68, and Thunderbird &lt; 60.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11711/">CVE-2019-11711</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11712</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11712" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11712" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11712" ref_url="https://www.suse.com/security/cve/CVE-2019-11712" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1960-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1782-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-07/msg00107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
    <description>
    POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS requirements. This can allow an attacker to perform Cross-Site Request Forgery (CSRF) attacks. This vulnerability affects Firefox ESR &lt; 60.8, Firefox &lt; 68, and Thunderbird &lt; 60.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11712/">CVE-2019-11712</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11713</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11713" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11713" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11713" ref_url="https://www.suse.com/security/cve/CVE-2019-11713" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1960-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1782-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-07/msg00107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR &lt; 60.8, Firefox &lt; 68, and Thunderbird &lt; 60.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11713/">CVE-2019-11713</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911714" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11714</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11714" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11714" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11714" ref_url="https://www.suse.com/security/cve/CVE-2019-11714" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    Necko can access a child on the wrong thread during UDP connections, resulting in a potentially exploitable crash in some instances. This vulnerability affects Firefox &lt; 68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11714/">CVE-2019-11714</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911715" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11715</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11715" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11715" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11715" ref_url="https://www.suse.com/security/cve/CVE-2019-11715" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1960-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1782-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-07/msg00107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
    <description>
    Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and lead to XSS hazards on web sites in certain circumstances. This vulnerability affects Firefox ESR &lt; 60.8, Firefox &lt; 68, and Thunderbird &lt; 60.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11715/">CVE-2019-11715</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911716" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11716</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11716" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11716" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11716" ref_url="https://www.suse.com/security/cve/CVE-2019-11716" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames(window). Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes to be bypassed. This vulnerability affects Firefox &lt; 68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11716/">CVE-2019-11716</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911717" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11717</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11717" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11717" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11717" ref_url="https://www.suse.com/security/cve/CVE-2019-11717" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1960-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1782-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-07/msg00107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
    <description>
    A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin attributes. This vulnerability affects Firefox ESR &lt; 60.8, Firefox &lt; 68, and Thunderbird &lt; 60.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11717/">CVE-2019-11717</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11718</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11718" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11718" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11718" ref_url="https://www.suse.com/security/cve/CVE-2019-11718" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on the Activity Stream page without sanitization, allowing for a potential access to other information available to the Activity Stream, such as browsing history, if the Snipper Service were compromised. This vulnerability affects Firefox &lt; 68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11718/">CVE-2019-11718</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911719" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11719</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11719" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11719" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11719" ref_url="https://www.suse.com/security/cve/CVE-2019-11719" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1960-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1782-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-07/msg00107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
    <description>
    When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information disclosure. This vulnerability affects Firefox ESR &lt; 60.8, Firefox &lt; 68, and Thunderbird &lt; 60.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11719/">CVE-2019-11719</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11720</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11720" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11720" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11720" ref_url="https://www.suse.com/security/cve/CVE-2019-11720" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting (XSS) filtering. This vulnerability affects Firefox &lt; 68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11720/">CVE-2019-11720</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11721</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11721" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11721" ref_url="https://www.suse.com/security/cve/CVE-2019-11721" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for domain spoofing attacks as do not display as punycode text, allowing for user confusion. This vulnerability affects Firefox &lt; 68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-11721/">CVE-2019-11721</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911723" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11723</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11723" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11723" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11723" ref_url="https://www.suse.com/security/cve/CVE-2019-11723" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different "containers" for people who use the Firefox Multi-Account Containers Web Extension. This vulnerability affects Firefox &lt; 68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11723/">CVE-2019-11723</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911724" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11724</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11724" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11724" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11724" ref_url="https://www.suse.com/security/cve/CVE-2019-11724" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox &lt; 68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11724/">CVE-2019-11724</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911725" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11725</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11725" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11725" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11725" ref_url="https://www.suse.com/security/cve/CVE-2019-11725" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    When a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are displayed and navigation is interrupted but resources from the same site loaded through websockets are not blocked, leading to the loading of unsafe resources and bypassing safebrowsing protections. This vulnerability affects Firefox &lt; 68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-11725/">CVE-2019-11725</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911727" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11727</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11727" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11727" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11727" ref_url="https://www.suse.com/security/cve/CVE-2019-11727" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14418-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox &lt; 68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11727/">CVE-2019-11727</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141322">SUSE bug 1141322</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11728</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11728" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11728" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11728" ref_url="https://www.suse.com/security/cve/CVE-2019-11728" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded. This vulnerability affects Firefox &lt; 68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.7/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11728/">CVE-2019-11728</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11729</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11729" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11729" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11729" ref_url="https://www.suse.com/security/cve/CVE-2019-11729" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1960-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1782-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-07/msg00107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
    <description>
    Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR &lt; 60.8, Firefox &lt; 68, and Thunderbird &lt; 60.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11729/">CVE-2019-11729</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11730</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11730" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11730" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11730" ref_url="https://www.suse.com/security/cve/CVE-2019-11730" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1960-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1782-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-07/msg00107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
    <description>
    A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and they may uploaded to a server. It was demonstrated that in combination with a popular Android messaging app, if a malicious HTML attachment is sent to a user and they opened that attachment in Firefox, due to that app's predictable pattern for locally-saved file names, it is possible to read attachments the victim received from other correspondents. This vulnerability affects Firefox ESR &lt; 60.8, Firefox &lt; 68, and Thunderbird &lt; 60.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11730/">CVE-2019-11730</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11733</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11733" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11733" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11733" ref_url="https://www.suse.com/security/cve/CVE-2019-11733" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog. It was found that locally stored passwords can be copied to the clipboard thorough the 'copy password' context menu item without re-entering the master password if the master password had been previously entered in the same session, allowing for potential theft of stored passwords. This vulnerability affects Firefox &lt; 68.0.2 and Firefox ESR &lt; 68.0.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11733/">CVE-2019-11733</cve>
	<bugzilla href="https://bugzilla.suse.com/1145665">SUSE bug 1145665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11735</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11735" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11735" ref_url="https://www.suse.com/security/cve/CVE-2019-11735" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members reported memory safety bugs present in Firefox 68 and Firefox ESR 68. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 69 and Firefox ESR &lt; 68.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11735/">CVE-2019-11735</cve>
	<bugzilla href="https://bugzilla.suse.com/1149293">SUSE bug 1149293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149324">SUSE bug 1149324</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11736</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11736" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11736" ref_url="https://www.suse.com/security/cve/CVE-2019-11736" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access. Additionally, there was a race condition during checks for junctions and symbolic links by the Maintenance Service, allowing for potential local file and directory manipulation to be undetected in some circumstances. This allows for potential privilege escalation by a user with unprivileged local access. &lt;br&gt;*Note: These attacks requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Firefox &lt; 69 and Firefox ESR &lt; 68.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11736/">CVE-2019-11736</cve>
	<bugzilla href="https://bugzilla.suse.com/1149292">SUSE bug 1149292</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149324">SUSE bug 1149324</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11738</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11738" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11738" ref_url="https://www.suse.com/security/cve/CVE-2019-11738" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed. This could allow for malicious JavaScript content to be run, bypassing CSP permissions. This vulnerability affects Firefox &lt; 69 and Firefox ESR &lt; 68.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11738/">CVE-2019-11738</cve>
	<bugzilla href="https://bugzilla.suse.com/1149302">SUSE bug 1149302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149324">SUSE bug 1149324</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11739</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11739" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11739" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11739" ref_url="https://www.suse.com/security/cve/CVE-2019-11739" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
    <description>
    Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird &lt; 68.1 and Thunderbird &lt; 60.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11739/">CVE-2019-11739</cve>
	<bugzilla href="https://bugzilla.suse.com/1150939">SUSE bug 1150939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150940">SUSE bug 1150940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11740</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11740" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11740" ref_url="https://www.suse.com/security/cve/CVE-2019-11740" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2436-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox 60.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 69, Thunderbird &lt; 68.1, Thunderbird &lt; 60.9, Firefox ESR &lt; 60.9, and Firefox ESR &lt; 68.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11740/">CVE-2019-11740</cve>
	<bugzilla href="https://bugzilla.suse.com/1149299">SUSE bug 1149299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149324">SUSE bug 1149324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150940">SUSE bug 1150940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11742</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11742" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11742" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11742" ref_url="https://www.suse.com/security/cve/CVE-2019-11742" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2436-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a &amp;lt;canvas&amp;gt; element due to an error in how same-origin policy is applied to cached image content. The resulting same-origin policy violation could allow for data theft. This vulnerability affects Firefox &lt; 69, Thunderbird &lt; 68.1, Thunderbird &lt; 60.9, Firefox ESR &lt; 60.9, and Firefox ESR &lt; 68.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11742/">CVE-2019-11742</cve>
	<bugzilla href="https://bugzilla.suse.com/1149303">SUSE bug 1149303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149324">SUSE bug 1149324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150940">SUSE bug 1150940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11743</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11743" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11743" ref_url="https://www.suse.com/security/cve/CVE-2019-11743" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2436-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload event, which restricts access to detailed timing attributes to only be same-origin. This resulted in potential cross-origin information exposure of history through timing side-channel attacks. This vulnerability affects Firefox &lt; 69, Thunderbird &lt; 68.1, Thunderbird &lt; 60.9, Firefox ESR &lt; 60.9, and Firefox ESR &lt; 68.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11743/">CVE-2019-11743</cve>
	<bugzilla href="https://bugzilla.suse.com/1149298">SUSE bug 1149298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149324">SUSE bug 1149324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150940">SUSE bug 1150940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11744</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11744" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11744" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11744" ref_url="https://www.suse.com/security/cve/CVE-2019-11744" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2436-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    Some HTML elements, such as &amp;lt;title&amp;gt; and &amp;lt;textarea&amp;gt;, can contain literal angle brackets without treating them as markup. It is possible to pass a literal closing tag to .innerHTML on these elements, and subsequent content after that will be parsed as if it were outside the tag. This can lead to XSS if a site does not filter user input as strictly for these elements as it does for other elements. This vulnerability affects Firefox &lt; 69, Thunderbird &lt; 68.1, Thunderbird &lt; 60.9, Firefox ESR &lt; 60.9, and Firefox ESR &lt; 68.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11744/">CVE-2019-11744</cve>
	<bugzilla href="https://bugzilla.suse.com/1149304">SUSE bug 1149304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149324">SUSE bug 1149324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150940">SUSE bug 1150940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11745</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11745" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11745" ref_url="https://www.suse.com/security/cve/CVE-2019-11745" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0088-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200088-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14418-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0002-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00006.html" source="SUSE-SU"/>
    <description>
    When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 68.3, Firefox ESR &lt; 68.3, and Firefox &lt; 71.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11745/">CVE-2019-11745</cve>
	<bugzilla href="https://bugzilla.suse.com/1158328">SUSE bug 1158328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158527">SUSE bug 1158527</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11746</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11746" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11746" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11746" ref_url="https://www.suse.com/security/cve/CVE-2019-11746" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2436-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Firefox &lt; 69, Thunderbird &lt; 68.1, Thunderbird &lt; 60.9, Firefox ESR &lt; 60.9, and Firefox ESR &lt; 68.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11746/">CVE-2019-11746</cve>
	<bugzilla href="https://bugzilla.suse.com/1149297">SUSE bug 1149297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149324">SUSE bug 1149324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150940">SUSE bug 1150940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911747" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11747</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11747" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11747" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11747" ref_url="https://www.suse.com/security/cve/CVE-2019-11747" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    The "Forget about this site" feature in the History pane is intended to remove all saved user data that indicates a user has visited a site. This includes removing any HTTP Strict Transport Security (HSTS) settings received from sites that use it. Due to a bug, sites on the pre-load list also have their HSTS setting removed. On the next visit to that site if the user specifies an http: URL rather than secure https: they will not be protected by the pre-loaded HSTS setting. After that visit the site's HSTS setting will be restored. This vulnerability affects Firefox &lt; 69 and Firefox ESR &lt; 68.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11747/">CVE-2019-11747</cve>
	<bugzilla href="https://bugzilla.suse.com/1149301">SUSE bug 1149301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149324">SUSE bug 1149324</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11748</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11748" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11748" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11748" ref_url="https://www.suse.com/security/cve/CVE-2019-11748" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context. In light of recent high profile vulnerabilities in other software, a decision was made to no longer persist these permissions. This avoids the possibility of trusted WebRTC resources being invisibly embedded in web content and abusing permissions previously given by users. Users will now be prompted for permissions on each use. This vulnerability affects Firefox &lt; 69 and Firefox ESR &lt; 68.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11748/">CVE-2019-11748</cve>
	<bugzilla href="https://bugzilla.suse.com/1149291">SUSE bug 1149291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149324">SUSE bug 1149324</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11749</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11749" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11749" ref_url="https://www.suse.com/security/cve/CVE-2019-11749" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia API using constraints to reveal device properties of cameras on the system without triggering a user prompt or notification. This allows for the potential fingerprinting of users. This vulnerability affects Firefox &lt; 69 and Firefox ESR &lt; 68.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11749/">CVE-2019-11749</cve>
	<bugzilla href="https://bugzilla.suse.com/1149290">SUSE bug 1149290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149324">SUSE bug 1149324</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11750</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11750" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11750" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11750" ref_url="https://www.suse.com/security/cve/CVE-2019-11750" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash. This vulnerability affects Firefox &lt; 69 and Firefox ESR &lt; 68.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11750/">CVE-2019-11750</cve>
	<bugzilla href="https://bugzilla.suse.com/1149289">SUSE bug 1149289</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149324">SUSE bug 1149324</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11751</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11751" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11751" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11751" ref_url="https://www.suse.com/security/cve/CVE-2019-11751" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as when a user clicks on malicious links in a chat application. This can be used to write a log file to an arbitrary location such as the Windows 'Startup' folder. &lt;br&gt;*Note: this issue only affects Firefox on Windows operating systems.*. This vulnerability affects Firefox &lt; 69 and Firefox ESR &lt; 68.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11751/">CVE-2019-11751</cve>
	<bugzilla href="https://bugzilla.suse.com/1149286">SUSE bug 1149286</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149324">SUSE bug 1149324</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11752</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11752" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11752" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11752" ref_url="https://www.suse.com/security/cve/CVE-2019-11752" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2436-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox &lt; 69, Thunderbird &lt; 68.1, Thunderbird &lt; 60.9, Firefox ESR &lt; 60.9, and Firefox ESR &lt; 68.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11752/">CVE-2019-11752</cve>
	<bugzilla href="https://bugzilla.suse.com/1149296">SUSE bug 1149296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149324">SUSE bug 1149324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150940">SUSE bug 1150940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11753</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11753" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11753" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11753" ref_url="https://www.suse.com/security/cve/CVE-2019-11753" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2436-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected from manipulation by unprivileged users or malware. If the Mozilla Maintenance Service is manipulated to update this unprotected location and the updated maintenance service in the unprotected location has been altered, the altered maintenance service can run with elevated privileges during the update process due to a lack of integrity checks. This allows for privilege escalation if the executable has been replaced locally. &lt;br&gt;*Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Firefox &lt; 69, Firefox ESR &lt; 60.9, and Firefox ESR &lt; 68.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11753/">CVE-2019-11753</cve>
	<bugzilla href="https://bugzilla.suse.com/1149295">SUSE bug 1149295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149324">SUSE bug 1149324</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11755</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11755" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11755" ref_url="https://www.suse.com/security/cve/CVE-2019-11755" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005982.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html" source="SUSE-SU"/>
    <description>
    A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a valid digital signature, although the signer might have had no access to the contents of the encrypted message, and might have stripped a different signature from the encrypted message. Previous versions had only suppressed showing a digital signature for messages with an outer multipart/signed layer. This vulnerability affects Thunderbird &lt; 68.1.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-11755/">CVE-2019-11755</cve>
	<bugzilla href="https://bugzilla.suse.com/1152375">SUSE bug 1152375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911757" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11757</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11757" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11757" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11757" ref_url="https://www.suse.com/security/cve/CVE-2019-11757" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2871-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192871-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2452-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html" source="SUSE-SU"/>
    <description>
    When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. This resulted in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox &lt; 70, Thunderbird &lt; 68.2, and Firefox ESR &lt; 68.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11757/">CVE-2019-11757</cve>
	<bugzilla href="https://bugzilla.suse.com/1154738">SUSE bug 1154738</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11758</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11758" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11758" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11758" ref_url="https://www.suse.com/security/cve/CVE-2019-11758" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2871-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192871-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2452-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html" source="SUSE-SU"/>
    <description>
    Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was installed. This bug showed evidence of memory corruption in the accessibility engine and we presume that with enough effort that it could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 69, Thunderbird &lt; 68.2, and Firefox ESR &lt; 68.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11758/">CVE-2019-11758</cve>
	<bugzilla href="https://bugzilla.suse.com/1154738">SUSE bug 1154738</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911759" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11759</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11759" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11759" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11759" ref_url="https://www.suse.com/security/cve/CVE-2019-11759" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2871-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192871-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2452-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html" source="SUSE-SU"/>
    <description>
    An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This could be used by an attacker to execute arbitrary code or more likely lead to a crash. This vulnerability affects Firefox &lt; 70, Thunderbird &lt; 68.2, and Firefox ESR &lt; 68.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11759/">CVE-2019-11759</cve>
	<bugzilla href="https://bugzilla.suse.com/1154738">SUSE bug 1154738</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11760</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11760" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11760" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11760" ref_url="https://www.suse.com/security/cve/CVE-2019-11760" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2871-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192871-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2452-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html" source="SUSE-SU"/>
    <description>
    A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploitable crash in some instances. This vulnerability affects Firefox &lt; 70, Thunderbird &lt; 68.2, and Firefox ESR &lt; 68.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11760/">CVE-2019-11760</cve>
	<bugzilla href="https://bugzilla.suse.com/1154738">SUSE bug 1154738</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11761</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11761" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11761" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11761" ref_url="https://www.suse.com/security/cve/CVE-2019-11761" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2871-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192871-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2452-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html" source="SUSE-SU"/>
    <description>
    By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox &lt; 70, Thunderbird &lt; 68.2, and Firefox ESR &lt; 68.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11761/">CVE-2019-11761</cve>
	<bugzilla href="https://bugzilla.suse.com/1154738">SUSE bug 1154738</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11762</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11762" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11762" ref_url="https://www.suse.com/security/cve/CVE-2019-11762" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2871-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192871-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2452-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html" source="SUSE-SU"/>
    <description>
    If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call arbitrary DOM methods/getters/setters on the now-cross-origin window. This vulnerability affects Firefox &lt; 70, Thunderbird &lt; 68.2, and Firefox ESR &lt; 68.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11762/">CVE-2019-11762</cve>
	<bugzilla href="https://bugzilla.suse.com/1154738">SUSE bug 1154738</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11763</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11763" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11763" ref_url="https://www.suse.com/security/cve/CVE-2019-11763" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2871-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192871-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2452-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html" source="SUSE-SU"/>
    <description>
    Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities. This could have led to HTML comment text being treated as HTML which could have led to XSS in a web application under certain conditions. It could have also led to HTML entities being masked from filters - enabling the use of entities to mask the actual characters of interest from filters. This vulnerability affects Firefox &lt; 70, Thunderbird &lt; 68.2, and Firefox ESR &lt; 68.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11763/">CVE-2019-11763</cve>
	<bugzilla href="https://bugzilla.suse.com/1154738">SUSE bug 1154738</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11764</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11764" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11764" ref_url="https://www.suse.com/security/cve/CVE-2019-11764" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2871-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192871-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2452-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 70, Thunderbird &lt; 68.2, and Firefox ESR &lt; 68.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11764/">CVE-2019-11764</cve>
	<bugzilla href="https://bugzilla.suse.com/1154738">SUSE bug 1154738</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201911922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-11922</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-11922" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11922" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-11922" ref_url="https://www.suse.com/security/cve/CVE-2019-11922" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1845-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1952-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00078.html" source="SUSE-SU"/>
    <description>
    A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="0/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11922/">CVE-2019-11922</cve>
	<bugzilla href="https://bugzilla.suse.com/1142941">SUSE bug 1142941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628934" comment="libzstd1-1.4.4-1.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009262525" comment="libzstd1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628935" comment="libzstd1-32bit-1.4.4-1.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266836" comment="libzstd1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12068</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12068" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12068" ref_url="https://www.suse.com/security/cve/CVE-2019-12068" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2955-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192955-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006485.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14396-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1514-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006872.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008673.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2505-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00034.html" source="SUSE-SU"/>
    <description>
    In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's-&gt;dsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12068/">CVE-2019-12068</cve>
	<bugzilla href="https://bugzilla.suse.com/1146873">SUSE bug 1146873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146874">SUSE bug 1146874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12155</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12155" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12155" ref_url="https://www.suse.com/security/cve/CVE-2019-12155" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2157-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005888.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005843.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005878.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005906.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006485.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2059-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00008.html" source="SUSE-SU"/>
    <description>
    interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-12155/">CVE-2019-12155</cve>
	<bugzilla href="https://bugzilla.suse.com/1135902">SUSE bug 1135902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135905">SUSE bug 1135905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12290</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12290" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12290" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12290" ref_url="https://www.suse.com/security/cve/CVE-2019-12290" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006193.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2611-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2613-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00008.html" source="SUSE-SU"/>
    <description>
    GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the inclusion of certain punycoded Unicode characters (that would be discarded when converted first to a Unicode label and then back to an ASCII label), arbitrary domains can be impersonated.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-12290/">CVE-2019-12290</cve>
	<bugzilla href="https://bugzilla.suse.com/1154884">SUSE bug 1154884</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628747" comment="libidn2-0-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177212" comment="libidn2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628748" comment="libidn2-0-32bit-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177213" comment="libidn2-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694851" comment="libidn2-lang-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009273026" comment="libidn2-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12435</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12435" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12435" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12435" ref_url="https://www.suse.com/security/cve/CVE-2019-12435" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1574-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005626.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1755-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00023.html" source="SUSE-SU"/>
    <description>
    Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server (dnsserver) RPC server process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12435/">CVE-2019-12435</cve>
	<bugzilla href="https://bugzilla.suse.com/1137815">SUSE bug 1137815</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12436</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12436" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12436" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12436" ref_url="https://www.suse.com/security/cve/CVE-2019-12436" source="SUSE CVE"/>
    <description>
    Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12436/">CVE-2019-12436</cve>
	<bugzilla href="https://bugzilla.suse.com/1137816">SUSE bug 1137816</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12439</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12439" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12439" ref_url="https://www.suse.com/security/cve/CVE-2019-12439" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005699.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1535-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1721-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00015.html" source="SUSE-SU"/>
    <description>
    bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations (related to XDG_RUNTIME_DIR), a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12439/">CVE-2019-12439</cve>
	<bugzilla href="https://bugzilla.suse.com/1136958">SUSE bug 1136958</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481773" comment="bubblewrap-0.4.1-1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177243" comment="bubblewrap is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12447</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12447" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12447" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12447" ref_url="https://www.suse.com/security/cve/CVE-2019-12447" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005636.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1697-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-12447/">CVE-2019-12447</cve>
	<bugzilla href="https://bugzilla.suse.com/1136986">SUSE bug 1136986</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487297" comment="gvfs-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245313" comment="gvfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487298" comment="gvfs-backend-afc-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245315" comment="gvfs-backend-afc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487299" comment="gvfs-backend-samba-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245316" comment="gvfs-backend-samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487300" comment="gvfs-backends-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245317" comment="gvfs-backends is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487302" comment="gvfs-fuse-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245319" comment="gvfs-fuse is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487303" comment="gvfs-lang-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245320" comment="gvfs-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12448</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12448" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12448" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12448" ref_url="https://www.suse.com/security/cve/CVE-2019-12448" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005636.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1697-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12448/">CVE-2019-12448</cve>
	<bugzilla href="https://bugzilla.suse.com/1136981">SUSE bug 1136981</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487297" comment="gvfs-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245313" comment="gvfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487298" comment="gvfs-backend-afc-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245315" comment="gvfs-backend-afc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487299" comment="gvfs-backend-samba-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245316" comment="gvfs-backend-samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487300" comment="gvfs-backends-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245317" comment="gvfs-backends is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487302" comment="gvfs-fuse-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245319" comment="gvfs-fuse is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487303" comment="gvfs-lang-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245320" comment="gvfs-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12449</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12449" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12449" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12449" ref_url="https://www.suse.com/security/cve/CVE-2019-12449" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005636.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1697-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to file:// URIs, because root privileges are unavailable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-12449/">CVE-2019-12449</cve>
	<bugzilla href="https://bugzilla.suse.com/1136992">SUSE bug 1136992</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487297" comment="gvfs-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245313" comment="gvfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487298" comment="gvfs-backend-afc-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245315" comment="gvfs-backend-afc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487299" comment="gvfs-backend-samba-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245316" comment="gvfs-backend-samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487300" comment="gvfs-backends-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245317" comment="gvfs-backends is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487302" comment="gvfs-fuse-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245319" comment="gvfs-fuse is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487303" comment="gvfs-lang-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245320" comment="gvfs-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12450</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12450" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12450" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12450" ref_url="https://www.suse.com/security/cve/CVE-2019-12450" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005625.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005644.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1650-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00076.html" source="SUSE-SU"/>
    <description>
    file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-12450/">CVE-2019-12450</cve>
	<bugzilla href="https://bugzilla.suse.com/1137001">SUSE bug 1137001</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139959">SUSE bug 1139959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142126">SUSE bug 1142126</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628466" comment="glib2-lang-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151143" comment="glib2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628467" comment="glib2-tools-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151144" comment="glib2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628468" comment="libgio-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151145" comment="libgio-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628469" comment="libgio-2_0-0-32bit-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151146" comment="libgio-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628470" comment="libglib-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151147" comment="libglib-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628471" comment="libglib-2_0-0-32bit-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151148" comment="libglib-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628472" comment="libgmodule-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151149" comment="libgmodule-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628473" comment="libgmodule-2_0-0-32bit-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151150" comment="libgmodule-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628474" comment="libgobject-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151151" comment="libgobject-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628475" comment="libgobject-2_0-0-32bit-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151152" comment="libgobject-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628476" comment="libgthread-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151153" comment="libgthread-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12730</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12730" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12730" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12730" ref_url="https://www.suse.com/security/cve/CVE-2019-12730" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3184-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007084.html" source="SUSE-SU"/>
    <description>
    aa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows use of uninitialized variables.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-12730/">CVE-2019-12730</cve>
	<bugzilla href="https://bugzilla.suse.com/1137526">SUSE bug 1137526</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12735</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12735" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12735" ref_url="https://www.suse.com/security/cve/CVE-2019-12735" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005543.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1457-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005545.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1551-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1561-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1562-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1796-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00075.html" source="SUSE-SU"/>
    <description>
    getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12735/">CVE-2019-12735</cve>
	<bugzilla href="https://bugzilla.suse.com/1137443">SUSE bug 1137443</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629044" comment="vim-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151193" comment="vim is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629045" comment="vim-data-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151194" comment="vim-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629046" comment="vim-data-common-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177135" comment="vim-data-common is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12749</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12749" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12749" ref_url="https://www.suse.com/security/cve/CVE-2019-12749" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005601.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005596.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2820-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006487.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1672-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006978.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1671-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00026.html" source="SUSE-SU"/>
    <description>
    dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid, allowing authentication bypass.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-12749/">CVE-2019-12749</cve>
	<bugzilla href="https://bugzilla.suse.com/1137832">SUSE bug 1137832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481908" comment="dbus-1-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481910" comment="dbus-1-x11-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481911" comment="libdbus-1-3-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481912" comment="libdbus-1-3-32bit-1.12.2-8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912795" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12795</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12795" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12795" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12795" ref_url="https://www.suse.com/security/cve/CVE-2019-12795" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005636.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1697-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html" source="SUSE-SU"/>
    <description>
    daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12795/">CVE-2019-12795</cve>
	<bugzilla href="https://bugzilla.suse.com/1137930">SUSE bug 1137930</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487297" comment="gvfs-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245313" comment="gvfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487298" comment="gvfs-backend-afc-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245315" comment="gvfs-backend-afc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487299" comment="gvfs-backend-samba-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245316" comment="gvfs-backend-samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487300" comment="gvfs-backends-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245317" comment="gvfs-backends is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487302" comment="gvfs-fuse-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245319" comment="gvfs-fuse is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487303" comment="gvfs-lang-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245320" comment="gvfs-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912874" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12874</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12874" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12874" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12874" ref_url="https://www.suse.com/security/cve/CVE-2019-12874" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12874/">CVE-2019-12874</cve>
	<bugzilla href="https://bugzilla.suse.com/1138933">SUSE bug 1138933</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12900</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12900" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12900" ref_url="https://www.suse.com/security/cve/CVE-2019-12900" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006343.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005707.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1955-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2004-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192004-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2013-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006169.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1781-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-07/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1918-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2268-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GAR55SQV75RXSJVDKQWD4CZNKDOYFY5P/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2276-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DHFME6EFDMW6BQBIYMTU3MBXQLVR7QTK/" source="SUSE-SU"/>
    <description>
    BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12900/">CVE-2019-12900</cve>
	<bugzilla href="https://bugzilla.suse.com/1139083">SUSE bug 1139083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149458">SUSE bug 1149458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694726" comment="bzip2-1.0.6-5.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151380" comment="bzip2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694727" comment="libbz2-1-1.0.6-5.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151382" comment="libbz2-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694728" comment="libbz2-1-32bit-1.0.6-5.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151383" comment="libbz2-1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912904" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12904</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12904" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12904" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12904" ref_url="https://www.suse.com/security/cve/CVE-2019-12904" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006343.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005720.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005751.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1792-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00049.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) NOTE: the vendor's position is that the issue report cannot be validated because there is no description of an attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-12904/">CVE-2019-12904</cve>
	<bugzilla href="https://bugzilla.suse.com/1138939">SUSE bug 1138939</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482233" comment="libgcrypt20-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482234" comment="libgcrypt20-32bit-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12972</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12972" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12972" ref_url="https://www.suse.com/security/cve/CVE-2019-12972" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007888.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1790-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1804-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. There is a heap-based buffer over-read in _bfd_doprnt in bfd.c because elf_object_p in elfcode.h mishandles an e_shstrndx section of type SHT_GROUP by omitting a trailing '\0' character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12972/">CVE-2019-12972</cve>
	<bugzilla href="https://bugzilla.suse.com/1140126">SUSE bug 1140126</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12973</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12973" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12973" ref_url="https://www.suse.com/security/cve/CVE-2019-12973" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005970.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html" source="SUSE-SU"/>
    <description>
    In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-12973/">CVE-2019-12973</cve>
	<bugzilla href="https://bugzilla.suse.com/1140359">SUSE bug 1140359</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12974</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12974" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12974" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12974" ref_url="https://www.suse.com/security/cve/CVE-2019-12974" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.c in ImageMagick 7.0.8-34 allows remote attackers to cause a denial of service via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12974/">CVE-2019-12974</cve>
	<bugzilla href="https://bugzilla.suse.com/1140111">SUSE bug 1140111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12975</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12975" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12975" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12975" ref_url="https://www.suse.com/security/cve/CVE-2019-12975" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-12975/">CVE-2019-12975</cve>
	<bugzilla href="https://bugzilla.suse.com/1140106">SUSE bug 1140106</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12976</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12976" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12976" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12976" ref_url="https://www.suse.com/security/cve/CVE-2019-12976" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12976/">CVE-2019-12976</cve>
	<bugzilla href="https://bugzilla.suse.com/1140110">SUSE bug 1140110</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12977</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12977" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12977" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12977" ref_url="https://www.suse.com/security/cve/CVE-2019-12977" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12977/">CVE-2019-12977</cve>
	<bugzilla href="https://bugzilla.suse.com/1139884">SUSE bug 1139884</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12978</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12978" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12978" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12978" ref_url="https://www.suse.com/security/cve/CVE-2019-12978" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12978/">CVE-2019-12978</cve>
	<bugzilla href="https://bugzilla.suse.com/1139885">SUSE bug 1139885</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201912979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-12979</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-12979" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12979" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-12979" ref_url="https://www.suse.com/security/cve/CVE-2019-12979" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12979/">CVE-2019-12979</cve>
	<bugzilla href="https://bugzilla.suse.com/1139886">SUSE bug 1139886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13050</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13050" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13050" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13050" ref_url="https://www.suse.com/security/cve/CVE-2019-13050" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006343.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2006-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192006-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1917-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00039.html" source="SUSE-SU"/>
    <description>
    Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13050/">CVE-2019-13050</cve>
	<bugzilla href="https://bugzilla.suse.com/1141093">SUSE bug 1141093</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628414" comment="dirmngr-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695558" comment="dirmngr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628415" comment="gpg2-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151446" comment="gpg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628416" comment="gpg2-lang-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151447" comment="gpg2-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913057" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13057</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13057" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13057" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13057" ref_url="https://www.suse.com/security/cve/CVE-2019-13057" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2390-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005924.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1210-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006767.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00058.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13057/">CVE-2019-13057</cve>
	<bugzilla href="https://bugzilla.suse.com/1143273">SUSE bug 1143273</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13109</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13109" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13109" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13109" ref_url="https://www.suse.com/security/cve/CVE-2019-13109" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:4208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013143.html" source="SUSE-SU"/>
    <description>
    An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a chunkLength - iccOffset subtraction.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-30"/>
	<updated date="2022-11-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13109/">CVE-2019-13109</cve>
	<bugzilla href="https://bugzilla.suse.com/1142677">SUSE bug 1142677</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725422" comment="exiv2-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725423" comment="exiv2-lang-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725374" comment="libexiv2-26-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725424" comment="libexiv2-26-32bit-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725375" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725425" comment="libexiv2-doc-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13110</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13110" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13110" ref_url="https://www.suse.com/security/cve/CVE-2019-13110" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013143.html" source="SUSE-SU"/>
    <description>
    A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted CRW image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-30"/>
	<updated date="2022-11-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13110/">CVE-2019-13110</cve>
	<bugzilla href="https://bugzilla.suse.com/1142678">SUSE bug 1142678</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725422" comment="exiv2-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725423" comment="exiv2-lang-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725374" comment="libexiv2-26-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725424" comment="libexiv2-26-32bit-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725375" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725425" comment="libexiv2-doc-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13111</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13111" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13111" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13111" ref_url="https://www.suse.com/security/cve/CVE-2019-13111" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3892-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012824.html" source="SUSE-SU"/>
    <description>
    A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via a crafted WEBP image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13111/">CVE-2019-13111</cve>
	<bugzilla href="https://bugzilla.suse.com/1142679">SUSE bug 1142679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722308" comment="exiv2-0.26-150000.6.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722309" comment="exiv2-lang-0.26-150000.6.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722266" comment="libexiv2-26-0.26-150000.6.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722310" comment="libexiv2-26-32bit-0.26-150000.6.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722267" comment="libexiv2-devel-0.26-150000.6.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722311" comment="libexiv2-doc-0.26-150000.6.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13114</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13114" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13114" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13114" ref_url="https://www.suse.com/security/cve/CVE-2019-13114" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006676.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html" source="SUSE-SU"/>
    <description>
    http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13114/">CVE-2019-13114</cve>
	<bugzilla href="https://bugzilla.suse.com/1142684">SUSE bug 1142684</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487350" comment="libexiv2-26-0.26-6.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13117</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13117" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13117" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13117" ref_url="https://www.suse.com/security/cve/CVE-2019-13117" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1867-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006330.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0642-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006595.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1409-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006855.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html" source="SUSE-SU"/>
    <description>
    In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13117/">CVE-2019-13117</cve>
	<bugzilla href="https://bugzilla.suse.com/1140095">SUSE bug 1140095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157028">SUSE bug 1157028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160968">SUSE bug 1160968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482466" comment="libxslt-tools-1.1.32-3.8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155747" comment="libxslt-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482467" comment="libxslt1-1.1.32-3.8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155748" comment="libxslt1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13118</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13118" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13118" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13118" ref_url="https://www.suse.com/security/cve/CVE-2019-13118" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1867-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1409-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006855.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html" source="SUSE-SU"/>
    <description>
    In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13118/">CVE-2019-13118</cve>
	<bugzilla href="https://bugzilla.suse.com/1140101">SUSE bug 1140101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157028">SUSE bug 1157028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160968">SUSE bug 1160968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482466" comment="libxslt-tools-1.1.32-3.8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155747" comment="libxslt-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482467" comment="libxslt1-1.1.32-3.8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155748" comment="libxslt1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13133</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13133" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13133" ref_url="https://www.suse.com/security/cve/CVE-2019-13133" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13133/">CVE-2019-13133</cve>
	<bugzilla href="https://bugzilla.suse.com/1140100">SUSE bug 1140100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13134</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13134" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13134" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13134" ref_url="https://www.suse.com/security/cve/CVE-2019-13134" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13134/">CVE-2019-13134</cve>
	<bugzilla href="https://bugzilla.suse.com/1140102">SUSE bug 1140102</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13135</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13135" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13135" ref_url="https://www.suse.com/security/cve/CVE-2019-13135" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13135/">CVE-2019-13135</cve>
	<bugzilla href="https://bugzilla.suse.com/1140103">SUSE bug 1140103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13136</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13136" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13136" ref_url="https://www.suse.com/security/cve/CVE-2019-13136" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-13136/">CVE-2019-13136</cve>
	<bugzilla href="https://bugzilla.suse.com/1140104">SUSE bug 1140104</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13137</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13137" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13137" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13137" ref_url="https://www.suse.com/security/cve/CVE-2019-13137" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13137/">CVE-2019-13137</cve>
	<bugzilla href="https://bugzilla.suse.com/1140105">SUSE bug 1140105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13164</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13164" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13164" ref_url="https://www.suse.com/security/cve/CVE-2019-13164" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2157-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005888.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005843.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005878.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005906.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2059-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00008.html" source="SUSE-SU"/>
    <description>
    qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or a --br=bridge option) is limited to the IFNAMSIZ size, which can lead to an ACL bypass.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13164/">CVE-2019-13164</cve>
	<bugzilla href="https://bugzilla.suse.com/1140402">SUSE bug 1140402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913224" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13224</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13224" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13224" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13224" ref_url="https://www.suse.com/security/cve/CVE-2019-13224" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:1093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012587.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012320.html" source="SUSE-SU"/>
    <description>
    A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-24"/>
	<updated date="2022-10-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-13224/">CVE-2019-13224</cve>
	<bugzilla href="https://bugzilla.suse.com/1142847">SUSE bug 1142847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203568">SUSE bug 1203568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708026" comment="libonig4-6.7.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009714765" comment="libonig4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708027" comment="oniguruma-devel-6.7.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009714766" comment="oniguruma-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13295</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13295" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13295" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13295" ref_url="https://www.suse.com/security/cve/CVE-2019-13295" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13295/">CVE-2019-13295</cve>
	<bugzilla href="https://bugzilla.suse.com/1140664">SUSE bug 1140664</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13296</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13296" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13296" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13296" ref_url="https://www.suse.com/security/cve/CVE-2019-13296" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13296/">CVE-2019-13296</cve>
	<bugzilla href="https://bugzilla.suse.com/1140665">SUSE bug 1140665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13297</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13297" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13297" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13297" ref_url="https://www.suse.com/security/cve/CVE-2019-13297" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13297/">CVE-2019-13297</cve>
	<bugzilla href="https://bugzilla.suse.com/1140666">SUSE bug 1140666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13298</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13298" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13298" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13298" ref_url="https://www.suse.com/security/cve/CVE-2019-13298" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo because of a MagickCore/enhance.c error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13298/">CVE-2019-13298</cve>
	<bugzilla href="https://bugzilla.suse.com/1140667">SUSE bug 1140667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913299" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13299</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13299" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13299" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13299" ref_url="https://www.suse.com/security/cve/CVE-2019-13299" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13299/">CVE-2019-13299</cve>
	<bugzilla href="https://bugzilla.suse.com/1140668">SUSE bug 1140668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13300</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13300" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13300" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13300" ref_url="https://www.suse.com/security/cve/CVE-2019-13300" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13300/">CVE-2019-13300</cve>
	<bugzilla href="https://bugzilla.suse.com/1140669">SUSE bug 1140669</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13301</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13301" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13301" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13301" ref_url="https://www.suse.com/security/cve/CVE-2019-13301" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13301/">CVE-2019-13301</cve>
	<bugzilla href="https://bugzilla.suse.com/1140554">SUSE bug 1140554</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13302</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13302" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13302" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13302" ref_url="https://www.suse.com/security/cve/CVE-2019-13302" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13302/">CVE-2019-13302</cve>
	<bugzilla href="https://bugzilla.suse.com/1140552">SUSE bug 1140552</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913303" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13303</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13303" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13303" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13303" ref_url="https://www.suse.com/security/cve/CVE-2019-13303" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/composite.c in CompositeImage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13303/">CVE-2019-13303</cve>
	<bugzilla href="https://bugzilla.suse.com/1140549">SUSE bug 1140549</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13304</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13304" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13304" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13304" ref_url="https://www.suse.com/security/cve/CVE-2019-13304" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13304/">CVE-2019-13304</cve>
	<bugzilla href="https://bugzilla.suse.com/1140547">SUSE bug 1140547</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913305" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13305</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13305" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13305" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13305" ref_url="https://www.suse.com/security/cve/CVE-2019-13305" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13305/">CVE-2019-13305</cve>
	<bugzilla href="https://bugzilla.suse.com/1140545">SUSE bug 1140545</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913306" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13306</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13306" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13306" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13306" ref_url="https://www.suse.com/security/cve/CVE-2019-13306" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13306/">CVE-2019-13306</cve>
	<bugzilla href="https://bugzilla.suse.com/1140543">SUSE bug 1140543</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913307" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13307</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13307" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13307" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13307" ref_url="https://www.suse.com/security/cve/CVE-2019-13307" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13307/">CVE-2019-13307</cve>
	<bugzilla href="https://bugzilla.suse.com/1140538">SUSE bug 1140538</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913308" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13308</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13308" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13308" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13308" ref_url="https://www.suse.com/security/cve/CVE-2019-13308" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13308/">CVE-2019-13308</cve>
	<bugzilla href="https://bugzilla.suse.com/1140534">SUSE bug 1140534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13309</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13309" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13309" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13309" ref_url="https://www.suse.com/security/cve/CVE-2019-13309" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13309/">CVE-2019-13309</cve>
	<bugzilla href="https://bugzilla.suse.com/1140501">SUSE bug 1140501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140520">SUSE bug 1140520</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13310</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13310" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13310" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13310" ref_url="https://www.suse.com/security/cve/CVE-2019-13310" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13310/">CVE-2019-13310</cve>
	<bugzilla href="https://bugzilla.suse.com/1140501">SUSE bug 1140501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140520">SUSE bug 1140520</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13311</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13311" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13311" ref_url="https://www.suse.com/security/cve/CVE-2019-13311" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13311/">CVE-2019-13311</cve>
	<bugzilla href="https://bugzilla.suse.com/1140513">SUSE bug 1140513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140554">SUSE bug 1140554</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13313</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13313" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13313" ref_url="https://www.suse.com/security/cve/CVE-2019-13313" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005876.html" source="SUSE-SU"/>
    <description>
    libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13313/">CVE-2019-13313</cve>
	<bugzilla href="https://bugzilla.suse.com/1140749">SUSE bug 1140749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482338" comment="libosinfo-1.7.1-1.52 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695661" comment="libosinfo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482339" comment="libosinfo-1_0-0-1.7.1-1.52 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695662" comment="libosinfo-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482340" comment="libosinfo-lang-1.7.1-1.52 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695663" comment="libosinfo-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488542" comment="typelib-1_0-Libosinfo-1_0-1.7.1-1.52 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695664" comment="typelib-1_0-Libosinfo-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13377</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13377" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13377" ref_url="https://www.suse.com/security/cve/CVE-2019-13377" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13377/">CVE-2019-13377</cve>
	<bugzilla href="https://bugzilla.suse.com/1144443">SUSE bug 1144443</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13391</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13391" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13391" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13391" ref_url="https://www.suse.com/security/cve/CVE-2019-13391" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.8-50 Q16, ComplexImages in MagickCore/fourier.c has a heap-based buffer over-read because of incorrect calls to GetCacheViewVirtualPixels.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13391/">CVE-2019-13391</cve>
	<bugzilla href="https://bugzilla.suse.com/1140673">SUSE bug 1140673</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13454</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13454" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13454" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13454" ref_url="https://www.suse.com/security/cve/CVE-2019-13454" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2010-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192010-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13454/">CVE-2019-13454</cve>
	<bugzilla href="https://bugzilla.suse.com/1141171">SUSE bug 1141171</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191348" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1348</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1348" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1348" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1348" ref_url="https://www.suse.com/security/cve/CVE-2019-1348" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0045-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006748.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html" source="SUSE-SU"/>
    <description>
    An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. The --export-marks option of git fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-1348/">CVE-2019-1348</cve>
	<bugzilla href="https://bugzilla.suse.com/1158785">SUSE bug 1158785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1349</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1349" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1349" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1349" ref_url="https://www.suse.com/security/cve/CVE-2019-1349" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0045-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006748.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html" source="SUSE-SU"/>
    <description>
    A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1350, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1349/">CVE-2019-1349</cve>
	<bugzilla href="https://bugzilla.suse.com/1158785">SUSE bug 1158785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158787">SUSE bug 1158787</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1350</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1350" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1350" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1350" ref_url="https://www.suse.com/security/cve/CVE-2019-1350" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0045-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006748.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html" source="SUSE-SU"/>
    <description>
    A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1350/">CVE-2019-1350</cve>
	<bugzilla href="https://bugzilla.suse.com/1158785">SUSE bug 1158785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158788">SUSE bug 1158788</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1351</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1351" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1351" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1351" ref_url="https://www.suse.com/security/cve/CVE-2019-1351" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0045-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006748.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html" source="SUSE-SU"/>
    <description>
    A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-1351/">CVE-2019-1351</cve>
	<bugzilla href="https://bugzilla.suse.com/1158785">SUSE bug 1158785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158789">SUSE bug 1158789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1352</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1352" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1352" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1352" ref_url="https://www.suse.com/security/cve/CVE-2019-1352" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0045-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006748.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012490.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html" source="SUSE-SU"/>
    <description>
    A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1354, CVE-2019-1387.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1352/">CVE-2019-1352</cve>
	<bugzilla href="https://bugzilla.suse.com/1158785">SUSE bug 1158785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158787">SUSE bug 1158787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158790">SUSE bug 1158790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710961" comment="libgit2-26-0.26.8-150000.3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177119" comment="libgit2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711157" comment="libgit2-26-32bit-0.26.8-150000.3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233336" comment="libgit2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1353</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1353" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1353" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1353" ref_url="https://www.suse.com/security/cve/CVE-2019-1353" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0045-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006748.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html" source="SUSE-SU"/>
    <description>
    An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. When running Git in the Windows Subsystem for Linux (also known as "WSL") while accessing a working directory on a regular Windows drive, none of the NTFS protections were active.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1353/">CVE-2019-1353</cve>
	<bugzilla href="https://bugzilla.suse.com/1158785">SUSE bug 1158785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158791">SUSE bug 1158791</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1354</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1354" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1354" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1354" ref_url="https://www.suse.com/security/cve/CVE-2019-1354" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0045-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006748.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html" source="SUSE-SU"/>
    <description>
    A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1352, CVE-2019-1387.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="0/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1354/">CVE-2019-1354</cve>
	<bugzilla href="https://bugzilla.suse.com/1158785">SUSE bug 1158785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158792">SUSE bug 1158792</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913565" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13565</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13565" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13565" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13565" ref_url="https://www.suse.com/security/cve/CVE-2019-13565" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2390-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005924.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1210-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006767.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00058.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending on the ACL configuration, this can affect different types of operations (searches, modifications, etc.). In other words, a successful authorization step completed by one user affects the authorization requirement for a different user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13565/">CVE-2019-13565</cve>
	<bugzilla href="https://bugzilla.suse.com/1143194">SUSE bug 1143194</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13602</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13602" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13602" ref_url="https://www.suse.com/security/cve/CVE-2019-13602" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0545-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0562-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html" source="SUSE-SU"/>
    <description>
    An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and crash) or possibly have unspecified other impact via a crafted .mp4 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13602/">CVE-2019-13602</cve>
	<bugzilla href="https://bugzilla.suse.com/1141522">SUSE bug 1141522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146428">SUSE bug 1146428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13616</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13616" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13616" ref_url="https://www.suse.com/security/cve/CVE-2019-13616" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2463-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007624.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3261-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007740.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2070-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2071-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2109-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2224-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1916-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KFAVEMB6RSGK626NYU5HGZQL46KEPIB5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1990-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BGSHRLXRLM6QT7N73JKYMSATV36M64Q6/" source="SUSE-SU"/>
    <description>
    SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13616/">CVE-2019-13616</cve>
	<bugzilla href="https://bugzilla.suse.com/1141844">SUSE bug 1141844</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629190" comment="libSDL-1_2-0-1.2.15-3.12.73 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251318" comment="libSDL-1_2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487325" comment="libSDL2-2_0-0-2.0.8-9.63 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913626" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13626</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13626" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13626" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13626" ref_url="https://www.suse.com/security/cve/CVE-2019-13626" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2463-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2224-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00093.html" source="SUSE-SU"/>
    <description>
    SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13626/">CVE-2019-13626</cve>
	<bugzilla href="https://bugzilla.suse.com/1142031">SUSE bug 1142031</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487325" comment="libSDL2-2_0-0-2.0.8-9.63 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13627</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13627" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13627" ref_url="https://www.suse.com/security/cve/CVE-2019-13627" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005976.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006291.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00018.html" source="SUSE-SU"/>
    <description>
    It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13627/">CVE-2019-13627</cve>
	<bugzilla href="https://bugzilla.suse.com/1148987">SUSE bug 1148987</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482233" comment="libgcrypt20-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482234" comment="libgcrypt20-32bit-1.8.2-8.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13636</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13636" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13636" ref_url="https://www.suse.com/security/cve/CVE-2019-13636" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011322.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011232.html" source="SUSE-SU"/>
    <description>
    In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-03"/>
	<updated date="2022-07-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-13636/">CVE-2019-13636</cve>
	<bugzilla href="https://bugzilla.suse.com/1142041">SUSE bug 1142041</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684273" comment="patch-2.7.6-150000.5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151547" comment="patch is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13659</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13659" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13659" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13659" ref_url="https://www.suse.com/security/cve/CVE-2019-13659" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13659/">CVE-2019-13659</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913660" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13660</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13660" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13660" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13660" ref_url="https://www.suse.com/security/cve/CVE-2019-13660" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13660/">CVE-2019-13660</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913661" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13661</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13661" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13661" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13661" ref_url="https://www.suse.com/security/cve/CVE-2019-13661" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13661/">CVE-2019-13661</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913662" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13662</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13662" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13662" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13662" ref_url="https://www.suse.com/security/cve/CVE-2019-13662" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in navigations in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-13662/">CVE-2019-13662</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13663</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13663" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13663" ref_url="https://www.suse.com/security/cve/CVE-2019-13663" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13663/">CVE-2019-13663</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13664</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13664" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13664" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13664" ref_url="https://www.suse.com/security/cve/CVE-2019-13664" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-13664/">CVE-2019-13664</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13665</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13665" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13665" ref_url="https://www.suse.com/security/cve/CVE-2019-13665" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient filtering in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass multiple file download protection via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-13665/">CVE-2019-13665</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913666" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13666</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13666" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13666" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13666" ref_url="https://www.suse.com/security/cve/CVE-2019-13666" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Information leak in storage in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13666/">CVE-2019-13666</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13667</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13667" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13667" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13667" ref_url="https://www.suse.com/security/cve/CVE-2019-13667" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13667/">CVE-2019-13667</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13668</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13668" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13668" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13668" ref_url="https://www.suse.com/security/cve/CVE-2019-13668" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13668/">CVE-2019-13668</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13669</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13669" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13669" ref_url="https://www.suse.com/security/cve/CVE-2019-13669" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Incorrect data validation in navigation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13669/">CVE-2019-13669</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13670</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13670" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13670" ref_url="https://www.suse.com/security/cve/CVE-2019-13670" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13670/">CVE-2019-13670</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13671</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13671" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13671" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13671" ref_url="https://www.suse.com/security/cve/CVE-2019-13671" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    UI spoofing in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13671/">CVE-2019-13671</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13673</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13673" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13673" ref_url="https://www.suse.com/security/cve/CVE-2019-13673" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13673/">CVE-2019-13673</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13674</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13674" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13674" ref_url="https://www.suse.com/security/cve/CVE-2019-13674" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13674/">CVE-2019-13674</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13675</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13675" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13675" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13675" ref_url="https://www.suse.com/security/cve/CVE-2019-13675" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in extensions in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to disable extensions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-13675/">CVE-2019-13675</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13676</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13676" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13676" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13676" ref_url="https://www.suse.com/security/cve/CVE-2019-13676" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-13676/">CVE-2019-13676</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913677" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13677</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13677" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13677" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13677" ref_url="https://www.suse.com/security/cve/CVE-2019-13677" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in site isolation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass site isolation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-13677/">CVE-2019-13677</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13678</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13678" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13678" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13678" ref_url="https://www.suse.com/security/cve/CVE-2019-13678" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Incorrect data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-13678/">CVE-2019-13678</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913679" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13679</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13679" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13679" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13679" ref_url="https://www.suse.com/security/cve/CVE-2019-13679" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print dialogs via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-13679/">CVE-2019-13679</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913680" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13680</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13680" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13680" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13680" ref_url="https://www.suse.com/security/cve/CVE-2019-13680" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in TLS in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof client IP address to websites via crafted TLS connections.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13680/">CVE-2019-13680</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913681" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13681</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13681" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13681" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13681" ref_url="https://www.suse.com/security/cve/CVE-2019-13681" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass download restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-13681/">CVE-2019-13681</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913682" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13682</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13682" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13682" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13682" ref_url="https://www.suse.com/security/cve/CVE-2019-13682" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in external protocol handling in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13682/">CVE-2019-13682</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13683</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13683" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13683" ref_url="https://www.suse.com/security/cve/CVE-2019-13683" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13683/">CVE-2019-13683</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13685</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13685" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13685" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13685" ref_url="https://www.suse.com/security/cve/CVE-2019-13685" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2186-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2228-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in sharing view in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13685/">CVE-2019-13685</cve>
	<bugzilla href="https://bugzilla.suse.com/1151229">SUSE bug 1151229</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13686</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13686" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13686" ref_url="https://www.suse.com/security/cve/CVE-2019-13686" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2186-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2228-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in offline mode in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13686/">CVE-2019-13686</cve>
	<bugzilla href="https://bugzilla.suse.com/1151229">SUSE bug 1151229</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13687</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13687" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13687" ref_url="https://www.suse.com/security/cve/CVE-2019-13687" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2186-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2228-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13687/">CVE-2019-13687</cve>
	<bugzilla href="https://bugzilla.suse.com/1151229">SUSE bug 1151229</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13688</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13688" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13688" ref_url="https://www.suse.com/security/cve/CVE-2019-13688" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2186-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2228-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13688/">CVE-2019-13688</cve>
	<bugzilla href="https://bugzilla.suse.com/1151229">SUSE bug 1151229</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13693</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13693" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13693" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13693" ref_url="https://www.suse.com/security/cve/CVE-2019-13693" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in IndexedDB in Google Chrome prior to 77.0.3865.120 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13693/">CVE-2019-13693</cve>
	<bugzilla href="https://bugzilla.suse.com/1153660">SUSE bug 1153660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13694</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13694" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13694" ref_url="https://www.suse.com/security/cve/CVE-2019-13694" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in WebRTC in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13694/">CVE-2019-13694</cve>
	<bugzilla href="https://bugzilla.suse.com/1153660">SUSE bug 1153660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13695</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13695" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13695" ref_url="https://www.suse.com/security/cve/CVE-2019-13695" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in audio in Google Chrome on Android prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13695/">CVE-2019-13695</cve>
	<bugzilla href="https://bugzilla.suse.com/1153660">SUSE bug 1153660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13696</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13696" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13696" ref_url="https://www.suse.com/security/cve/CVE-2019-13696" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in JavaScript in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13696/">CVE-2019-13696</cve>
	<bugzilla href="https://bugzilla.suse.com/1153660">SUSE bug 1153660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13697</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13697" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13697" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13697" ref_url="https://www.suse.com/security/cve/CVE-2019-13697" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in performance APIs in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13697/">CVE-2019-13697</cve>
	<bugzilla href="https://bugzilla.suse.com/1153660">SUSE bug 1153660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13699</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13699" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13699" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13699" ref_url="https://www.suse.com/security/cve/CVE-2019-13699" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Use after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13699/">CVE-2019-13699</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913700" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13700</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13700" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13700" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13700" ref_url="https://www.suse.com/security/cve/CVE-2019-13700" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Out of bounds memory access in the gamepad API in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13700/">CVE-2019-13700</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13701</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13701" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13701" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13701" ref_url="https://www.suse.com/security/cve/CVE-2019-13701" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Incorrect implementation in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13701/">CVE-2019-13701</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13702</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13702" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13702" ref_url="https://www.suse.com/security/cve/CVE-2019-13702" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13702/">CVE-2019-13702</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913703" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13703</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13703" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13703" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13703" ref_url="https://www.suse.com/security/cve/CVE-2019-13703" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in the Omnibox in Google Chrome on Android prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13703/">CVE-2019-13703</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13704</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13704" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13704" ref_url="https://www.suse.com/security/cve/CVE-2019-13704" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13704/">CVE-2019-13704</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13705</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13705" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13705" ref_url="https://www.suse.com/security/cve/CVE-2019-13705" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13705/">CVE-2019-13705</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13706</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13706" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13706" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13706" ref_url="https://www.suse.com/security/cve/CVE-2019-13706" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13706/">CVE-2019-13706</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13707</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13707" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13707" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13707" ref_url="https://www.suse.com/security/cve/CVE-2019-13707" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a local attacker to leak files via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13707/">CVE-2019-13707</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13708</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13708" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13708" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13708" ref_url="https://www.suse.com/security/cve/CVE-2019-13708" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in navigation in Google Chrome on iOS prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13708/">CVE-2019-13708</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13709</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13709" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13709" ref_url="https://www.suse.com/security/cve/CVE-2019-13709" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-13709/">CVE-2019-13709</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13710</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13710" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13710" ref_url="https://www.suse.com/security/cve/CVE-2019-13710" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13710/">CVE-2019-13710</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13711</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13711" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13711" ref_url="https://www.suse.com/security/cve/CVE-2019-13711" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13711/">CVE-2019-13711</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13713</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13713" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13713" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13713" ref_url="https://www.suse.com/security/cve/CVE-2019-13713" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13713/">CVE-2019-13713</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913714" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13714</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13714" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13714" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13714" ref_url="https://www.suse.com/security/cve/CVE-2019-13714" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13714/">CVE-2019-13714</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913715" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13715</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13715" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13715" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13715" ref_url="https://www.suse.com/security/cve/CVE-2019-13715" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13715/">CVE-2019-13715</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913716" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13716</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13716" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13716" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13716" ref_url="https://www.suse.com/security/cve/CVE-2019-13716" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13716/">CVE-2019-13716</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913717" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13717</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13717" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13717" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13717" ref_url="https://www.suse.com/security/cve/CVE-2019-13717" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13717/">CVE-2019-13717</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13718</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13718" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13718" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13718" ref_url="https://www.suse.com/security/cve/CVE-2019-13718" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13718/">CVE-2019-13718</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913719" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13719</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13719" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13719" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13719" ref_url="https://www.suse.com/security/cve/CVE-2019-13719" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13719/">CVE-2019-13719</cve>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13720</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13720" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13720" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13720" ref_url="https://www.suse.com/security/cve/CVE-2019-13720" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2421-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13720/">CVE-2019-13720</cve>
	<bugzilla href="https://bugzilla.suse.com/1155643">SUSE bug 1155643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13721</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13721" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13721" ref_url="https://www.suse.com/security/cve/CVE-2019-13721" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2421-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00022.html" source="SUSE-SU"/>
    <description>
    Use after free in PDFium in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13721/">CVE-2019-13721</cve>
	<bugzilla href="https://bugzilla.suse.com/1155643">SUSE bug 1155643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13722</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13722" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13722" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13722" ref_url="https://www.suse.com/security/cve/CVE-2019-13722" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006276.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0002-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13722/">CVE-2019-13722</cve>
	<bugzilla href="https://bugzilla.suse.com/1158328">SUSE bug 1158328</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913723" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13723</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13723" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13723" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13723" ref_url="https://www.suse.com/security/cve/CVE-2019-13723" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2539-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2544-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2545-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00035.html" source="SUSE-SU"/>
    <description>
    Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13723/">CVE-2019-13723</cve>
	<bugzilla href="https://bugzilla.suse.com/1157269">SUSE bug 1157269</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913724" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13724</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13724" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13724" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13724" ref_url="https://www.suse.com/security/cve/CVE-2019-13724" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2539-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2544-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2545-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00035.html" source="SUSE-SU"/>
    <description>
    Out of bounds memory access in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13724/">CVE-2019-13724</cve>
	<bugzilla href="https://bugzilla.suse.com/1157269">SUSE bug 1157269</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913725" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13725</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13725" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13725" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13725" ref_url="https://www.suse.com/security/cve/CVE-2019-13725" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Use-after-free in Bluetooth in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13725/">CVE-2019-13725</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913726" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13726</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13726" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13726" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13726" ref_url="https://www.suse.com/security/cve/CVE-2019-13726" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in password manager in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13726/">CVE-2019-13726</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913727" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13727</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13727" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13727" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13727" ref_url="https://www.suse.com/security/cve/CVE-2019-13727" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13727/">CVE-2019-13727</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13728</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13728" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13728" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13728" ref_url="https://www.suse.com/security/cve/CVE-2019-13728" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13728/">CVE-2019-13728</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13729</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13729" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13729" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13729" ref_url="https://www.suse.com/security/cve/CVE-2019-13729" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Use-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13729/">CVE-2019-13729</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13730</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13730" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13730" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13730" ref_url="https://www.suse.com/security/cve/CVE-2019-13730" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13730/">CVE-2019-13730</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13732</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13732" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13732" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13732" ref_url="https://www.suse.com/security/cve/CVE-2019-13732" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Use-after-free in WebAudio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13732/">CVE-2019-13732</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913734" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13734</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13734" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13734" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13734" ref_url="https://www.suse.com/security/cve/CVE-2019-13734" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13734/">CVE-2019-13734</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13735</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13735" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13735" ref_url="https://www.suse.com/security/cve/CVE-2019-13735" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13735/">CVE-2019-13735</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13736</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13736" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13736" ref_url="https://www.suse.com/security/cve/CVE-2019-13736" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Integer overflow in PDFium in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13736/">CVE-2019-13736</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13737</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13737" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13737" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13737" ref_url="https://www.suse.com/security/cve/CVE-2019-13737" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in autocomplete in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13737/">CVE-2019-13737</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13738</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13738" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13738" ref_url="https://www.suse.com/security/cve/CVE-2019-13738" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-13738/">CVE-2019-13738</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13739</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13739" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13739" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13739" ref_url="https://www.suse.com/security/cve/CVE-2019-13739" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-13739/">CVE-2019-13739</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13740</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13740" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13740" ref_url="https://www.suse.com/security/cve/CVE-2019-13740" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in sharing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-13740/">CVE-2019-13740</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13741</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13741" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13741" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13741" ref_url="https://www.suse.com/security/cve/CVE-2019-13741" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in Blink in Google Chrome prior to 79.0.3945.79 allowed a local attacker to bypass same origin policy via crafted clipboard content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13741/">CVE-2019-13741</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13742</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13742" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13742" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13742" ref_url="https://www.suse.com/security/cve/CVE-2019-13742" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-13742/">CVE-2019-13742</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13743</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13743" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13743" ref_url="https://www.suse.com/security/cve/CVE-2019-13743" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in external protocol handling in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-13743/">CVE-2019-13743</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13744</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13744" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13744" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13744" ref_url="https://www.suse.com/security/cve/CVE-2019-13744" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13744/">CVE-2019-13744</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13745</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13745" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13745" ref_url="https://www.suse.com/security/cve/CVE-2019-13745" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13745/">CVE-2019-13745</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13746</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13746" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13746" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13746" ref_url="https://www.suse.com/security/cve/CVE-2019-13746" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-13746/">CVE-2019-13746</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913747" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13747</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13747" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13747" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13747" ref_url="https://www.suse.com/security/cve/CVE-2019-13747" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Uninitialized data in rendering in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13747/">CVE-2019-13747</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13748</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13748" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13748" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13748" ref_url="https://www.suse.com/security/cve/CVE-2019-13748" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in developer tools in Google Chrome prior to 79.0.3945.79 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13748/">CVE-2019-13748</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13749</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13749" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13749" ref_url="https://www.suse.com/security/cve/CVE-2019-13749" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-13749/">CVE-2019-13749</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13750</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13750" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13750" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13750" ref_url="https://www.suse.com/security/cve/CVE-2019-13750" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13750/">CVE-2019-13750</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13751</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13751" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13751" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13751" ref_url="https://www.suse.com/security/cve/CVE-2019-13751" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Uninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13751/">CVE-2019-13751</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13752</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13752" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13752" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13752" ref_url="https://www.suse.com/security/cve/CVE-2019-13752" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13752/">CVE-2019-13752</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13753</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13753" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13753" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13753" ref_url="https://www.suse.com/security/cve/CVE-2019-13753" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13753/">CVE-2019-13753</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13754</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13754" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13754" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13754" ref_url="https://www.suse.com/security/cve/CVE-2019-13754" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13754/">CVE-2019-13754</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13755</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13755" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13755" ref_url="https://www.suse.com/security/cve/CVE-2019-13755" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to disable extensions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13755/">CVE-2019-13755</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13756</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13756" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13756" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13756" ref_url="https://www.suse.com/security/cve/CVE-2019-13756" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in printing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13756/">CVE-2019-13756</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913757" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13757</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13757" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13757" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13757" ref_url="https://www.suse.com/security/cve/CVE-2019-13757" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13757/">CVE-2019-13757</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13758</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13758" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13758" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13758" ref_url="https://www.suse.com/security/cve/CVE-2019-13758" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in navigation in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13758/">CVE-2019-13758</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913759" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13759</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13759" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13759" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13759" ref_url="https://www.suse.com/security/cve/CVE-2019-13759" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in interstitials in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13759/">CVE-2019-13759</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13761</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13761" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13761" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13761" ref_url="https://www.suse.com/security/cve/CVE-2019-13761" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13761/">CVE-2019-13761</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13762</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13762" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13762" ref_url="https://www.suse.com/security/cve/CVE-2019-13762" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker to spoof downloaded files via local code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13762/">CVE-2019-13762</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13763</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13763" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13763" ref_url="https://www.suse.com/security/cve/CVE-2019-13763" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13763/">CVE-2019-13763</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13764</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13764" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13764" ref_url="https://www.suse.com/security/cve/CVE-2019-13764" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html" source="SUSE-SU"/>
    <description>
    Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13764/">CVE-2019-13764</cve>
	<bugzilla href="https://bugzilla.suse.com/1158982">SUSE bug 1158982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13767</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13767" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13767" ref_url="https://www.suse.com/security/cve/CVE-2019-13767" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2712-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00005.html" source="SUSE-SU"/>
    <description>
    Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13767/">CVE-2019-13767</cve>
	<bugzilla href="https://bugzilla.suse.com/1159498">SUSE bug 1159498</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1387</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1387" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1387" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1387" ref_url="https://www.suse.com/security/cve/CVE-2019-1387" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0045-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006748.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html" source="SUSE-SU"/>
    <description>
    An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1387/">CVE-2019-1387</cve>
	<bugzilla href="https://bugzilla.suse.com/1158785">SUSE bug 1158785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158793">SUSE bug 1158793</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487888" comment="libgit2-28-0.28.4-1.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695513" comment="libgit2-28 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201913962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-13962</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-13962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-13962" ref_url="https://www.suse.com/security/cve/CVE-2019-13962" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0545-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0562-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html" source="SUSE-SU"/>
    <description>
    lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13962/">CVE-2019-13962</cve>
	<bugzilla href="https://bugzilla.suse.com/1142161">SUSE bug 1142161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146428">SUSE bug 1146428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14250</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14250" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14250" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14250" ref_url="https://www.suse.com/security/cve/CVE-2019-14250" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006718.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:55-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:56-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006502.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007888.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011253.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2365-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0716-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1790-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1804-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14250/">CVE-2019-14250</cve>
	<bugzilla href="https://bugzilla.suse.com/1142649">SUSE bug 1142649</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628360" comment="cpp7-7.5.0+r278197-4.25.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009268648" comment="cpp7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628366" comment="libgfortran4-7.5.0+r278197-4.25.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009268669" comment="libgfortran4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914275" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14275</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14275" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14275" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14275" ref_url="https://www.suse.com/security/cve/CVE-2019-14275" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2951-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2454-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009201.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1702-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1143-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LKD7IBCZKGMDHLZ7H4T5P7WTXHNFSOB6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1311-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PQ34JCCBYY5MVDLL7VGCWBOZKOQ5EXTK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1318-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4HYGTSDI2IQ34SYGQZGBYMH3NPMCAL2X/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2454-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RK4BRVCUPZKN5VS2JGWBPYITONWJCIZJ/" source="SUSE-SU"/>
    <description>
    Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14275/">CVE-2019-14275</cve>
	<bugzilla href="https://bugzilla.suse.com/1143650">SUSE bug 1143650</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625872" comment="transfig-3.2.8a-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172240" comment="transfig is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914287" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14287</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14287" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14287" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14287" ref_url="https://www.suse.com/security/cve/CVE-2019-14287" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2656-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192656-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2666-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2667-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2668-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00047.html" source="SUSE-SU"/>
    <description>
    In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14287/">CVE-2019-14287</cve>
	<bugzilla href="https://bugzilla.suse.com/1153674">SUSE bug 1153674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156093">SUSE bug 1156093</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629025" comment="sudo-1.9.5p2-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629027" comment="sudo-plugin-python-1.9.5p2-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695524" comment="sudo-plugin-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14378</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14378" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14378" ref_url="https://www.suse.com/security/cve/CVE-2019-14378" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2157-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005888.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005843.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005878.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005906.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2955-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192955-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006485.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2059-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00034.html" source="SUSE-SU"/>
    <description>
    ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14378/">CVE-2019-14378</cve>
	<bugzilla href="https://bugzilla.suse.com/1143794">SUSE bug 1143794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143797">SUSE bug 1143797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14382</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14382" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14382" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14382" ref_url="https://www.suse.com/security/cve/CVE-2019-14382" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005954.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00084.html" source="SUSE-SU"/>
    <description>
    DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14382/">CVE-2019-14382</cve>
	<bugzilla href="https://bugzilla.suse.com/1143582">SUSE bug 1143582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487555" comment="libopenmpt0-0.3.19-2.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230504" comment="libopenmpt0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14383</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14383" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14383" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14383" ref_url="https://www.suse.com/security/cve/CVE-2019-14383" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005954.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00084.html" source="SUSE-SU"/>
    <description>
    J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14383/">CVE-2019-14383</cve>
	<bugzilla href="https://bugzilla.suse.com/1143584">SUSE bug 1143584</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487555" comment="libopenmpt0-0.3.19-2.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230504" comment="libopenmpt0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14437</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14437" ref_url="https://www.suse.com/security/cve/CVE-2019-14437" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0545-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0562-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html" source="SUSE-SU"/>
    <description>
    The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14437/">CVE-2019-14437</cve>
	<bugzilla href="https://bugzilla.suse.com/1146428">SUSE bug 1146428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14438</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14438" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14438" ref_url="https://www.suse.com/security/cve/CVE-2019-14438" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0545-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0562-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer over-read via a crafted .ogg file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14438/">CVE-2019-14438</cve>
	<bugzilla href="https://bugzilla.suse.com/1146428">SUSE bug 1146428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14444</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14444" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14444" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14444" ref_url="https://www.suse.com/security/cve/CVE-2019-14444" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007888.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1790-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1804-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html" source="SUSE-SU"/>
    <description>
    apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF file, as demonstrated by readelf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14444/">CVE-2019-14444</cve>
	<bugzilla href="https://bugzilla.suse.com/1143609">SUSE bug 1143609</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14491</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14491" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14491" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14491" ref_url="https://www.suse.com/security/cve/CVE-2019-14491" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006214.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3192-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2671-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered&lt;cv::HaarEvaluator&gt; in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14491/">CVE-2019-14491</cve>
	<bugzilla href="https://bugzilla.suse.com/1144348">SUSE bug 1144348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144352">SUSE bug 1144352</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489231" comment="libopencv3_3-3.3.1-6.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223580" comment="libopencv3_3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14492</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14492" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14492" ref_url="https://www.suse.com/security/cve/CVE-2019-14492" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006214.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3192-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2671-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14492/">CVE-2019-14492</cve>
	<bugzilla href="https://bugzilla.suse.com/1144348">SUSE bug 1144348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144352">SUSE bug 1144352</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489231" comment="libopencv3_3-3.3.1-6.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223580" comment="libopencv3_3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14494</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14494" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14494" ref_url="https://www.suse.com/security/cve/CVE-2019-14494" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14494/">CVE-2019-14494</cve>
	<bugzilla href="https://bugzilla.suse.com/1143950">SUSE bug 1143950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14498</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14498" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14498" ref_url="https://www.suse.com/security/cve/CVE-2019-14498" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0545-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0562-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html" source="SUSE-SU"/>
    <description>
    A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted CAF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14498/">CVE-2019-14498</cve>
	<bugzilla href="https://bugzilla.suse.com/1146428">SUSE bug 1146428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14533</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14533" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14533" ref_url="https://www.suse.com/security/cve/CVE-2019-14533" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0545-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0562-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html" source="SUSE-SU"/>
    <description>
    The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14533/">CVE-2019-14533</cve>
	<bugzilla href="https://bugzilla.suse.com/1146428">SUSE bug 1146428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14534</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14534" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14534" ref_url="https://www.suse.com/security/cve/CVE-2019-14534" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0545-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0562-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html" source="SUSE-SU"/>
    <description>
    In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14534/">CVE-2019-14534</cve>
	<bugzilla href="https://bugzilla.suse.com/1146428">SUSE bug 1146428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914535" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14535</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14535" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14535" ref_url="https://www.suse.com/security/cve/CVE-2019-14535" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0545-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0562-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html" source="SUSE-SU"/>
    <description>
    A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14535/">CVE-2019-14535</cve>
	<bugzilla href="https://bugzilla.suse.com/1146428">SUSE bug 1146428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14553</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14553" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14553" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14553" ref_url="https://www.suse.com/security/cve/CVE-2019-14553" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0568-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006617.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00014.html" source="SUSE-SU"/>
    <description>
    Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14553/">CVE-2019-14553</cve>
	<bugzilla href="https://bugzilla.suse.com/1153072">SUSE bug 1153072</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14559</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14559" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14559" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14559" ref_url="https://www.suse.com/security/cve/CVE-2019-14559" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0568-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006617.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3126-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007682.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0622-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00020.html" source="SUSE-SU"/>
    <description>
    Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14559/">CVE-2019-14559</cve>
	<bugzilla href="https://bugzilla.suse.com/1163927">SUSE bug 1163927</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14562</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14562" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14562" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14562" ref_url="https://www.suse.com/security/cve/CVE-2019-14562" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2691-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007455.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007452.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3126-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007682.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1535-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00091.html" source="SUSE-SU"/>
    <description>
    Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14562/">CVE-2019-14562</cve>
	<bugzilla href="https://bugzilla.suse.com/1175476">SUSE bug 1175476</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14563</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14563" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14563" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14563" ref_url="https://www.suse.com/security/cve/CVE-2019-14563" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0568-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006617.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00014.html" source="SUSE-SU"/>
    <description>
    Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-14563/">CVE-2019-14563</cve>
	<bugzilla href="https://bugzilla.suse.com/1163959">SUSE bug 1163959</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14575</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14575" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14575" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14575" ref_url="https://www.suse.com/security/cve/CVE-2019-14575" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0568-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006617.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00014.html" source="SUSE-SU"/>
    <description>
    Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14575/">CVE-2019-14575</cve>
	<bugzilla href="https://bugzilla.suse.com/1163969">SUSE bug 1163969</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914584" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14584</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14584" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14584" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14584" ref_url="https://www.suse.com/security/cve/CVE-2019-14584" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3884-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3885-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2314-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/P7TLVCW5VHXA7SSOSARLTBRZWC5MH642/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2336-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7Y57O2IBBHBOVJBEVV6JAOZWLGF53QFS/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0598-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/O2IF5TPLLS7U2RNC42HXIHTRUMS4Q6YV/" source="SUSE-SU"/>
    <description>
    Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14584/">CVE-2019-14584</cve>
	<bugzilla href="https://bugzilla.suse.com/1177789">SUSE bug 1177789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629914" comment="ovmf-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231457" comment="ovmf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629916" comment="qemu-ovmf-x86_64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231460" comment="qemu-ovmf-x86_64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629917" comment="qemu-uefi-aarch64-202008-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623392" comment="qemu-uefi-aarch64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629015" comment="shim-15.4-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152144" comment="shim is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14615</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14615" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14615" ref_url="https://www.suse.com/security/cve/CVE-2019-14615" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0558-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-14615/">CVE-2019-14615</cve>
	<bugzilla href="https://bugzilla.suse.com/1160195">SUSE bug 1160195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165881">SUSE bug 1165881</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14744</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14744" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14744" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14744" ref_url="https://www.suse.com/security/cve/CVE-2019-14744" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1851-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1851-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1855-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00034.html" source="SUSE-SU"/>
    <description>
    In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14744/">CVE-2019-14744</cve>
	<bugzilla href="https://bugzilla.suse.com/1144600">SUSE bug 1144600</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694770" comment="kconf_update5-5.76.0-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261533" comment="kconf_update5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694771" comment="libKF5ConfigCore5-5.76.0-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261546" comment="libKF5ConfigCore5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694772" comment="libKF5ConfigCore5-lang-5.76.0-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261550" comment="libKF5ConfigCore5-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694773" comment="libKF5ConfigGui5-5.76.0-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261552" comment="libKF5ConfigGui5 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14776</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14776" ref_url="https://www.suse.com/security/cve/CVE-2019-14776" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0545-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0562-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14776/">CVE-2019-14776</cve>
	<bugzilla href="https://bugzilla.suse.com/1146428">SUSE bug 1146428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14777</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14777" ref_url="https://www.suse.com/security/cve/CVE-2019-14777" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0545-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0562-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html" source="SUSE-SU"/>
    <description>
    The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14777/">CVE-2019-14777</cve>
	<bugzilla href="https://bugzilla.suse.com/1146428">SUSE bug 1146428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14778</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14778" ref_url="https://www.suse.com/security/cve/CVE-2019-14778" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0545-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0562-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html" source="SUSE-SU"/>
    <description>
    The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14778/">CVE-2019-14778</cve>
	<bugzilla href="https://bugzilla.suse.com/1146428">SUSE bug 1146428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14811</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14811" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14811" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14811" ref_url="https://www.suse.com/security/cve/CVE-2019-14811" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005970.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html" source="SUSE-SU"/>
    <description>
    A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14811/">CVE-2019-14811</cve>
	<bugzilla href="https://bugzilla.suse.com/1146882">SUSE bug 1146882</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14812</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14812" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14812" ref_url="https://www.suse.com/security/cve/CVE-2019-14812" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005970.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html" source="SUSE-SU"/>
    <description>
    A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14812/">CVE-2019-14812</cve>
	<bugzilla href="https://bugzilla.suse.com/1146882">SUSE bug 1146882</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14813</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14813" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14813" ref_url="https://www.suse.com/security/cve/CVE-2019-14813" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005970.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html" source="SUSE-SU"/>
    <description>
    A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14813/">CVE-2019-14813</cve>
	<bugzilla href="https://bugzilla.suse.com/1146882">SUSE bug 1146882</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14814</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14814" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14814" ref_url="https://www.suse.com/security/cve/CVE-2019-14814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2414-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2651-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192651-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2658-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192658-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2738-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192738-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2756-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007367.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2173-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-09/msg00133.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux kernel’s implementation of the Marvell wifi driver, which can allow a local user who has CAP_NET_ADMIN or administrative privileges to possibly cause a Denial Of Service (DOS) by corrupting memory and possible code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14814/">CVE-2019-14814</cve>
	<bugzilla href="https://bugzilla.suse.com/1146512">SUSE bug 1146512</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173664">SUSE bug 1173664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173665">SUSE bug 1173665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14815</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14815" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14815" ref_url="https://www.suse.com/security/cve/CVE-2019-14815" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2414-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2651-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192651-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2658-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192658-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2738-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192738-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2756-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007367.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2173-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-09/msg00133.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html" source="SUSE-SU"/>
    <description>
    A vulnerability found in the Linux kernel's WMM implementation for Marvell WiFi-based hardware (mwifiex) could lead to a denial of service or allow arbitrary code execution. For this flaw to be executed, the attacker must be both local and privileged. There is no mitigation to this flaw. A patch has been provided to remediate this flaw.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14815/">CVE-2019-14815</cve>
	<bugzilla href="https://bugzilla.suse.com/1146514">SUSE bug 1146514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173665">SUSE bug 1173665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14816</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14816" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14816" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14816" ref_url="https://www.suse.com/security/cve/CVE-2019-14816" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2414-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2651-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192651-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2658-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192658-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2738-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192738-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2756-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007367.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2173-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-09/msg00133.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html" source="SUSE-SU"/>
    <description>
    A vulnerability was found in the Linux kernel's Marvell WiFi chip driver. Where, while parsing vendor-specific informational attributes, an attacker on the same WiFi physical network segment could cause a system crash, resulting in a denial of service, or potentially execute arbitrary code. This flaw affects the network interface at the most basic level meaning the attacker only needs to affiliate with the same network device as the vulnerable system to create an attack path.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14816/">CVE-2019-14816</cve>
	<bugzilla href="https://bugzilla.suse.com/1146516">SUSE bug 1146516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173666">SUSE bug 1173666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14817</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14817" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14817" ref_url="https://www.suse.com/security/cve/CVE-2019-14817" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005970.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html" source="SUSE-SU"/>
    <description>
    A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14817/">CVE-2019-14817</cve>
	<bugzilla href="https://bugzilla.suse.com/1146882">SUSE bug 1146882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146884">SUSE bug 1146884</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14822</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14822" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14822" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14822" ref_url="https://www.suse.com/security/cve/CVE-2019-14822" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005925.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005948.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2199-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00074.html" source="SUSE-SU"/>
    <description>
    A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface, change the input method engine, or modify other input related configurations of the victim user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14822/">CVE-2019-14822</cve>
	<bugzilla href="https://bugzilla.suse.com/1150011">SUSE bug 1150011</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629174" comment="ibus-1.5.23-1.56 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009265415" comment="ibus is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629176" comment="ibus-dict-emoji-1.5.23-1.56 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695665" comment="ibus-dict-emoji is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629177" comment="ibus-gtk-1.5.23-1.56 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009265418" comment="ibus-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629178" comment="ibus-gtk3-1.5.23-1.56 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009265420" comment="ibus-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629179" comment="ibus-lang-1.5.23-1.56 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009265422" comment="ibus-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629180" comment="libibus-1_0-5-1.5.23-1.56 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009265423" comment="libibus-1_0-5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629181" comment="typelib-1_0-IBus-1_0-1.5.23-1.56 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009265427" comment="typelib-1_0-IBus-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14833</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14833" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14833" ref_url="https://www.suse.com/security/cve/CVE-2019-14833" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2866-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192866-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2868-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192868-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007440.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2442-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00015.html" source="SUSE-SU"/>
    <description>
    A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller can be configured to use a custom script to check for password complexity. This configuration can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak passwords being set for samba users, making it vulnerable to dictionary attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-14833/">CVE-2019-14833</cve>
	<bugzilla href="https://bugzilla.suse.com/1154289">SUSE bug 1154289</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14834</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14834" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14834" ref_url="https://www.suse.com/security/cve/CVE-2019-14834" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0419-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008224.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00027.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the Dnsmasq application where a remote attacker can trigger a memory leak by sending specially crafted DHCP responses to the server. A successful attack is dependent on a specific configuration regarding the domain name set into the dnsmasq.conf file. Over time, the memory leak may cause the process to run out of memory and terminate, causing a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14834/">CVE-2019-14834</cve>
	<bugzilla href="https://bugzilla.suse.com/1154849">SUSE bug 1154849</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14846</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14846" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14846" ref_url="https://www.suse.com/security/cve/CVE-2019-14846" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-03"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.3/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-14846/">CVE-2019-14846</cve>
	<bugzilla href="https://bugzilla.suse.com/1153452">SUSE bug 1153452</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914847" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14847</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14847" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14847" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14847" ref_url="https://www.suse.com/security/cve/CVE-2019-14847" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2866-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192866-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2868-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192868-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007440.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2442-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00015.html" source="SUSE-SU"/>
    <description>
    A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14847/">CVE-2019-14847</cve>
	<bugzilla href="https://bugzilla.suse.com/1154598">SUSE bug 1154598</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14855</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14855" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14855" ref_url="https://www.suse.com/security/cve/CVE-2019-14855" source="SUSE CVE"/>
    <description>
    A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forged certificate signatures. This issue affects GnuPG versions before 2.2.18.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-14855/">CVE-2019-14855</cve>
	<bugzilla href="https://bugzilla.suse.com/1157900">SUSE bug 1157900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160243">SUSE bug 1160243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181233">SUSE bug 1181233</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628414" comment="dirmngr-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695558" comment="dirmngr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628415" comment="gpg2-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151446" comment="gpg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628416" comment="gpg2-lang-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151447" comment="gpg2-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914861" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14861</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14861" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14861" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14861" ref_url="https://www.suse.com/security/cve/CVE-2019-14861" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3318-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193318-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006265.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007440.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00038.html" source="SUSE-SU"/>
    <description>
    All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly named) dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default permissions on the DNS partition allow creation of new records by authenticated users. This is used for example to allow machines to self-register in DNS. If a DNS record was created that case-insensitively matched the name of the zone, the ldb_qsort() and dns_name_compare() routines could be confused into reading memory prior to the list of DNS entries when responding to DnssrvEnumRecords() or DnssrvEnumRecords2() and so following invalid memory as a pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14861/">CVE-2019-14861</cve>
	<bugzilla href="https://bugzilla.suse.com/1158108">SUSE bug 1158108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14866</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14866" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14866" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14866" ref_url="https://www.suse.com/security/cve/CVE-2019-14866" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006178.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2593-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2596-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00076.html" source="SUSE-SU"/>
    <description>
    It was discovered cpio does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14866/">CVE-2019-14866</cve>
	<bugzilla href="https://bugzilla.suse.com/1155199">SUSE bug 1155199</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481843" comment="cpio-2.12-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151389" comment="cpio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481844" comment="cpio-lang-2.12-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151390" comment="cpio-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481845" comment="cpio-mt-2.12-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177165" comment="cpio-mt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914869" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14869</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14869" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14869" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14869" ref_url="https://www.suse.com/security/cve/CVE-2019-14869" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2981-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2983-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006145.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2535-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00050.html" source="SUSE-SU"/>
    <description>
    A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14869/">CVE-2019-14869</cve>
	<bugzilla href="https://bugzilla.suse.com/1156275">SUSE bug 1156275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14870</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14870" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14870" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14870" ref_url="https://www.suse.com/security/cve/CVE-2019-14870" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3318-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193318-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006265.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007440.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2023:0019-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WO45C5LQHPOWEJHKWCXPWLI54XMTTYQP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2023:0020-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VCW7YX6RG5EAFBRU3SLTXKN5NWVODXTH/" source="SUSE-SU"/>
    <description>
    All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U (MS-SFU) Kerberos delegation model includes a feature allowing for a subset of clients to be opted out of constrained delegation in any way, either S4U2Self or regular Kerberos authentication, by forcing all tickets for these clients to be non-forwardable. In AD this is implemented by a user attribute delegation_not_allowed (aka not-delegated), which translates to disallow-forwardable. However the Samba AD DC does not do that for S4U2Self and does set the forwardable flag even if the impersonated client has the not-delegated flag set.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-14870/">CVE-2019-14870</cve>
	<bugzilla href="https://bugzilla.suse.com/1158109">SUSE bug 1158109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732611" comment="libasn1-8-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732517" comment="libasn1-8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732612" comment="libgssapi3-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732518" comment="libgssapi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732613" comment="libhcrypto4-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732519" comment="libhcrypto4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732614" comment="libhdb9-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732520" comment="libhdb9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732615" comment="libheimbase1-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732521" comment="libheimbase1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732616" comment="libheimdal-devel-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009162041" comment="libheimdal-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732617" comment="libheimedit0-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732522" comment="libheimedit0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732618" comment="libheimntlm0-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732523" comment="libheimntlm0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732619" comment="libhx509-5-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732524" comment="libhx509-5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732620" comment="libkadm5clnt7-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732525" comment="libkadm5clnt7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732621" comment="libkadm5srv8-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732526" comment="libkadm5srv8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732622" comment="libkafs0-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732527" comment="libkafs0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732623" comment="libkdc2-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732528" comment="libkdc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732624" comment="libkrb5-26-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732529" comment="libkrb5-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732625" comment="libotp0-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732530" comment="libotp0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732626" comment="libroken18-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732531" comment="libroken18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732627" comment="libsl0-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732532" comment="libsl0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009732628" comment="libwind0-7.8.0-bp153.2.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009732533" comment="libwind0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914889" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14889</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14889" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14889" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14889" ref_url="https://www.suse.com/security/cve/CVE-2019-14889" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:20-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006392.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:21-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006393.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:22-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006394.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:23-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006395.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006254.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006261.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3308-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006263.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0130-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0131-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006381.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006385.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2689-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00047.html" source="SUSE-SU"/>
    <description>
    A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14889/">CVE-2019-14889</cve>
	<bugzilla href="https://bugzilla.suse.com/1158095">SUSE bug 1158095</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482409" comment="libssh4-0.8.7-10.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151772" comment="libssh4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482410" comment="libssh4-32bit-0.8.7-10.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153278" comment="libssh4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14895</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14895" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14895" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14895" ref_url="https://www.suse.com/security/cve/CVE-2019-14895" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0667-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007365.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow was discovered in the Linux kernel's Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14895/">CVE-2019-14895</cve>
	<bugzilla href="https://bugzilla.suse.com/1157042">SUSE bug 1157042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157158">SUSE bug 1157158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173100">SUSE bug 1173100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173660">SUSE bug 1173660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14896</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14896" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14896" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14896" ref_url="https://www.suse.com/security/cve/CVE-2019-14896" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006397.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0558-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow vulnerability was found in the Linux kernel's Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14896/">CVE-2019-14896</cve>
	<bugzilla href="https://bugzilla.suse.com/1157157">SUSE bug 1157157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160468">SUSE bug 1160468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914897" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14897</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14897" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14897" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14897" ref_url="https://www.suse.com/security/cve/CVE-2019-14897" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006397.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0558-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14897/">CVE-2019-14897</cve>
	<bugzilla href="https://bugzilla.suse.com/1157155">SUSE bug 1157155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160467">SUSE bug 1160467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160468">SUSE bug 1160468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914901" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14901</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14901" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14901" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14901" ref_url="https://www.suse.com/security/cve/CVE-2019-14901" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007365.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    A heap overflow flaw was found in the Linux kernel's Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14901/">CVE-2019-14901</cve>
	<bugzilla href="https://bugzilla.suse.com/1157042">SUSE bug 1157042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173661">SUSE bug 1173661</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914902" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14902</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14902" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14902" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14902" ref_url="https://www.suse.com/security/cve/CVE-2019-14902" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006401.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0224-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007440.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00055.html" source="SUSE-SU"/>
    <description>
    There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-14902/">CVE-2019-14902</cve>
	<bugzilla href="https://bugzilla.suse.com/1160850">SUSE bug 1160850</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914904" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14904</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14904" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14904" ref_url="https://www.suse.com/security/cve/CVE-2019-14904" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14904/">CVE-2019-14904</cve>
	<bugzilla href="https://bugzilla.suse.com/1157968">SUSE bug 1157968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14905</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14905" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14905" ref_url="https://www.suse.com/security/cve/CVE-2019-14905" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14905/">CVE-2019-14905</cve>
	<bugzilla href="https://bugzilla.suse.com/1157969">SUSE bug 1157969</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14907</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14907" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14907" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14907" ref_url="https://www.suse.com/security/cve/CVE-2019-14907" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0152-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006391.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006401.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0224-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006407.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007440.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00055.html" source="SUSE-SU"/>
    <description>
    All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14907/">CVE-2019-14907</cve>
	<bugzilla href="https://bugzilla.suse.com/1160888">SUSE bug 1160888</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14970</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14970" ref_url="https://www.suse.com/security/cve/CVE-2019-14970" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0545-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0562-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html" source="SUSE-SU"/>
    <description>
    A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14970/">CVE-2019-14970</cve>
	<bugzilla href="https://bugzilla.suse.com/1146428">SUSE bug 1146428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14973</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14973" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14973" ref_url="https://www.suse.com/security/cve/CVE-2019-14973" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007480.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1561-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00023.html" source="SUSE-SU"/>
    <description>
    _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14973/">CVE-2019-14973</cve>
	<bugzilla href="https://bugzilla.suse.com/1146608">SUSE bug 1146608</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914980" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14980</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14980" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14980" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14980" ref_url="https://www.suse.com/security/cve/CVE-2019-14980" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2785-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2515-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14980/">CVE-2019-14980</cve>
	<bugzilla href="https://bugzilla.suse.com/1146068">SUSE bug 1146068</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201914981" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-14981</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-14981" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14981" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-14981" ref_url="https://www.suse.com/security/cve/CVE-2019-14981" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2515-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14981/">CVE-2019-14981</cve>
	<bugzilla href="https://bugzilla.suse.com/1146065">SUSE bug 1146065</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15030</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15030" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15030" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15030" ref_url="https://www.suse.com/security/cve/CVE-2019-15030" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2414-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2651-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192651-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2658-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192658-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2738-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192738-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2756-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2173-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-09/msg00133.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15030/">CVE-2019-15030</cve>
	<bugzilla href="https://bugzilla.suse.com/1149713">SUSE bug 1149713</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15031</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15031" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15031" ref_url="https://www.suse.com/security/cve/CVE-2019-15031" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2414-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2651-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192651-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2658-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192658-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2738-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192738-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2756-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2173-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-09/msg00133.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15031/">CVE-2019-15031</cve>
	<bugzilla href="https://bugzilla.suse.com/1149713">SUSE bug 1149713</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15098</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15098" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15098" ref_url="https://www.suse.com/security/cve/CVE-2019-15098" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2414-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2651-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192651-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2658-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192658-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2738-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192738-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2756-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2173-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-09/msg00133.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html" source="SUSE-SU"/>
    <description>
    drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15098/">CVE-2019-15098</cve>
	<bugzilla href="https://bugzilla.suse.com/1146378">SUSE bug 1146378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146543">SUSE bug 1146543</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15099</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15099" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15099" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15099" ref_url="https://www.suse.com/security/cve/CVE-2019-15099" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2658-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192658-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2738-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192738-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html" source="SUSE-SU"/>
    <description>
    drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15099/">CVE-2019-15099</cve>
	<bugzilla href="https://bugzilla.suse.com/1146368">SUSE bug 1146368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15126" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15126" ref_url="https://www.suse.com/security/cve/CVE-2019-15126" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010217.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1648-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KZGJOQCY3UVCSZY3XFCDUYHPVWB2IH7T/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0366-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CFUCZRWH2IP7FOHVYO3TO3G5PFWQXLP6/" source="SUSE-SU"/>
    <description>
    An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15126/">CVE-2019-15126</cve>
	<bugzilla href="https://bugzilla.suse.com/1167162">SUSE bug 1167162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667096" comment="kernel-debug-base-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667070" comment="kernel-default-man-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667097" comment="kernel-kvmsmall-base-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667098" comment="kernel-vanilla-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667099" comment="kernel-vanilla-base-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667100" comment="kernel-vanilla-devel-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667101" comment="kernel-vanilla-livepatch-devel-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667102" comment="kernel-zfcpdump-man-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15133</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15133" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15133" ref_url="https://www.suse.com/security/cve/CVE-2019-15133" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011325.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:967-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1565-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010963.html" source="SUSE-SU"/>
    <description>
    In GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c if the height field of the ImageSize data structure is equal to zero.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15133/">CVE-2019-15133</cve>
	<bugzilla href="https://bugzilla.suse.com/1146299">SUSE bug 1146299</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679712" comment="giflib-devel-5.2.1-150000.4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153063" comment="giflib-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679754" comment="giflib-devel-32bit-5.2.1-150000.4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153064" comment="giflib-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679755" comment="giflib-progs-5.2.1-150000.4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153065" comment="giflib-progs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679713" comment="libgif7-5.2.1-150000.4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177219" comment="libgif7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679756" comment="libgif7-32bit-5.2.1-150000.4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009682761" comment="libgif7-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15139</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15139" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15139" ref_url="https://www.suse.com/security/cve/CVE-2019-15139" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2785-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2515-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html" source="SUSE-SU"/>
    <description>
    The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15139/">CVE-2019-15139</cve>
	<bugzilla href="https://bugzilla.suse.com/1146213">SUSE bug 1146213</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15140</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15140" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15140" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15140" ref_url="https://www.suse.com/security/cve/CVE-2019-15140" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2785-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2515-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html" source="SUSE-SU"/>
    <description>
    coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15140/">CVE-2019-15140</cve>
	<bugzilla href="https://bugzilla.suse.com/1146212">SUSE bug 1146212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15141</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15141" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15141" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15141" ref_url="https://www.suse.com/security/cve/CVE-2019-15141" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2785-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2515-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html" source="SUSE-SU"/>
    <description>
    WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and TIFFWriteDirectoryTagColormap in tif_dirwrite.c of LibTIFF. NOTE: this occurs because of an incomplete fix for CVE-2019-11597.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15141/">CVE-2019-15141</cve>
	<bugzilla href="https://bugzilla.suse.com/1146211">SUSE bug 1146211</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15142</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15142" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15142" ref_url="https://www.suse.com/security/cve/CVE-2019-15142" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005960.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2217-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00087.html" source="SUSE-SU"/>
    <description>
    In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read) by crafting a DJVU file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15142/">CVE-2019-15142</cve>
	<bugzilla href="https://bugzilla.suse.com/1146702">SUSE bug 1146702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487345" comment="libdjvulibre21-3.5.27-9.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266979" comment="libdjvulibre21 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15143</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15143" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15143" ref_url="https://www.suse.com/security/cve/CVE-2019-15143" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005960.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2217-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00087.html" source="SUSE-SU"/>
    <description>
    In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhaustion caused by a GBitmap::read_rle_raw infinite loop) by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15143/">CVE-2019-15143</cve>
	<bugzilla href="https://bugzilla.suse.com/1146569">SUSE bug 1146569</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487345" comment="libdjvulibre21-3.5.27-9.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266979" comment="libdjvulibre21 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15144</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15144" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15144" ref_url="https://www.suse.com/security/cve/CVE-2019-15144" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005960.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2217-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00087.html" source="SUSE-SU"/>
    <description>
    In DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate&lt;TYPE&gt;::sort) allows attackers to cause a denial-of-service (application crash due to an Uncontrolled Recursion) by crafting a PBM image file that is mishandled in libdjvu/GContainer.h.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15144/">CVE-2019-15144</cve>
	<bugzilla href="https://bugzilla.suse.com/1146571">SUSE bug 1146571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487345" comment="libdjvulibre21-3.5.27-9.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266979" comment="libdjvulibre21 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15145</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15145" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15145" ref_url="https://www.suse.com/security/cve/CVE-2019-15145" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005960.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2217-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00087.html" source="SUSE-SU"/>
    <description>
    DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::get_direct_context in libdjvu/JB2Image.h because of a missing zero-bytes check in libdjvu/GBitmap.h.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15145/">CVE-2019-15145</cve>
	<bugzilla href="https://bugzilla.suse.com/1146572">SUSE bug 1146572</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487345" comment="libdjvulibre21-3.5.27-9.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266979" comment="libdjvulibre21 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15161</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15161" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15161" ref_url="https://www.suse.com/security/cve/CVE-2019-15161" source="SUSE CVE"/>
    <description>
    rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15161/">CVE-2019-15161</cve>
	<bugzilla href="https://bugzilla.suse.com/1153332">SUSE bug 1153332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628825" comment="libpcap1-1.9.1-1.33 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15162</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15162" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15162" ref_url="https://www.suse.com/security/cve/CVE-2019-15162" source="SUSE CVE"/>
    <description>
    rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15162/">CVE-2019-15162</cve>
	<bugzilla href="https://bugzilla.suse.com/1153332">SUSE bug 1153332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628825" comment="libpcap1-1.9.1-1.33 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15163</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15163" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15163" ref_url="https://www.suse.com/security/cve/CVE-2019-15163" source="SUSE CVE"/>
    <description>
    rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daemon crash) if a crypt() call fails.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15163/">CVE-2019-15163</cve>
	<bugzilla href="https://bugzilla.suse.com/1153332">SUSE bug 1153332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628825" comment="libpcap1-1.9.1-1.33 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15164</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15164" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15164" ref_url="https://www.suse.com/security/cve/CVE-2019-15164" source="SUSE CVE"/>
    <description>
    rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15164/">CVE-2019-15164</cve>
	<bugzilla href="https://bugzilla.suse.com/1153332">SUSE bug 1153332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628825" comment="libpcap1-1.9.1-1.33 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15165</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15165" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15165" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15165" ref_url="https://www.suse.com/security/cve/CVE-2019-15165" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00051.html" source="SUSE-SU"/>
    <description>
    sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15165/">CVE-2019-15165</cve>
	<bugzilla href="https://bugzilla.suse.com/1153332">SUSE bug 1153332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628825" comment="libpcap1-1.9.1-1.33 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15232</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15232" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15232" ref_url="https://www.suse.com/security/cve/CVE-2019-15232" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0915-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y7ZOGH7UAC6Q7OJHR62KOMWS64YF4G73/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0937-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZVAIO7EGOGXSM6FEUKEC7Y4DAXYMXOPX/" source="SUSE-SU"/>
    <description>
    Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska file demultiplexors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15232/">CVE-2019-15232</cve>
	<bugzilla href="https://bugzilla.suse.com/1146283">SUSE bug 1146283</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624294" comment="libBasicUsageEnvironment1-2021.05.22-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260574" comment="libBasicUsageEnvironment1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624295" comment="libUsageEnvironment3-2021.05.22-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260576" comment="libUsageEnvironment3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624296" comment="libgroupsock30-2021.05.22-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479974" comment="libgroupsock30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624297" comment="libliveMedia94-2021.05.22-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479975" comment="libliveMedia94 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624298" comment="live555-2021.05.22-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243095" comment="live555 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624299" comment="live555-devel-2021.05.22-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243097" comment="live555-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15290</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15290" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15290" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15290" ref_url="https://www.suse.com/security/cve/CVE-2019-15290" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2414-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2651-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192651-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2658-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192658-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2738-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192738-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2756-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2173-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-09/msg00133.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-15098. Reason: This candidate is a duplicate of CVE-2019-15098. Notes: All CVE users should reference CVE-2019-15098 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15290/">CVE-2019-15290</cve>
	<bugzilla href="https://bugzilla.suse.com/1146378">SUSE bug 1146378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146543">SUSE bug 1146543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15291</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15291" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15291" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15291" ref_url="https://www.suse.com/security/cve/CVE-2019-15291" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2651-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192651-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2658-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192658-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2706-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192706-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2756-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006257.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2307-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15291/">CVE-2019-15291</cve>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146540">SUSE bug 1146540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1543</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1543" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1543" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1543" ref_url="https://www.suse.com/security/cve/CVE-2019-1543" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005214.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005259.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also incorrectly allows a nonce to be set of up to 16 bytes. In this case only the last 12 bytes are significant and any additional leading bytes are ignored. It is a requirement of using this cipher that nonce values are unique. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. If an application changes the default nonce length to be longer than 12 bytes and then makes a change to the leading bytes of the nonce expecting the new value to be a new unique nonce then such an application could inadvertently encrypt messages with a reused nonce. Additionally the ignored bytes in a long nonce are not covered by the integrity guarantee of this cipher. Any application that relies on the integrity of these ignored leading bytes of a long nonce may be further affected. Any OpenSSL internal use of this cipher, including in SSL/TLS, is safe because no such use sets such a long nonce value. However user applications that use this cipher directly and set a non-default nonce length to be longer than 12 bytes may be vulnerable. OpenSSL versions 1.1.1 and 1.1.0 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b). Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1543/">CVE-2019-1543</cve>
	<bugzilla href="https://bugzilla.suse.com/1128189">SUSE bug 1128189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141801">SUSE bug 1141801</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154162">SUSE bug 1154162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1547</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1547" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1547" ref_url="https://www.suse.com/security/cve/CVE-2019-1547" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14171-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2397-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005930.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2403-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005935.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005939.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005943.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2504-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005974.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2558-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2561-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0099-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006349.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2158-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00016.html" source="SUSE-SU"/>
    <description>
    Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters (instead of using a named curve). In those cases it is possible that such a group does not have the cofactor present. This can occur even where all the parameters match a known named curve. If such a curve is used then OpenSSL falls back to non-side channel resistant code paths which may result in full key recovery during an ECDSA signature operation. In order to be vulnerable an attacker would have to have the ability to time the creation of a large number of signatures where explicit parameters with no co-factor present are in use by an application using libcrypto. For the avoidance of doubt libssl is not vulnerable because explicit parameters are never used. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1547/">CVE-2019-1547</cve>
	<bugzilla href="https://bugzilla.suse.com/1150003">SUSE bug 1150003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154162">SUSE bug 1154162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154166">SUSE bug 1154166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161085">SUSE bug 1161085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205621">SUSE bug 1205621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1549</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1549" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1549" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1549" ref_url="https://www.suse.com/security/cve/CVE-2019-1549" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0099-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006349.html" source="SUSE-SU"/>
    <description>
    OpenSSL 1.1.1 introduced a rewritten random number generator (RNG). This was intended to include protection in the event of a fork() system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in the default case. A partial mitigation for this issue is that the output from a high precision timer is mixed into the RNG state so the likelihood of a parent and child process sharing state is significantly reduced. If an application already calls OPENSSL_init_crypto() explicitly using OPENSSL_INIT_ATFORK then this problem does not occur at all. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1549/">CVE-2019-1549</cve>
	<bugzilla href="https://bugzilla.suse.com/1150247">SUSE bug 1150247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154162">SUSE bug 1154162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205621">SUSE bug 1205621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15504</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15504" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15504" ref_url="https://www.suse.com/security/cve/CVE-2019-15504" source="SUSE CVE"/>
    <description>
    drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usbredir).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15504/">CVE-2019-15504</cve>
	<bugzilla href="https://bugzilla.suse.com/1147116">SUSE bug 1147116</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185852">SUSE bug 1185852</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1551</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1551" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1551" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1551" ref_url="https://www.suse.com/security/cve/CVE-2019-1551" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006718.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006328.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006540.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0002-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006297.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0028-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006306.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0099-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006349.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0474-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006529.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html" source="SUSE-SU"/>
    <description>
    There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1551/">CVE-2019-1551</cve>
	<bugzilla href="https://bugzilla.suse.com/1158809">SUSE bug 1158809</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205621">SUSE bug 1205621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15587</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15587" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15587" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15587" ref_url="https://www.suse.com/security/cve/CVE-2019-15587" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012986.html" source="SUSE-SU"/>
    <description>
    In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-05"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-15587/">CVE-2019-15587</cve>
	<bugzilla href="https://bugzilla.suse.com/1154751">SUSE bug 1154751</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721356" comment="ruby2.5-rubygem-loofah-2.2.2-150000.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009240911" comment="ruby2.5-rubygem-loofah is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721798" comment="ruby2.5-rubygem-loofah-doc-2.2.2-150000.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009240912" comment="ruby2.5-rubygem-loofah-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721799" comment="ruby2.5-rubygem-loofah-testsuite-2.2.2-150000.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009240913" comment="ruby2.5-rubygem-loofah-testsuite is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20191563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-1563</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-1563" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1563" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-1563" ref_url="https://www.suse.com/security/cve/CVE-2019-1563" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14171-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006250.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2397-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005930.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2403-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005935.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005939.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005943.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2504-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005974.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2558-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2561-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0099-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006349.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2634-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007427.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2158-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00016.html" source="SUSE-SU"/>
    <description>
    In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recover a CMS/PKCS7 transported encryption key or decrypt any RSA encrypted message that was encrypted with the public RSA key, using a Bleichenbacher padding oracle attack. Applications are not affected if they use a certificate together with the private RSA key to the CMS_decrypt or PKCS7_decrypt functions to select the correct recipient info to decrypt. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1563/">CVE-2019-1563</cve>
	<bugzilla href="https://bugzilla.suse.com/1150250">SUSE bug 1150250</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154162">SUSE bug 1154162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205621">SUSE bug 1205621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915681" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15681</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15681" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15681" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15681" ref_url="https://www.suse.com/security/cve/CVE-2019-15681" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0955-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006771.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1164-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006773.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006774.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2009-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007169.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1071-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00073.html" source="SUSE-SU"/>
    <description>
    LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15681/">CVE-2019-15681</cve>
	<bugzilla href="https://bugzilla.suse.com/1155419">SUSE bug 1155419</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15690</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15690" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15690" ref_url="https://www.suse.com/security/cve/CVE-2019-15690" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006771.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1164-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006773.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006774.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00027.html" source="SUSE-SU"/>
    <description>
    Unknown.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15690/">CVE-2019-15690</cve>
	<bugzilla href="https://bugzilla.suse.com/1160471">SUSE bug 1160471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170441">SUSE bug 1170441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15691</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15691" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15691" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15691" ref_url="https://www.suse.com/security/cve/CVE-2019-15691" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0087-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00039.html" source="SUSE-SU"/>
    <description>
    TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack unwinding. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15691/">CVE-2019-15691</cve>
	<bugzilla href="https://bugzilla.suse.com/1159856">SUSE bug 1159856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628599" comment="libXvnc1-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628600" comment="tigervnc-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628601" comment="xorg-x11-Xvnc-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628602" comment="xorg-x11-Xvnc-module-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276536" comment="xorg-x11-Xvnc-module is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15692</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15692" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15692" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15692" ref_url="https://www.suse.com/security/cve/CVE-2019-15692" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0087-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00039.html" source="SUSE-SU"/>
    <description>
    TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be triggered from CopyRectDecoder due to incorrect value checks. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15692/">CVE-2019-15692</cve>
	<bugzilla href="https://bugzilla.suse.com/1160250">SUSE bug 1160250</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628599" comment="libXvnc1-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628600" comment="tigervnc-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628601" comment="xorg-x11-Xvnc-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628602" comment="xorg-x11-Xvnc-module-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276536" comment="xorg-x11-Xvnc-module is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15693</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15693" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15693" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15693" ref_url="https://www.suse.com/security/cve/CVE-2019-15693" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0087-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00039.html" source="SUSE-SU"/>
    <description>
    TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15693/">CVE-2019-15693</cve>
	<bugzilla href="https://bugzilla.suse.com/1159858">SUSE bug 1159858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628599" comment="libXvnc1-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628600" comment="tigervnc-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628601" comment="xorg-x11-Xvnc-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628602" comment="xorg-x11-Xvnc-module-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276536" comment="xorg-x11-Xvnc-module is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15694</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15694" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15694" ref_url="https://www.suse.com/security/cve/CVE-2019-15694" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0087-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00039.html" source="SUSE-SU"/>
    <description>
    TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect. Vulnerability occurs due to the signdness error in processing MemOutStream. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15694/">CVE-2019-15694</cve>
	<bugzilla href="https://bugzilla.suse.com/1160251">SUSE bug 1160251</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628599" comment="libXvnc1-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628600" comment="tigervnc-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628601" comment="xorg-x11-Xvnc-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628602" comment="xorg-x11-Xvnc-module-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276536" comment="xorg-x11-Xvnc-module is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15695</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15695" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15695" ref_url="https://www.suse.com/security/cve/CVE-2019-15695" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0087-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00039.html" source="SUSE-SU"/>
    <description>
    TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCursor. This vulnerability occurs due to insufficient sanitization of PixelFormat. Since remote attacker can choose offset from start of the buffer to start writing his values, exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15695/">CVE-2019-15695</cve>
	<bugzilla href="https://bugzilla.suse.com/1159860">SUSE bug 1159860</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628599" comment="libXvnc1-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628600" comment="tigervnc-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628601" comment="xorg-x11-Xvnc-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628602" comment="xorg-x11-Xvnc-module-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276536" comment="xorg-x11-Xvnc-module is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15767</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15767" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15767" ref_url="https://www.suse.com/security/cve/CVE-2019-15767" source="SUSE CVE"/>
    <description>
    In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted chess position in an EPD file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15767/">CVE-2019-15767</cve>
	<bugzilla href="https://bugzilla.suse.com/1148736">SUSE bug 1148736</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694751" comment="gnuchess-6.2.6-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153265" comment="gnuchess is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915784" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15784</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15784" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15784" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15784" ref_url="https://www.suse.com/security/cve/CVE-2019-15784" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00036.html" source="SUSE-SU"/>
    <description>
    Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15784/">CVE-2019-15784</cve>
	<bugzilla href="https://bugzilla.suse.com/1148844">SUSE bug 1148844</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487574" comment="libsrt1-1.3.4-1.45 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266873" comment="libsrt1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15845</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15845" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15845" ref_url="https://www.suse.com/security/cve/CVE-2019-15845" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html" source="SUSE-SU"/>
    <description>
    Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-15845/">CVE-2019-15845</cve>
	<bugzilla href="https://bugzilla.suse.com/1152994">SUSE bug 1152994</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915847" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15847</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15847" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15847" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15847" ref_url="https://www.suse.com/security/cve/CVE-2019-15847" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006718.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:55-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:56-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006502.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006488.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2365-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0716-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00058.html" source="SUSE-SU"/>
    <description>
    The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15847/">CVE-2019-15847</cve>
	<bugzilla href="https://bugzilla.suse.com/1149145">SUSE bug 1149145</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628360" comment="cpp7-7.5.0+r278197-4.25.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009268648" comment="cpp7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628366" comment="libgfortran4-7.5.0+r278197-4.25.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009268669" comment="libgfortran4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915890" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15890</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15890" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15890" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15890" ref_url="https://www.suse.com/security/cve/CVE-2019-15890" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2955-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192955-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006485.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14396-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1514-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006872.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008673.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008910.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008916.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1894-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1895-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1942-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008990.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1043-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1942-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEKBDJBTGKO53MSKM3SRYVUQDWIJ2N5I/" source="SUSE-SU"/>
    <description>
    libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.8/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15890/">CVE-2019-15890</cve>
	<bugzilla href="https://bugzilla.suse.com/1149811">SUSE bug 1149811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149813">SUSE bug 1149813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695666" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695667" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625288" comment="qemu-audio-alsa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625289" comment="qemu-audio-pa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695668" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695669" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625291" comment="qemu-block-dmg-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625292" comment="qemu-block-gluster-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500107" comment="qemu-block-iscsi-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625293" comment="qemu-block-nfs-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695670" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695671" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500110" comment="qemu-chardev-baum-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695672" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625295" comment="qemu-extra-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695673" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695674" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695675" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695676" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695677" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625300" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695678" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695679" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695680" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625303" comment="qemu-ivshmem-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695681" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500121" comment="qemu-kvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500122" comment="qemu-lang-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695682" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695683" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625305" comment="qemu-s390x-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695684" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695685" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500127" comment="qemu-skiboot-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695686" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695687" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695688" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695689" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695690" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695691" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695692" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625310" comment="qemu-vhost-user-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695693" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915903" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15903</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15903" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15903" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15903" ref_url="https://www.suse.com/security/cve/CVE-2019-15903" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010840.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2871-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192871-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0302-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006445.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2425-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2452-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-04"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15903/">CVE-2019-15903</cve>
	<bugzilla href="https://bugzilla.suse.com/1149429">SUSE bug 1149429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154738">SUSE bug 1154738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154806">SUSE bug 1154806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481942" comment="expat-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481944" comment="libexpat1-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481945" comment="libexpat1-32bit-2.2.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15939</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15939" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15939" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15939" ref_url="https://www.suse.com/security/cve/CVE-2019-15939" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006214.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3192-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2671-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15939/">CVE-2019-15939</cve>
	<bugzilla href="https://bugzilla.suse.com/1149742">SUSE bug 1149742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009489231" comment="libopencv3_3-3.3.1-6.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223580" comment="libopencv3_3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201915942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-15942</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-15942" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15942" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-15942" ref_url="https://www.suse.com/security/cve/CVE-2019-15942" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html" source="SUSE-SU"/>
    <description>
    FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15942/">CVE-2019-15942</cve>
	<bugzilla href="https://bugzilla.suse.com/1149839">SUSE bug 1149839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16056</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16056" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16056" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16056" ref_url="https://www.suse.com/security/cve/CVE-2019-16056" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2748-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0302-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006445.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007892.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008150.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2453-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16056/">CVE-2019-16056</cve>
	<bugzilla href="https://bugzilla.suse.com/1149955">SUSE bug 1149955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16163</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16163" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16163" ref_url="https://www.suse.com/security/cve/CVE-2019-16163" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:1093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012587.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012320.html" source="SUSE-SU"/>
    <description>
    Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-24"/>
	<updated date="2022-10-23"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16163/">CVE-2019-16163</cve>
	<bugzilla href="https://bugzilla.suse.com/1150130">SUSE bug 1150130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203568">SUSE bug 1203568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708026" comment="libonig4-6.7.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009714765" comment="libonig4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708027" comment="oniguruma-devel-6.7.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009714766" comment="oniguruma-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16168</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16168" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16168" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16168" ref_url="https://www.suse.com/security/cve/CVE-2019-16168" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006426.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:762-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006440.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2533-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2300-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00033.html" source="SUSE-SU"/>
    <description>
    In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-16168/">CVE-2019-16168</cve>
	<bugzilla href="https://bugzilla.suse.com/1150137">SUSE bug 1150137</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160968">SUSE bug 1160968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482404" comment="libsqlite3-0-3.28.0-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482406" comment="sqlite3-3.28.0-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16201</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16201" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16201" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16201" ref_url="https://www.suse.com/security/cve/CVE-2019-16201" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html" source="SUSE-SU"/>
    <description>
    WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the Internet or a untrusted network.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-16201/">CVE-2019-16201</cve>
	<bugzilla href="https://bugzilla.suse.com/1152995">SUSE bug 1152995</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16231</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16231" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16231" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16231" ref_url="https://www.suse.com/security/cve/CVE-2019-16231" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html" source="SUSE-SU"/>
    <description>
    drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16231/">CVE-2019-16231</cve>
	<bugzilla href="https://bugzilla.suse.com/1150466">SUSE bug 1150466</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16232</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16232" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16232" ref_url="https://www.suse.com/security/cve/CVE-2019-16232" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2946-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192946-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2947-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2951-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006134.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2953-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192953-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html" source="SUSE-SU"/>
    <description>
    drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16232/">CVE-2019-16232</cve>
	<bugzilla href="https://bugzilla.suse.com/1150465">SUSE bug 1150465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916233" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16233</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16233" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16233" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16233" ref_url="https://www.suse.com/security/cve/CVE-2019-16233" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2946-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192946-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2947-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2951-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006134.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2953-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192953-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html" source="SUSE-SU"/>
    <description>
    drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16233/">CVE-2019-16233</cve>
	<bugzilla href="https://bugzilla.suse.com/1150457">SUSE bug 1150457</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916234" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16234</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16234" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16234" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16234" ref_url="https://www.suse.com/security/cve/CVE-2019-16234" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2946-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192946-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2947-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2951-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006134.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2953-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192953-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html" source="SUSE-SU"/>
    <description>
    drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16234/">CVE-2019-16234</cve>
	<bugzilla href="https://bugzilla.suse.com/1150452">SUSE bug 1150452</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916239" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16239</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16239" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16239" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16239" ref_url="https://www.suse.com/security/cve/CVE-2019-16239" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2744-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2385-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00061.html" source="SUSE-SU"/>
    <description>
    process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16239/">CVE-2019-16239</cve>
	<bugzilla href="https://bugzilla.suse.com/1151178">SUSE bug 1151178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630322" comment="openconnect-7.08-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151736" comment="openconnect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630325" comment="openconnect-lang-7.08-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177178" comment="openconnect-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16254</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16254" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16254" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16254" ref_url="https://www.suse.com/security/cve/CVE-2019-16254" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html" source="SUSE-SU"/>
    <description>
    Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEBrick inserts untrusted input into the response header, an attacker can exploit it to insert a newline character to split a header, and inject malicious content to deceive clients. NOTE: this issue exists because of an incomplete fix for CVE-2017-17742, which addressed the CRLF vector, but did not address an isolated CR or an isolated LF.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-16254/">CVE-2019-16254</cve>
	<bugzilla href="https://bugzilla.suse.com/1152992">SUSE bug 1152992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165402">SUSE bug 1165402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16255</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16255" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16255" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16255" ref_url="https://www.suse.com/security/cve/CVE-2019-16255" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html" source="SUSE-SU"/>
    <description>
    Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the "command" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-16255/">CVE-2019-16255</cve>
	<bugzilla href="https://bugzilla.suse.com/1152990">SUSE bug 1152990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916275" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16275</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16275" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16275" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16275" ref_url="https://www.suse.com/security/cve/CVE-2019-16275" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008327.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0519-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EXT3Y5NEGCCPGZ7FTYURPUBTHNNJA6MF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0545-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7GHTARPJSUMITH7M3ESWRIZUIYW5UAM6/" source="SUSE-SU"/>
    <description>
    hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16275/">CVE-2019-16275</cve>
	<bugzilla href="https://bugzilla.suse.com/1150934">SUSE bug 1150934</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16707</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16707" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16707" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16707" ref_url="https://www.suse.com/security/cve/CVE-2019-16707" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2966-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2967-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007591.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1717-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1719-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00052.html" source="SUSE-SU"/>
    <description>
    Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-17"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16707/">CVE-2019-16707</cve>
	<bugzilla href="https://bugzilla.suse.com/1151867">SUSE bug 1151867</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628519" comment="libhunspell-1_6-0-1.6.2-3.3.7 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296727" comment="libhunspell-1_6-0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16708</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16708" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16708" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16708" ref_url="https://www.suse.com/security/cve/CVE-2019-16708" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2785-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2515-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16708/">CVE-2019-16708</cve>
	<bugzilla href="https://bugzilla.suse.com/1151781">SUSE bug 1151781</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16709</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16709" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16709" ref_url="https://www.suse.com/security/cve/CVE-2019-16709" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2785-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2317-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2321-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2515-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16709/">CVE-2019-16709</cve>
	<bugzilla href="https://bugzilla.suse.com/1151782">SUSE bug 1151782</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16710</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16710" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16710" ref_url="https://www.suse.com/security/cve/CVE-2019-16710" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2785-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2515-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16710/">CVE-2019-16710</cve>
	<bugzilla href="https://bugzilla.suse.com/1151783">SUSE bug 1151783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16711</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16711" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16711" ref_url="https://www.suse.com/security/cve/CVE-2019-16711" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2785-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2515-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16711/">CVE-2019-16711</cve>
	<bugzilla href="https://bugzilla.suse.com/1151784">SUSE bug 1151784</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16712</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16712" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16712" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16712" ref_url="https://www.suse.com/security/cve/CVE-2019-16712" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2785-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2515-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16712/">CVE-2019-16712</cve>
	<bugzilla href="https://bugzilla.suse.com/1151785">SUSE bug 1151785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16713</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16713" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16713" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16713" ref_url="https://www.suse.com/security/cve/CVE-2019-16713" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2785-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2515-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16713/">CVE-2019-16713</cve>
	<bugzilla href="https://bugzilla.suse.com/1151786">SUSE bug 1151786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201916935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-16935</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-16935" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16935" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-16935" ref_url="https://www.suse.com/security/cve/CVE-2019-16935" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2748-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008118.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2453-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2332-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S3JTHM6LLDKL7VPNRJUSRPNZAD2FZ25H/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2333-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FLGERALYYFTBIX3ZKPM6EQ2WJVUXLOXY/" source="SUSE-SU"/>
    <description>
    The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16935/">CVE-2019-16935</cve>
	<bugzilla href="https://bugzilla.suse.com/1153238">SUSE bug 1153238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17005</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17005" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17005" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17005" ref_url="https://www.suse.com/security/cve/CVE-2019-17005" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006276.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0002-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html" source="SUSE-SU"/>
    <description>
    The plain text serializer used a fixed-size array for the number of &lt;ol&gt; elements it could process; however it was possible to overflow the static-sized array leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 68.3, Firefox ESR &lt; 68.3, and Firefox &lt; 71.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17005/">CVE-2019-17005</cve>
	<bugzilla href="https://bugzilla.suse.com/1158328">SUSE bug 1158328</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917006" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17006</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17006" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17006" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17006" ref_url="https://www.suse.com/security/cve/CVE-2019-17006" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0088-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200088-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14418-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1677-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0854-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00047.html" source="SUSE-SU"/>
    <description>
    In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-17006/">CVE-2019-17006</cve>
	<bugzilla href="https://bugzilla.suse.com/1159819">SUSE bug 1159819</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917008" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17008</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17008" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17008" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17008" ref_url="https://www.suse.com/security/cve/CVE-2019-17008" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006276.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0002-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html" source="SUSE-SU"/>
    <description>
    When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 68.3, Firefox ESR &lt; 68.3, and Firefox &lt; 71.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17008/">CVE-2019-17008</cve>
	<bugzilla href="https://bugzilla.suse.com/1158328">SUSE bug 1158328</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17009</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17009" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17009" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17009" ref_url="https://www.suse.com/security/cve/CVE-2019-17009" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006276.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0002-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html" source="SUSE-SU"/>
    <description>
    When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a vulnerability in file handling in the updater service. *Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Thunderbird &lt; 68.3, Firefox ESR &lt; 68.3, and Firefox &lt; 71.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17009/">CVE-2019-17009</cve>
	<bugzilla href="https://bugzilla.suse.com/1158328">SUSE bug 1158328</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17010</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17010" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17010" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17010" ref_url="https://www.suse.com/security/cve/CVE-2019-17010" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006276.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0002-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html" source="SUSE-SU"/>
    <description>
    Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race condition could have caused a use-after-free and a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 68.3, Firefox ESR &lt; 68.3, and Firefox &lt; 71.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17010/">CVE-2019-17010</cve>
	<bugzilla href="https://bugzilla.suse.com/1158328">SUSE bug 1158328</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17011</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17011" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17011" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17011" ref_url="https://www.suse.com/security/cve/CVE-2019-17011" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006276.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0002-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html" source="SUSE-SU"/>
    <description>
    Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could cause a use-after-free condition and a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 68.3, Firefox ESR &lt; 68.3, and Firefox &lt; 71.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17011/">CVE-2019-17011</cve>
	<bugzilla href="https://bugzilla.suse.com/1158328">SUSE bug 1158328</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17012</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17012" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17012" ref_url="https://www.suse.com/security/cve/CVE-2019-17012" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006276.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0002-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html" source="SUSE-SU"/>
    <description>
    Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 68.3, Firefox ESR &lt; 68.3, and Firefox &lt; 71.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17012/">CVE-2019-17012</cve>
	<bugzilla href="https://bugzilla.suse.com/1158328">SUSE bug 1158328</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917015" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17015</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17015" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17015" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17015" ref_url="https://www.suse.com/security/cve/CVE-2019-17015" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006388.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006327.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00043.html" source="SUSE-SU"/>
    <description>
    During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable crash in the parent process. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR &lt; 68.4 and Firefox &lt; 72.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17015/">CVE-2019-17015</cve>
	<bugzilla href="https://bugzilla.suse.com/1160305">SUSE bug 1160305</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917016" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17016</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17016" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17016" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17016" ref_url="https://www.suse.com/security/cve/CVE-2019-17016" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006388.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006327.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00043.html" source="SUSE-SU"/>
    <description>
    When pasting a &amp;lt;style&amp;gt; tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR &lt; 68.4 and Firefox &lt; 72.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-17016/">CVE-2019-17016</cve>
	<bugzilla href="https://bugzilla.suse.com/1160305">SUSE bug 1160305</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917017" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17017</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17017" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17017" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17017" ref_url="https://www.suse.com/security/cve/CVE-2019-17017" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006388.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006327.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00043.html" source="SUSE-SU"/>
    <description>
    Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary code. This vulnerability affects Firefox ESR &lt; 68.4 and Firefox &lt; 72.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17017/">CVE-2019-17017</cve>
	<bugzilla href="https://bugzilla.suse.com/1160305">SUSE bug 1160305</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17021</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17021" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17021" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17021" ref_url="https://www.suse.com/security/cve/CVE-2019-17021" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006388.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006327.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00043.html" source="SUSE-SU"/>
    <description>
    During the initialization of a new content process, a race condition occurs that can allow a content process to disclose heap addresses from the parent process. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR &lt; 68.4 and Firefox &lt; 72.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-17021/">CVE-2019-17021</cve>
	<bugzilla href="https://bugzilla.suse.com/1160305">SUSE bug 1160305</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17022</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17022" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17022" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17022" ref_url="https://www.suse.com/security/cve/CVE-2019-17022" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006388.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006327.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00043.html" source="SUSE-SU"/>
    <description>
    When pasting a &amp;lt;style&amp;gt; tag from the clipboard into a rich text editor, the CSS sanitizer does not escape &amp;lt; and &amp;gt; characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node's innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR &lt; 68.4 and Firefox &lt; 72.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-17022/">CVE-2019-17022</cve>
	<bugzilla href="https://bugzilla.suse.com/1160305">SUSE bug 1160305</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17024</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17024" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17024" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17024" ref_url="https://www.suse.com/security/cve/CVE-2019-17024" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006388.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006327.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00043.html" source="SUSE-SU"/>
    <description>
    Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR &lt; 68.4 and Firefox &lt; 72.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17024/">CVE-2019-17024</cve>
	<bugzilla href="https://bugzilla.suse.com/1160305">SUSE bug 1160305</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17026</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17026" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17026" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17026" ref_url="https://www.suse.com/security/cve/CVE-2019-17026" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006388.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006327.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00043.html" source="SUSE-SU"/>
    <description>
    Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR &lt; 68.4.1, Thunderbird &lt; 68.4.1, and Firefox &lt; 72.0.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17026/">CVE-2019-17026</cve>
	<bugzilla href="https://bugzilla.suse.com/1160498">SUSE bug 1160498</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17113</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17113" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17113" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17113" ref_url="https://www.suse.com/security/cve/CVE-2019-17113" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2622-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00044.html" source="SUSE-SU"/>
    <description>
    In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmodplug output-buffer strings in the C API, leading to a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17113/">CVE-2019-17113</cve>
	<bugzilla href="https://bugzilla.suse.com/1153102">SUSE bug 1153102</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487555" comment="libopenmpt0-0.3.19-2.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230504" comment="libopenmpt0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17133</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17133" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17133" ref_url="https://www.suse.com/security/cve/CVE-2019-17133" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2829-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192829-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2859-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192859-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2946-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192946-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2947-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2951-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006134.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2953-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192953-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006228.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17133/">CVE-2019-17133</cve>
	<bugzilla href="https://bugzilla.suse.com/1153158">SUSE bug 1153158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153161">SUSE bug 1153161</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17177</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17177" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17177" ref_url="https://www.suse.com/security/cve/CVE-2019-17177" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006185.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006187.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2608-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00005.html" source="SUSE-SU"/>
    <description>
    libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17177/">CVE-2019-17177</cve>
	<bugzilla href="https://bugzilla.suse.com/1153163">SUSE bug 1153163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17178</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17178" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17178" ref_url="https://www.suse.com/security/cve/CVE-2019-17178" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006185.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006187.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2608-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00005.html" source="SUSE-SU"/>
    <description>
    HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17178/">CVE-2019-17178</cve>
	<bugzilla href="https://bugzilla.suse.com/1153164">SUSE bug 1153164</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17349</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17349" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17349" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17349" ref_url="https://www.suse.com/security/cve/CVE-2019-17349" source="SUSE CVE"/>
    <description>
    An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a LoadExcl or StoreExcl operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-17349/">CVE-2019-17349</cve>
	<bugzilla href="https://bugzilla.suse.com/1138294">SUSE bug 1138294</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17402</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17402" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17402" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17402" ref_url="https://www.suse.com/security/cve/CVE-2019-17402" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013143.html" source="SUSE-SU"/>
    <description>
    Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there is no validation of the relationship of the total size to the offset and size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-30"/>
	<updated date="2022-11-30"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17402/">CVE-2019-17402</cve>
	<bugzilla href="https://bugzilla.suse.com/1153577">SUSE bug 1153577</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725422" comment="exiv2-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725423" comment="exiv2-lang-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725374" comment="libexiv2-26-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725424" comment="libexiv2-26-32bit-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725375" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725425" comment="libexiv2-doc-0.26-150000.6.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17450</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17450" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17450" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17450" ref_url="https://www.suse.com/security/cve/CVE-2019-17450" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007888.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1790-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1804-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html" source="SUSE-SU"/>
    <description>
    find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17450/">CVE-2019-17450</cve>
	<bugzilla href="https://bugzilla.suse.com/1153770">SUSE bug 1153770</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17451</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17451" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17451" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17451" ref_url="https://www.suse.com/security/cve/CVE-2019-17451" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007888.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1790-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1804-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c, as demonstrated by nm.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17451/">CVE-2019-17451</cve>
	<bugzilla href="https://bugzilla.suse.com/1153768">SUSE bug 1153768</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17498</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17498" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17498" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17498" ref_url="https://www.suse.com/security/cve/CVE-2019-17498" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14226-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914226-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2900-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2936-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192936-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2126-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VZ5CXNJKJVQFPMHVDXDS6F67TKZ3TJ7E/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HAQH2P56QS5PVJGYRATVMCCAWSF5JABQ/" source="SUSE-SU"/>
    <description>
    In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17498/">CVE-2019-17498</cve>
	<bugzilla href="https://bugzilla.suse.com/1154862">SUSE bug 1154862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171566">SUSE bug 1171566</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628874" comment="libssh2-1-1.9.0-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152658" comment="libssh2-1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17539</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17539" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17539" ref_url="https://www.suse.com/security/cve/CVE-2019-17539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17539/">CVE-2019-17539</cve>
	<bugzilla href="https://bugzilla.suse.com/1154065">SUSE bug 1154065</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17540</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17540" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17540" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17540" ref_url="https://www.suse.com/security/cve/CVE-2019-17540" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:2259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011389.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011398.html" source="SUSE-SU"/>
    <description>
    ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-05"/>
	<updated date="2022-07-06"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-17540/">CVE-2019-17540</cve>
	<bugzilla href="https://bugzilla.suse.com/1153866">SUSE bug 1153866</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684403" comment="ImageMagick-7.0.7.34-150200.10.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684404" comment="ImageMagick-config-7-SUSE-7.0.7.34-150200.10.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684405" comment="ImageMagick-config-7-upstream-7.0.7.34-150200.10.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252942" comment="ImageMagick-config-7-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684406" comment="ImageMagick-devel-7.0.7.34-150200.10.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695488" comment="ImageMagick-devel-32bit-7.0.7.34-150200.10.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695489" comment="ImageMagick-doc-7.0.7.34-150200.10.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695490" comment="ImageMagick-extra-7.0.7.34-150200.10.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684407" comment="libMagick++-7_Q16HDRI4-7.0.7.34-150200.10.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695491" comment="libMagick++-7_Q16HDRI4-32bit-7.0.7.34-150200.10.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231080" comment="libMagick++-7_Q16HDRI4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684408" comment="libMagick++-devel-7.0.7.34-150200.10.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695492" comment="libMagick++-devel-32bit-7.0.7.34-150200.10.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684409" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-150200.10.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695493" comment="libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-150200.10.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231081" comment="libMagickCore-7_Q16HDRI6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684410" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-150200.10.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695494" comment="libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-150200.10.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231082" comment="libMagickWand-7_Q16HDRI6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684442" comment="perl-PerlMagick-7.0.7.34-150200.10.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17542</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17542" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17542" ref_url="https://www.suse.com/security/cve/CVE-2019-17542" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3184-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007084.html" source="SUSE-SU"/>
    <description>
    FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17542/">CVE-2019-17542</cve>
	<bugzilla href="https://bugzilla.suse.com/1154064">SUSE bug 1154064</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17543</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17543" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17543" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17543" ref_url="https://www.suse.com/security/cve/CVE-2019-17543" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2757-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008776.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00070.html" source="SUSE-SU"/>
    <description>
    LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.) NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17543/">CVE-2019-17543</cve>
	<bugzilla href="https://bugzilla.suse.com/1153936">SUSE bug 1153936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188549">SUSE bug 1188549</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628788" comment="liblz4-1-1.9.2-1.40 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009268961" comment="liblz4-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628789" comment="liblz4-1-32bit-1.9.2-1.40 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009268962" comment="liblz4-1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17546</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17546" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17546" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17546" ref_url="https://www.suse.com/security/cve/CVE-2019-17546" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010261.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0480-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/" source="SUSE-SU"/>
    <description>
    tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17546/">CVE-2019-17546</cve>
	<bugzilla href="https://bugzilla.suse.com/1154365">SUSE bug 1154365</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665431" comment="libtiff-devel-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666516" comment="libtiff-devel-32bit-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665432" comment="libtiff5-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665439" comment="libtiff5-32bit-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665440" comment="tiff-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17594</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17594" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17594" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17594" ref_url="https://www.suse.com/security/cve/CVE-2019-17594" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006435.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006442.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006155.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006199.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2550-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2551-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00059.html" source="SUSE-SU"/>
    <description>
    There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17594/">CVE-2019-17594</cve>
	<bugzilla href="https://bugzilla.suse.com/1154036">SUSE bug 1154036</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482311" comment="libncurses6-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158858" comment="libncurses6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482314" comment="ncurses-utils-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158863" comment="ncurses-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482316" comment="terminfo-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158865" comment="terminfo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482317" comment="terminfo-base-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158866" comment="terminfo-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482318" comment="terminfo-iterm-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009241511" comment="terminfo-iterm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482319" comment="terminfo-screen-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009241512" comment="terminfo-screen is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917595" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17595</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17595" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17595" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17595" ref_url="https://www.suse.com/security/cve/CVE-2019-17595" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006435.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006442.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006155.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006199.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2550-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2551-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00059.html" source="SUSE-SU"/>
    <description>
    There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17595/">CVE-2019-17595</cve>
	<bugzilla href="https://bugzilla.suse.com/1154037">SUSE bug 1154037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482311" comment="libncurses6-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158858" comment="libncurses6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482314" comment="ncurses-utils-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158863" comment="ncurses-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482316" comment="terminfo-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158865" comment="terminfo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482317" comment="terminfo-base-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158866" comment="terminfo-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482318" comment="terminfo-iterm-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009241511" comment="terminfo-iterm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482319" comment="terminfo-screen-6.1-5.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009241512" comment="terminfo-screen is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201917666" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-17666</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-17666" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17666" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-17666" ref_url="https://www.suse.com/security/cve/CVE-2019-17666" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2946-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192946-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2947-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2951-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006134.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2953-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192953-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html" source="SUSE-SU"/>
    <description>
    rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-17666/">CVE-2019-17666</cve>
	<bugzilla href="https://bugzilla.suse.com/1154372">SUSE bug 1154372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18197</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18197" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18197" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18197" ref_url="https://www.suse.com/security/cve/CVE-2019-18197" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006675.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0920-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007307.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1409-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006855.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html" source="SUSE-SU"/>
    <description>
    In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18197/">CVE-2019-18197</cve>
	<bugzilla href="https://bugzilla.suse.com/1154609">SUSE bug 1154609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157028">SUSE bug 1157028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190108">SUSE bug 1190108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482466" comment="libxslt-tools-1.1.32-3.8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155747" comment="libxslt-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482467" comment="libxslt1-1.1.32-3.8.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155748" comment="libxslt1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18198</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18198" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18198" ref_url="https://www.suse.com/security/cve/CVE-2019-18198" source="SUSE CVE"/>
    <description>
    In the Linux kernel before 5.3.4, a reference count usage error in the fib6_rule_suppress() function in the fib6 suppression feature of net/ipv6/fib6_rules.c, when handling the FIB_LOOKUP_NOREF flag, can be exploited by a local attacker to corrupt memory, aka CID-ca7a03c41753.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18198/">CVE-2019-18198</cve>
	<bugzilla href="https://bugzilla.suse.com/1154617">SUSE bug 1154617</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18218</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18218" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18218" ref_url="https://www.suse.com/security/cve/CVE-2019-18218" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009407.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009408.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009409.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009396.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00044.html" source="SUSE-SU"/>
    <description>
    cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18218/">CVE-2019-18218</cve>
	<bugzilla href="https://bugzilla.suse.com/1154661">SUSE bug 1154661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190368">SUSE bug 1190368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191838">SUSE bug 1191838</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628435" comment="file-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151700" comment="file is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628437" comment="file-magic-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151702" comment="file-magic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628438" comment="libmagic1-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151703" comment="libmagic1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628439" comment="libmagic1-32bit-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151704" comment="libmagic1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918224" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18224</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18224" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18224" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18224" ref_url="https://www.suse.com/security/cve/CVE-2019-18224" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006193.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2611-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2613-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00008.html" source="SUSE-SU"/>
    <description>
    idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-18224/">CVE-2019-18224</cve>
	<bugzilla href="https://bugzilla.suse.com/1154887">SUSE bug 1154887</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628747" comment="libidn2-0-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177212" comment="libidn2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628748" comment="libidn2-0-32bit-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177213" comment="libidn2-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694851" comment="libidn2-lang-2.2.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009273026" comment="libidn2-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918348" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18348</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18348" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18348" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18348" ref_url="https://www.suse.com/security/cve/CVE-2019-18348" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3228-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013165.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013169.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3262-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3378-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1144-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1145-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013286.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0750-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006666.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006878.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3865-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008491.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013149.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2332-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S3JTHM6LLDKL7VPNRJUSRPNZAD2FZ25H/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2333-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FLGERALYYFTBIX3ZKPM6EQ2WJVUXLOXY/" source="SUSE-SU"/>
    <description>
    An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the host component of a URL) followed by an HTTP header. This is similar to the CVE-2019-9740 query string issue and the CVE-2019-9947 path string issue. (This is not exploitable when glibc has CVE-2016-10739 fixed.). This is fixed in: v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1; v3.6.11, v3.6.11rc1, v3.6.12; v3.7.8, v3.7.8rc1, v3.7.9; v3.8.3, v3.8.3rc1, v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-18348/">CVE-2019-18348</cve>
	<bugzilla href="https://bugzilla.suse.com/1155094">SUSE bug 1155094</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493893" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726418" comment="libpython3_6m1_0-32bit-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244052" comment="libpython3_6m1_0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493894" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493895" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493896" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493897" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726423" comment="python3-devel-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152173" comment="python3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726424" comment="python3-doc-3.6.15-150300.10.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152174" comment="python3-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726425" comment="python3-doc-devhelp-3.6.15-150300.10.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009340456" comment="python3-doc-devhelp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726426" comment="python3-idle-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152176" comment="python3-idle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726427" comment="python3-testsuite-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152177" comment="python3-testsuite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726428" comment="python3-tk-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151919" comment="python3-tk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726429" comment="python3-tools-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152178" comment="python3-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18388</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18388" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18388" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18388" ref_url="https://www.suse.com/security/cve/CVE-2019-18388" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0017-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006300.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00028.html" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via malformed commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-18388/">CVE-2019-18388</cve>
	<bugzilla href="https://bugzilla.suse.com/1159479">SUSE bug 1159479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488549" comment="libvirglrenderer0-0.6.0-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18389</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18389" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18389" ref_url="https://www.suse.com/security/cve/CVE-2019-18389" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0017-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006300.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00028.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGL_CCMD_RESOURCE_INLINE_WRITE commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18389/">CVE-2019-18389</cve>
	<bugzilla href="https://bugzilla.suse.com/1159482">SUSE bug 1159482</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488549" comment="libvirglrenderer0-0.6.0-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18390</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18390" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18390" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18390" ref_url="https://www.suse.com/security/cve/CVE-2019-18390" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0017-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006300.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00028.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18390/">CVE-2019-18390</cve>
	<bugzilla href="https://bugzilla.suse.com/1159478">SUSE bug 1159478</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488549" comment="libvirglrenderer0-0.6.0-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18391</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18391" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18391" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18391" ref_url="https://www.suse.com/security/cve/CVE-2019-18391" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0017-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006300.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00028.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_RESOURCE_INLINE_WRITE commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18391/">CVE-2019-18391</cve>
	<bugzilla href="https://bugzilla.suse.com/1159486">SUSE bug 1159486</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488549" comment="libvirglrenderer0-0.6.0-4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918397" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18397</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18397" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18397" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18397" ref_url="https://www.suse.com/security/cve/CVE-2019-18397" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008796.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0763-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GPZ3M35XR5IQLIBDLZFFWGW6Z6SM7YNW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1655-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NAPU2NE5KWWCW4NS2FW7DLCSMM442VDM/" source="SUSE-SU"/>
    <description>
    A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text content to a user, when this content is then rendered by an application that uses FriBidi for text layout calculations. Examples include any GNOME or GTK+ based application that uses Pango for text layout, as this internally uses FriBidi for bidirectional text layout. For example, the attacker can construct a crafted text file to be opened in GEdit, or a crafted IRC message to be viewed in HexChat.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18397/">CVE-2019-18397</cve>
	<bugzilla href="https://bugzilla.suse.com/1156260">SUSE bug 1156260</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493935" comment="fribidi-1.0.5-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009475532" comment="fribidi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493936" comment="fribidi-devel-1.0.5-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009475533" comment="fribidi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493937" comment="libfribidi0-1.0.5-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009475534" comment="libfribidi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495783" comment="libfribidi0-32bit-1.0.5-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009475535" comment="libfribidi0-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18408</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18408" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18408" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18408" ref_url="https://www.suse.com/security/cve/CVE-2019-18408" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006196.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2632-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00015.html" source="SUSE-SU"/>
    <description>
    archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-18408/">CVE-2019-18408</cve>
	<bugzilla href="https://bugzilla.suse.com/1155079">SUSE bug 1155079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918634" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18634</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18634" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18634" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18634" ref_url="https://www.suse.com/security/cve/CVE-2019-18634" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0390-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006486.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0406-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006491.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0409-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006492.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0244-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-02/msg00091.html" source="SUSE-SU"/>
    <description>
    In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18634/">CVE-2019-18634</cve>
	<bugzilla href="https://bugzilla.suse.com/1162202">SUSE bug 1162202</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629025" comment="sudo-1.9.5p2-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629027" comment="sudo-plugin-python-1.9.5p2-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695524" comment="sudo-plugin-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18658</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18658" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18658" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18658" ref_url="https://www.suse.com/security/cve/CVE-2019-18658" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011203.html" source="SUSE-SU"/>
    <description>
    In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service (DoS) via a special file such as /dev/urandom, via symlinks. No version of Tiller is known to be impacted. This is a client-only issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-01"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-18658/">CVE-2019-18658</cve>
	<bugzilla href="https://bugzilla.suse.com/1156646">SUSE bug 1156646</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009681372" comment="helm-mirror-0.3.1-150000.1.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695694" comment="helm-mirror is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918660" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18660</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18660" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18660" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18660" ref_url="https://www.suse.com/security/cve/CVE-2019-18660" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-18660/">CVE-2019-18660</cve>
	<bugzilla href="https://bugzilla.suse.com/1157038">SUSE bug 1157038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157923">SUSE bug 1157923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18683</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18683" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18683" ref_url="https://www.suse.com/security/cve/CVE-2019-18683" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18683/">CVE-2019-18683</cve>
	<bugzilla href="https://bugzilla.suse.com/1155897">SUSE bug 1155897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173868">SUSE bug 1173868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918786" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18786</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18786" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18786" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18786" ref_url="https://www.suse.com/security/cve/CVE-2019-18786" source="SUSE CVE"/>
    <description>
    In the Linux kernel through 5.3.8, f-&gt;fmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c, which could cause a memory disclosure problem.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-18786/">CVE-2019-18786</cve>
	<bugzilla href="https://bugzilla.suse.com/1156043">SUSE bug 1156043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18802</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18802" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18802" ref_url="https://www.suse.com/security/cve/CVE-2019-18802" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006902.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0341-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XIUODYDMMPC4VZZIR4DRKRPVXGPEDZRO/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such as Host) with whitespace after the header content. Envoy will treat "header-value " as a different string from "header-value" so for example with the Host header "example.com " one could bypass "example.com" matchers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18802/">CVE-2019-18802</cve>
	<bugzilla href="https://bugzilla.suse.com/1159003">SUSE bug 1159003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628805" comment="libnghttp2-14-1.40.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153583" comment="libnghttp2-14 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628806" comment="libnghttp2-14-32bit-1.40.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177223" comment="libnghttp2-14-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18804</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18804" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18804" ref_url="https://www.suse.com/security/cve/CVE-2019-18804" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3033-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0970-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1645-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008794.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2574-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2576-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html" source="SUSE-SU"/>
    <description>
    DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-18804/">CVE-2019-18804</cve>
	<bugzilla href="https://bugzilla.suse.com/1156188">SUSE bug 1156188</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487345" comment="libdjvulibre21-3.5.27-9.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266979" comment="libdjvulibre21 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18808</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18808" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18808" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18808" ref_url="https://www.suse.com/security/cve/CVE-2019-18808" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18808/">CVE-2019-18808</cve>
	<bugzilla href="https://bugzilla.suse.com/1156259">SUSE bug 1156259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189884">SUSE bug 1189884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190534">SUSE bug 1190534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918809" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18809</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18809" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18809" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18809" ref_url="https://www.suse.com/security/cve/CVE-2019-18809" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18809/">CVE-2019-18809</cve>
	<bugzilla href="https://bugzilla.suse.com/1156258">SUSE bug 1156258</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18811</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18811" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18811" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18811" ref_url="https://www.suse.com/security/cve/CVE-2019-18811" source="SUSE CVE"/>
    <description>
    A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18811/">CVE-2019-18811</cve>
	<bugzilla href="https://bugzilla.suse.com/1159374">SUSE bug 1159374</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18812</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18812" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18812" ref_url="https://www.suse.com/security/cve/CVE-2019-18812" source="SUSE CVE"/>
    <description>
    A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-c0a333d842ef.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18812/">CVE-2019-18812</cve>
	<bugzilla href="https://bugzilla.suse.com/1156277">SUSE bug 1156277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18813</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18813" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18813" ref_url="https://www.suse.com/security/cve/CVE-2019-18813" source="SUSE CVE"/>
    <description>
    A memory leak in the dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering platform_device_add_properties() failures, aka CID-9bbfceea12a8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18813/">CVE-2019-18813</cve>
	<bugzilla href="https://bugzilla.suse.com/1156278">SUSE bug 1156278</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18814</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18814" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18814" ref_url="https://www.suse.com/security/cve/CVE-2019-18814" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008624.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1211-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0532-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZC652CKFCHQCNNU7MZKBTO27OZE22Q5U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0758-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BUQVIATUWQNZFSV6IFJENJSRWJSP2QHF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-18814/">CVE-2019-18814</cve>
	<bugzilla href="https://bugzilla.suse.com/1156256">SUSE bug 1156256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18898</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18898" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18898" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18898" ref_url="https://www.suse.com/security/cve/CVE-2019-18898" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0744-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00066.html" source="SUSE-SU"/>
    <description>
    UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1. openSUSE Factory trousers versions prior to 0.3.14-7.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18898/">CVE-2019-18898</cve>
	<bugzilla href="https://bugzilla.suse.com/1154062">SUSE bug 1154062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157651">SUSE bug 1157651</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482434" comment="trousers-0.3.14-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009275712" comment="trousers is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18900</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18900" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18900" ref_url="https://www.suse.com/security/cve/CVE-2019-18900" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:62-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006512.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006336.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:8-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006337.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:9-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006338.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0023-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006305.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006329.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0079-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007437.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006333.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0432-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006510.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007791.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00036.html" source="SUSE-SU"/>
    <description>
    : Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: SUSE CaaS Platform 3.0 libzypp versions prior to 16.21.2-27.68.1. SUSE Linux Enterprise Server 12 libzypp versions prior to 16.21.2-2.45.1. SUSE Linux Enterprise Server 15 17.19.0-3.34.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-18900/">CVE-2019-18900</cve>
	<bugzilla href="https://bugzilla.suse.com/1158763">SUSE bug 1158763</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694899" comment="libzypp-17.25.10-3.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161722" comment="libzypp is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918901" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18901</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18901" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18901" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18901" ref_url="https://www.suse.com/security/cve/CVE-2019-18901" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006539.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006549.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006654.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00007.html" source="SUSE-SU"/>
    <description>
    A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Server 12 mariadb versions prior to 10.2.31-3.25.1. SUSE Linux Enterprise Server 15 mariadb versions prior to 10.2.31-3.26.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18901/">CVE-2019-18901</cve>
	<bugzilla href="https://bugzilla.suse.com/1160285">SUSE bug 1160285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160895">SUSE bug 1160895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918902" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18902</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18902" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18902" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18902" ref_url="https://www.suse.com/security/cve/CVE-2019-18902" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006472.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0369-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006473.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006499.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0165-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00005.html" source="SUSE-SU"/>
    <description>
    A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-3.5.1. SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-3.21.1. openSUSE Leap 15.1 wicked versions prior to 0.6.60-lp151.2.6.1. openSUSE Factory wicked versions prior to 0.6.62.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-18902/">CVE-2019-18902</cve>
	<bugzilla href="https://bugzilla.suse.com/1160903">SUSE bug 1160903</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629048" comment="wicked-0.6.65-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009277410" comment="wicked is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629049" comment="wicked-service-0.6.65-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009277411" comment="wicked-service is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918903" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18903</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18903" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18903" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18903" ref_url="https://www.suse.com/security/cve/CVE-2019-18903" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006472.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0369-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006473.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0370-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006475.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006499.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00011.html" source="SUSE-SU"/>
    <description>
    A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-2.18.1. SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-28.26.1. openSUSE Leap 15.1 wicked versions prior to 0.6.60-lp151.2.9.1. openSUSE Factory wicked versions prior to 0.6.62.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-18903/">CVE-2019-18903</cve>
	<bugzilla href="https://bugzilla.suse.com/1160904">SUSE bug 1160904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629048" comment="wicked-0.6.65-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009277410" comment="wicked is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629049" comment="wicked-service-0.6.65-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009277411" comment="wicked-service is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18905</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18905" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18905" ref_url="https://www.suse.com/security/cve/CVE-2019-18905" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006831.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0676-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00050.html" source="SUSE-SU"/>
    <description>
    A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux Enterprise Server 12 autoyast2 version 4.1.9-3.9.1 and prior versions. SUSE Linux Enterprise Server 15 autoyast2 version 4.0.70-3.20.1 and prior versions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-18905/">CVE-2019-18905</cve>
	<bugzilla href="https://bugzilla.suse.com/1140711">SUSE bug 1140711</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628289" comment="autoyast2-4.3.77-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009283676" comment="autoyast2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628290" comment="autoyast2-installation-4.3.77-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009283677" comment="autoyast2-installation is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201918906" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-18906</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-18906" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18906" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-18906" ref_url="https://www.suse.com/security/cve/CVE-2019-18906" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2136-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0907-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DGYSYGNUS4QKFOUUYGCDWJ7IFEVXEUO2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZG2JNQUB6EYLM4HAOZIJV25FIOJAG6B6/" source="SUSE-SU"/>
    <description>
    A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack it. This issue affects: SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4. SUSE Manager Server 4.0 cryptctl versions prior to 2.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18906/">CVE-2019-18906</cve>
	<bugzilla href="https://bugzilla.suse.com/1186226">SUSE bug 1186226</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494072" comment="cryptctl-2.4-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479976" comment="cryptctl is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919004" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19004</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19004" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19004" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19004" ref_url="https://www.suse.com/security/cve/CVE-2019-19004" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:0141-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DLYT44LA5ZMWEXSKKLL4QK25G4FZSHQA/" source="SUSE-SU"/>
    <description>
    A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input value to malloc via a malformed bitmap image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19004/">CVE-2019-19004</cve>
	<bugzilla href="https://bugzilla.suse.com/1182158">SUSE bug 1182158</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684132" comment="autotrace-0.31.1-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009684175" comment="autotrace is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684133" comment="autotrace-devel-0.31.1-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009684176" comment="autotrace-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684134" comment="libautotrace3-0.31.1-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009684177" comment="libautotrace3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19005</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19005" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19005" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19005" ref_url="https://www.suse.com/security/cve/CVE-2019-19005" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:0141-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DLYT44LA5ZMWEXSKKLL4QK25G4FZSHQA/" source="SUSE-SU"/>
    <description>
    A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image. This may occur after the use-after-free in CVE-2017-9182.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19005/">CVE-2019-19005</cve>
	<bugzilla href="https://bugzilla.suse.com/1182159">SUSE bug 1182159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684132" comment="autotrace-0.31.1-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009684175" comment="autotrace is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684133" comment="autotrace-devel-0.31.1-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009684176" comment="autotrace-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684134" comment="libautotrace3-0.31.1-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009684177" comment="libautotrace3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19037</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19037" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19037" ref_url="https://www.suse.com/security/cve/CVE-2019-19037" source="SUSE CVE"/>
    <description>
    ext4_empty_dir in fs/ext4/namei.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because ext4_read_dirblock(inode,0,DIRENT_HTREE) can be zero.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19037/">CVE-2019-19037</cve>
	<bugzilla href="https://bugzilla.suse.com/1157717">SUSE bug 1157717</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919043" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19043</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19043" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19043" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19043" ref_url="https://www.suse.com/security/cve/CVE-2019-19043" source="SUSE CVE"/>
    <description>
    A memory leak in the i40e_setup_macvlans() function in drivers/net/ethernet/intel/i40e/i40e_main.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering i40e_setup_channel() failures, aka CID-27d461333459.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19043/">CVE-2019-19043</cve>
	<bugzilla href="https://bugzilla.suse.com/1159375">SUSE bug 1159375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19044</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19044" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19044" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19044" ref_url="https://www.suse.com/security/cve/CVE-2019-19044" source="SUSE CVE"/>
    <description>
    Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures, aka CID-29cd13cfd762.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19044/">CVE-2019-19044</cve>
	<bugzilla href="https://bugzilla.suse.com/1159370">SUSE bug 1159370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19045</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19045" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19045" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19045" ref_url="https://www.suse.com/security/cve/CVE-2019-19045" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0558-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19045/">CVE-2019-19045</cve>
	<bugzilla href="https://bugzilla.suse.com/1161522">SUSE bug 1161522</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919046" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19046</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19046" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19046" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19046" ref_url="https://www.suse.com/security/cve/CVE-2019-19046" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure, aka CID-4aa7afb0ee20. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control this failure at probe time.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19046/">CVE-2019-19046</cve>
	<bugzilla href="https://bugzilla.suse.com/1157304">SUSE bug 1157304</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919047" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19047</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19047" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19047" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19047" ref_url="https://www.suse.com/security/cve/CVE-2019-19047" source="SUSE CVE"/>
    <description>
    A memory leak in the mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_crdump_collect() failures, aka CID-c7ed6d0183d5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="1.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19047/">CVE-2019-19047</cve>
	<bugzilla href="https://bugzilla.suse.com/1157715">SUSE bug 1157715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19048</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19048" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19048" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19048" ref_url="https://www.suse.com/security/cve/CVE-2019-19048" source="SUSE CVE"/>
    <description>
    A memory leak in the crypto_reportstat() function in drivers/virt/vboxguest/vboxguest_utils.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering copy_form_user() failures, aka CID-e0b0cb938864.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19048/">CVE-2019-19048</cve>
	<bugzilla href="https://bugzilla.suse.com/1157720">SUSE bug 1157720</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19049</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19049" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19049" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19049" ref_url="https://www.suse.com/security/cve/CVE-2019-19049" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel before 5.3.10 allows attackers to cause a denial of service (memory consumption) by triggering of_fdt_unflatten_tree() failures, aka CID-e13de8fe0d6a. NOTE: third parties dispute the relevance of this because unittest.c can only be reached during boot.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="1.6/CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19049/">CVE-2019-19049</cve>
	<bugzilla href="https://bugzilla.suse.com/1157173">SUSE bug 1157173</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19050</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19050" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19050" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19050" ref_url="https://www.suse.com/security/cve/CVE-2019-19050" source="SUSE CVE"/>
    <description>
    A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19050/">CVE-2019-19050</cve>
	<bugzilla href="https://bugzilla.suse.com/1157336">SUSE bug 1157336</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919051" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19051</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19051" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19051" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19051" ref_url="https://www.suse.com/security/cve/CVE-2019-19051" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    A memory leak in the i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-rfkill.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-6f3ef5c25cc7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19051/">CVE-2019-19051</cve>
	<bugzilla href="https://bugzilla.suse.com/1159024">SUSE bug 1159024</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19052</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19052" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19052" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19052" ref_url="https://www.suse.com/security/cve/CVE-2019-19052" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19052/">CVE-2019-19052</cve>
	<bugzilla href="https://bugzilla.suse.com/1157324">SUSE bug 1157324</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19053</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19053" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19053" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19053" ref_url="https://www.suse.com/security/cve/CVE-2019-19053" source="SUSE CVE"/>
    <description>
    A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy_from_iter_full() failures, aka CID-bbe692e349e2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19053/">CVE-2019-19053</cve>
	<bugzilla href="https://bugzilla.suse.com/1161520">SUSE bug 1161520</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19054</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19054" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19054" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19054" ref_url="https://www.suse.com/security/cve/CVE-2019-19054" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0558-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19054/">CVE-2019-19054</cve>
	<bugzilla href="https://bugzilla.suse.com/1161518">SUSE bug 1161518</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19055</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19055" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19055" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19055" ref_url="https://www.suse.com/security/cve/CVE-2019-19055" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering nl80211hdr_put() failures, aka CID-1399c59fa929. NOTE: third parties dispute the relevance of this because it occurs on a code path where a successful allocation has already occurred.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19055/">CVE-2019-19055</cve>
	<bugzilla href="https://bugzilla.suse.com/1157319">SUSE bug 1157319</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19056</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19056" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19056" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19056" ref_url="https://www.suse.com/security/cve/CVE-2019-19056" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-db8fd2cde932.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19056/">CVE-2019-19056</cve>
	<bugzilla href="https://bugzilla.suse.com/1157197">SUSE bug 1157197</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919057" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19057</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19057" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19057" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19057" ref_url="https://www.suse.com/security/cve/CVE-2019-19057" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-d10dcb615c8e.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19057/">CVE-2019-19057</cve>
	<bugzilla href="https://bugzilla.suse.com/1157193">SUSE bug 1157193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157197">SUSE bug 1157197</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919058" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19058</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19058" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19058" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19058" ref_url="https://www.suse.com/security/cve/CVE-2019-19058" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures, aka CID-b4b814fec1a5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19058/">CVE-2019-19058</cve>
	<bugzilla href="https://bugzilla.suse.com/1157145">SUSE bug 1157145</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919060" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19060</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19060" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19060" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19060" ref_url="https://www.suse.com/security/cve/CVE-2019-19060" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-ab612b1daf41.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19060/">CVE-2019-19060</cve>
	<bugzilla href="https://bugzilla.suse.com/1157178">SUSE bug 1157178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919061" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19061</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19061" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19061" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19061" ref_url="https://www.suse.com/security/cve/CVE-2019-19061" source="SUSE CVE"/>
    <description>
    A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-9c0530e898f3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19061/">CVE-2019-19061</cve>
	<bugzilla href="https://bugzilla.suse.com/1157192">SUSE bug 1157192</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19062</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19062" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19062" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19062" ref_url="https://www.suse.com/security/cve/CVE-2019-19062" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19062/">CVE-2019-19062</cve>
	<bugzilla href="https://bugzilla.suse.com/1157333">SUSE bug 1157333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19063</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19063" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19063" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19063" ref_url="https://www.suse.com/security/cve/CVE-2019-19063" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption), aka CID-3f9361695113.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19063/">CVE-2019-19063</cve>
	<bugzilla href="https://bugzilla.suse.com/1157298">SUSE bug 1157298</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19064</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19064" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19064" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19064" ref_url="https://www.suse.com/security/cve/CVE-2019-19064" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** A memory leak in the fsl_lpspi_probe() function in drivers/spi/spi-fsl-lpspi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering pm_runtime_get_sync() failures, aka CID-057b8945f78f. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control these failures at probe time.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="1.6/CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19064/">CVE-2019-19064</cve>
	<bugzilla href="https://bugzilla.suse.com/1157300">SUSE bug 1157300</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19065</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19065" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19065" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19065" ref_url="https://www.suse.com/security/cve/CVE-2019-19065" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering rhashtable_init() failures, aka CID-34b3be18a04e. NOTE: This has been disputed as not a vulnerability because "rhashtable_init() can only fail if it is passed invalid values in the second parameter's struct, but when invoked from sdma_init() that is a pointer to a static const struct, so an attacker could only trigger failure if they could corrupt kernel memory (in which case a small memory leak is not a significant problem)."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19065/">CVE-2019-19065</cve>
	<bugzilla href="https://bugzilla.suse.com/1157191">SUSE bug 1157191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173961">SUSE bug 1173961</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19066</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19066" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19066" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19066" ref_url="https://www.suse.com/security/cve/CVE-2019-19066" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures, aka CID-0e62395da2bd.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19066/">CVE-2019-19066</cve>
	<bugzilla href="https://bugzilla.suse.com/1157303">SUSE bug 1157303</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19067</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19067" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19067" ref_url="https://www.suse.com/security/cve/CVE-2019-19067" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption) by triggering mfd_add_hotplug_devices() or pm_genpd_add_device() failures, aka CID-57be09c6e874. NOTE: third parties dispute the relevance of this because the attacker must already have privileges for module loading.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19067/">CVE-2019-19067</cve>
	<bugzilla href="https://bugzilla.suse.com/1157180">SUSE bug 1157180</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19068</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19068" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19068" ref_url="https://www.suse.com/security/cve/CVE-2019-19068" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-a2cdd07488e6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19068/">CVE-2019-19068</cve>
	<bugzilla href="https://bugzilla.suse.com/1157307">SUSE bug 1157307</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19069</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19069" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19069" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19069" ref_url="https://www.suse.com/security/cve/CVE-2019-19069" source="SUSE CVE"/>
    <description>
    A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering dma_get_sgtable() failures, aka CID-fc739a058d99.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19069/">CVE-2019-19069</cve>
	<bugzilla href="https://bugzilla.suse.com/1157064">SUSE bug 1157064</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19070</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19070" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19070" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19070" ref_url="https://www.suse.com/security/cve/CVE-2019-19070" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** A memory leak in the spi_gpio_probe() function in drivers/spi/spi-gpio.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering devm_add_action_or_reset() failures, aka CID-d3b0ffa1d75d. NOTE: third parties dispute the relevance of this because the system must have already been out of memory before the probe began.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19070/">CVE-2019-19070</cve>
	<bugzilla href="https://bugzilla.suse.com/1157294">SUSE bug 1157294</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19071</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19071" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19071" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19071" ref_url="https://www.suse.com/security/cve/CVE-2019-19071" source="SUSE CVE"/>
    <description>
    A memory leak in the rsi_send_beacon() function in drivers/net/wireless/rsi/rsi_91x_mgmt.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering rsi_prepare_beacon() failures, aka CID-d563131ef23c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19071/">CVE-2019-19071</cve>
	<bugzilla href="https://bugzilla.suse.com/1157067">SUSE bug 1157067</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19072</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19072" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19072" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19072" ref_url="https://www.suse.com/security/cve/CVE-2019-19072" source="SUSE CVE"/>
    <description>
    A memory leak in the predicate_parse() function in kernel/trace/trace_events_filter.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-96c5c6e6a5b6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19072/">CVE-2019-19072</cve>
	<bugzilla href="https://bugzilla.suse.com/1157069">SUSE bug 1157069</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19073</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19073" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19073" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19073" ref_url="https://www.suse.com/security/cve/CVE-2019-19073" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19073/">CVE-2019-19073</cve>
	<bugzilla href="https://bugzilla.suse.com/1157070">SUSE bug 1157070</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19074</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19074" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19074" ref_url="https://www.suse.com/security/cve/CVE-2019-19074" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-728c1e2a05e4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19074/">CVE-2019-19074</cve>
	<bugzilla href="https://bugzilla.suse.com/1157143">SUSE bug 1157143</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19075</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19075" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19075" ref_url="https://www.suse.com/security/cve/CVE-2019-19075" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service (memory consumption) by triggering ca8210_get_platform_data() failures, aka CID-6402939ec86e.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19075/">CVE-2019-19075</cve>
	<bugzilla href="https://bugzilla.suse.com/1157162">SUSE bug 1157162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173958">SUSE bug 1173958</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19077</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19077" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19077" ref_url="https://www.suse.com/security/cve/CVE-2019-19077" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    A memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy to udata failures, aka CID-4a9d46a9fe14.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19077/">CVE-2019-19077</cve>
	<bugzilla href="https://bugzilla.suse.com/1157171">SUSE bug 1157171</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19078</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19078" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19078" ref_url="https://www.suse.com/security/cve/CVE-2019-19078" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-b8d17e7d93d2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19078/">CVE-2019-19078</cve>
	<bugzilla href="https://bugzilla.suse.com/1157032">SUSE bug 1157032</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19080</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19080" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19080" ref_url="https://www.suse.com/security/cve/CVE-2019-19080" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allow attackers to cause a denial of service (memory consumption), aka CID-8572cea1461a.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19080/">CVE-2019-19080</cve>
	<bugzilla href="https://bugzilla.suse.com/1157044">SUSE bug 1157044</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19081</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19081" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19081" ref_url="https://www.suse.com/security/cve/CVE-2019-19081" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allows attackers to cause a denial of service (memory consumption), aka CID-8ce39eb5a67a.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19081/">CVE-2019-19081</cve>
	<bugzilla href="https://bugzilla.suse.com/1157045">SUSE bug 1157045</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919082" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19082</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19082" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19082" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19082" ref_url="https://www.suse.com/security/cve/CVE-2019-19082" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption). This affects the dce120_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, the dce100_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, and the dce112_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, aka CID-104c307147ad.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19082/">CVE-2019-19082</cve>
	<bugzilla href="https://bugzilla.suse.com/1157046">SUSE bug 1157046</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19083</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19083" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19083" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19083" ref_url="https://www.suse.com/security/cve/CVE-2019-19083" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0152-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013530.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    Memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption). This affects the dce112_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, the dce100_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, the dcn20_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c, the dce120_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, and the dce80_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce80/dce80_resource.c, aka CID-055e547478a1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19083/">CVE-2019-19083</cve>
	<bugzilla href="https://bugzilla.suse.com/1157049">SUSE bug 1157049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19126" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19126" ref_url="https://www.suse.com/security/cve/CVE-2019-19126" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:31-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006421.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:33-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006430.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:35-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006437.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:39-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0262-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006413.html" source="SUSE-SU"/>
    <description>
    On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19126/">CVE-2019-19126</cve>
	<bugzilla href="https://bugzilla.suse.com/1157292">SUSE bug 1157292</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19203</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19203" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19203" ref_url="https://www.suse.com/security/cve/CVE-2019-19203" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:1093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012587.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012320.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-24"/>
	<updated date="2022-10-23"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19203/">CVE-2019-19203</cve>
	<bugzilla href="https://bugzilla.suse.com/1164550">SUSE bug 1164550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203568">SUSE bug 1203568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708026" comment="libonig4-6.7.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009714765" comment="libonig4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708027" comment="oniguruma-devel-6.7.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009714766" comment="oniguruma-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19204</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19204" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19204" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19204" ref_url="https://www.suse.com/security/cve/CVE-2019-19204" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:1093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012587.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012320.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-24"/>
	<updated date="2022-10-23"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19204/">CVE-2019-19204</cve>
	<bugzilla href="https://bugzilla.suse.com/1164569">SUSE bug 1164569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203568">SUSE bug 1203568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708026" comment="libonig4-6.7.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009714765" comment="libonig4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708027" comment="oniguruma-devel-6.7.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009714766" comment="oniguruma-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19221</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19221" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19221" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19221" ref_url="https://www.suse.com/security/cve/CVE-2019-19221" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009736.html" source="SUSE-SU"/>
    <description>
    In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19221/">CVE-2019-19221</cve>
	<bugzilla href="https://bugzilla.suse.com/1157569">SUSE bug 1157569</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482125" comment="libarchive13-3.4.2-2.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19241</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19241" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19241" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19241" ref_url="https://www.suse.com/security/cve/CVE-2019-19241" source="SUSE CVE"/>
    <description>
    In the Linux kernel before 5.4.2, the io_uring feature leads to requests that inadvertently have UID 0 and full capabilities, aka CID-181e448d8709. This is related to fs/io-wq.c, fs/io_uring.c, and net/socket.c. For example, an attacker can bypass intended restrictions on adding an IPv4 address to the loopback interface. This occurs because IORING_OP_SENDMSG operations, although requested in the context of an unprivileged user, are sometimes performed by a kernel worker thread without considering that context.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19241/">CVE-2019-19241</cve>
	<bugzilla href="https://bugzilla.suse.com/1159441">SUSE bug 1159441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19244</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19244" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19244" ref_url="https://www.suse.com/security/cve/CVE-2019-19244" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19244/">CVE-2019-19244</cve>
	<bugzilla href="https://bugzilla.suse.com/1157817">SUSE bug 1157817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157818">SUSE bug 1157818</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919246" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19246</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19246" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19246" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19246" ref_url="https://www.suse.com/security/cve/CVE-2019-19246" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:1093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012587.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012320.html" source="SUSE-SU"/>
    <description>
    Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-24"/>
	<updated date="2022-10-23"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19246/">CVE-2019-19246</cve>
	<bugzilla href="https://bugzilla.suse.com/1157805">SUSE bug 1157805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203568">SUSE bug 1203568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708026" comment="libonig4-6.7.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009714765" comment="libonig4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708027" comment="oniguruma-devel-6.7.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009714766" comment="oniguruma-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19252</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19252" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19252" ref_url="https://www.suse.com/security/cve/CVE-2019-19252" source="SUSE CVE"/>
    <description>
    vcs_write in drivers/tty/vt/vc_screen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19252/">CVE-2019-19252</cve>
	<bugzilla href="https://bugzilla.suse.com/1157813">SUSE bug 1157813</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19317</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19317" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19317" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19317" ref_url="https://www.suse.com/security/cve/CVE-2019-19317" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-19317/">CVE-2019-19317</cve>
	<bugzilla href="https://bugzilla.suse.com/1158812">SUSE bug 1158812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196773">SUSE bug 1196773</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196775">SUSE bug 1196775</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919332" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19332</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19332" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19332" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19332" ref_url="https://www.suse.com/security/cve/CVE-2019-19332" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds memory write issue was found in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19332/">CVE-2019-19332</cve>
	<bugzilla href="https://bugzilla.suse.com/1158827">SUSE bug 1158827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19338</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19338" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19338" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19338" ref_url="https://www.suse.com/security/cve/CVE-2019-19338" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort (TAA) error occurs. When a guest is running on a host CPU affected by the TAA flaw (TAA_NO=0), but is not affected by the MDS issue (MDS_NO=1), the guest was to clear the affected buffers by using a VERW instruction mechanism. But when the MDS_NO=1 bit was exported to the guests, the guests did not use the VERW mechanism to clear the affected buffers. This issue affects guests running on Cascade Lake CPUs and requires that host has 'TSX' enabled. Confidentiality of data is the highest threat associated with this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19338/">CVE-2019-19338</cve>
	<bugzilla href="https://bugzilla.suse.com/1158954">SUSE bug 1158954</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919344" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19344</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19344" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19344" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19344" ref_url="https://www.suse.com/security/cve/CVE-2019-19344" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006401.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007440.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00055.html" source="SUSE-SU"/>
    <description>
    There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc() while other local variables still point at the original buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19344/">CVE-2019-19344</cve>
	<bugzilla href="https://bugzilla.suse.com/1160852">SUSE bug 1160852</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19377</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19377" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19377" ref_url="https://www.suse.com/security/cve/CVE-2019-19377" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011493.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:763-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011495.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011286.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011302.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011310.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2393-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011744.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:2177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S2QMD6CJ6PZDFYQ3RKSOGAZNRK7WC5W7/" source="SUSE-SU"/>
    <description>
    In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-15"/>
	<updated date="2022-09-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19377/">CVE-2019-19377</cve>
	<bugzilla href="https://bugzilla.suse.com/1158266">SUSE bug 1158266</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162338">SUSE bug 1162338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162369">SUSE bug 1162369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173871">SUSE bug 1173871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695274" comment="cluster-md-kmp-64kb-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695330" comment="cluster-md-kmp-azure-5.3.18-150300.38.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684890" comment="cluster-md-kmp-default-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695275" comment="cluster-md-kmp-preempt-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695276" comment="dlm-kmp-64kb-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695331" comment="dlm-kmp-azure-5.3.18-150300.38.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684891" comment="dlm-kmp-default-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695277" comment="dlm-kmp-preempt-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695278" comment="dtb-al-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695279" comment="dtb-allwinner-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695280" comment="dtb-altera-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695281" comment="dtb-amd-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695282" comment="dtb-amlogic-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695283" comment="dtb-apm-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695284" comment="dtb-arm-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695285" comment="dtb-broadcom-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695286" comment="dtb-cavium-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695287" comment="dtb-exynos-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695288" comment="dtb-freescale-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695289" comment="dtb-hisilicon-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695290" comment="dtb-lg-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695291" comment="dtb-marvell-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695292" comment="dtb-mediatek-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695293" comment="dtb-nvidia-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695294" comment="dtb-qcom-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695295" comment="dtb-renesas-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695296" comment="dtb-rockchip-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695297" comment="dtb-socionext-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695298" comment="dtb-sprd-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695299" comment="dtb-xilinx-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695300" comment="dtb-zte-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695301" comment="gfs2-kmp-64kb-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695332" comment="gfs2-kmp-azure-5.3.18-150300.38.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684892" comment="gfs2-kmp-default-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695302" comment="gfs2-kmp-preempt-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684291" comment="kernel-64kb-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684292" comment="kernel-64kb-devel-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695303" comment="kernel-64kb-extra-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695304" comment="kernel-64kb-livepatch-devel-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695305" comment="kernel-64kb-optional-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684718" comment="kernel-azure-5.3.18-150300.38.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684719" comment="kernel-azure-devel-5.3.18-150300.38.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695333" comment="kernel-azure-extra-5.3.18-150300.38.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695334" comment="kernel-azure-livepatch-devel-5.3.18-150300.38.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695335" comment="kernel-azure-optional-5.3.18-150300.38.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695306" comment="kernel-debug-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695342" comment="kernel-debug-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695307" comment="kernel-debug-devel-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695308" comment="kernel-debug-livepatch-devel-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684293" comment="kernel-default-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684294" comment="kernel-default-base-5.3.18-150300.59.71.2.150300.18.43.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695309" comment="kernel-default-base-rebuild-5.3.18-150300.59.71.2.150300.18.43.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684295" comment="kernel-default-devel-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695310" comment="kernel-default-extra-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695311" comment="kernel-default-livepatch-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695312" comment="kernel-default-livepatch-devel-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009693407" comment="kernel-default-man-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695313" comment="kernel-default-optional-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684296" comment="kernel-devel-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684720" comment="kernel-devel-azure-5.3.18-150300.38.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684428" comment="kernel-docs-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695314" comment="kernel-docs-html-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695315" comment="kernel-kvmsmall-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695343" comment="kernel-kvmsmall-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695316" comment="kernel-kvmsmall-devel-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695317" comment="kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684297" comment="kernel-macros-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684429" comment="kernel-obs-build-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695318" comment="kernel-obs-qa-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684298" comment="kernel-preempt-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684430" comment="kernel-preempt-devel-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695319" comment="kernel-preempt-extra-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695320" comment="kernel-preempt-livepatch-devel-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695321" comment="kernel-preempt-optional-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684431" comment="kernel-source-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684721" comment="kernel-source-azure-5.3.18-150300.38.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695322" comment="kernel-source-vanilla-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684432" comment="kernel-syms-5.3.18-150300.59.71.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684722" comment="kernel-syms-azure-5.3.18-150300.38.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695344" comment="kernel-vanilla-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695345" comment="kernel-vanilla-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695346" comment="kernel-vanilla-devel-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695347" comment="kernel-vanilla-livepatch-devel-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684299" comment="kernel-zfcpdump-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695348" comment="kernel-zfcpdump-man-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695323" comment="kselftests-kmp-64kb-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695336" comment="kselftests-kmp-azure-5.3.18-150300.38.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695324" comment="kselftests-kmp-default-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695325" comment="kselftests-kmp-preempt-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695326" comment="ocfs2-kmp-64kb-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695337" comment="ocfs2-kmp-azure-5.3.18-150300.38.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684893" comment="ocfs2-kmp-default-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695327" comment="ocfs2-kmp-preempt-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695328" comment="reiserfs-kmp-64kb-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695338" comment="reiserfs-kmp-azure-5.3.18-150300.38.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684551" comment="reiserfs-kmp-default-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695329" comment="reiserfs-kmp-preempt-5.3.18-150300.59.71.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19447</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19447" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19447" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19447" ref_url="https://www.suse.com/security/cve/CVE-2019-19447" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007365.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19447/">CVE-2019-19447</cve>
	<bugzilla href="https://bugzilla.suse.com/1158819">SUSE bug 1158819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173869">SUSE bug 1173869</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19462</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19462" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19462" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19462" ref_url="https://www.suse.com/security/cve/CVE-2019-19462" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19462/">CVE-2019-19462</cve>
	<bugzilla href="https://bugzilla.suse.com/1158265">SUSE bug 1158265</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19523</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19523" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19523" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19523" ref_url="https://www.suse.com/security/cve/CVE-2019-19523" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19523/">CVE-2019-19523</cve>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158823">SUSE bug 1158823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19524</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19524" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19524" ref_url="https://www.suse.com/security/cve/CVE-2019-19524" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver, aka CID-fa3a5a1880c9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19524/">CVE-2019-19524</cve>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158413">SUSE bug 1158413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19525</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19525" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19525" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19525" ref_url="https://www.suse.com/security/cve/CVE-2019-19525" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel before 5.3.6, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver, aka CID-7fd25e6fc035.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19525/">CVE-2019-19525</cve>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158417">SUSE bug 1158417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19526</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19526" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19526" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19526" ref_url="https://www.suse.com/security/cve/CVE-2019-19526" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel before 5.3.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka CID-6af3aa57a098.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19526/">CVE-2019-19526</cve>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158893">SUSE bug 1158893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19528</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19528" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19528" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19528" ref_url="https://www.suse.com/security/cve/CVE-2019-19528" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19528/">CVE-2019-19528</cve>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158407">SUSE bug 1158407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19529</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19529" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19529" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19529" ref_url="https://www.suse.com/security/cve/CVE-2019-19529" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel before 5.3.11, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver, aka CID-4d6636498c41.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19529/">CVE-2019-19529</cve>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19532</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19532" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19532" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19532" ref_url="https://www.suse.com/security/cve/CVE-2019-19532" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95. This affects drivers/hid/hid-axff.c, drivers/hid/hid-dr.c, drivers/hid/hid-emsff.c, drivers/hid/hid-gaff.c, drivers/hid/hid-holtekff.c, drivers/hid/hid-lg2ff.c, drivers/hid/hid-lg3ff.c, drivers/hid/hid-lg4ff.c, drivers/hid/hid-lgff.c, drivers/hid/hid-logitech-hidpp.c, drivers/hid/hid-microsoft.c, drivers/hid/hid-sony.c, drivers/hid/hid-tmff.c, and drivers/hid/hid-zpff.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19532/">CVE-2019-19532</cve>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158823">SUSE bug 1158823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158824">SUSE bug 1158824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19533</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19533" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19533" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19533" ref_url="https://www.suse.com/security/cve/CVE-2019-19533" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19533/">CVE-2019-19533</cve>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19534</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19534" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19534" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19534" ref_url="https://www.suse.com/security/cve/CVE-2019-19534" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver, aka CID-f7a1337f0d29.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19534/">CVE-2019-19534</cve>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158398">SUSE bug 1158398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19555</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19555" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19555" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19555" ref_url="https://www.suse.com/security/cve/CVE-2019-19555" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2454-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009457.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1143-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LKD7IBCZKGMDHLZ7H4T5P7WTXHNFSOB6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1311-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PQ34JCCBYY5MVDLL7VGCWBOZKOQ5EXTK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1318-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4HYGTSDI2IQ34SYGQZGBYMH3NPMCAL2X/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2454-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RK4BRVCUPZKN5VS2JGWBPYITONWJCIZJ/" source="SUSE-SU"/>
    <description>
    read_textobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19555/">CVE-2019-19555</cve>
	<bugzilla href="https://bugzilla.suse.com/1161698">SUSE bug 1161698</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625872" comment="transfig-3.2.8a-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172240" comment="transfig is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19602</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19602" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19602" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19602" ref_url="https://www.suse.com/security/cve/CVE-2019-19602" source="SUSE CVE"/>
    <description>
    fpregs_state_valid in arch/x86/include/asm/fpu/internal.h in the Linux kernel before 5.4.2, when GCC 9 is used, allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact because of incorrect fpu_fpregs_owner_ctx caching, as demonstrated by mishandling of signal-based non-cooperative preemption in Go 1.14 prereleases on amd64, aka CID-59c4bd853abc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19602/">CVE-2019-19602</cve>
	<bugzilla href="https://bugzilla.suse.com/1158887">SUSE bug 1158887</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919603" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19603</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19603" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19603" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19603" ref_url="https://www.suse.com/security/cve/CVE-2019-19603" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19603/">CVE-2019-19603</cve>
	<bugzilla href="https://bugzilla.suse.com/1158960">SUSE bug 1158960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193078">SUSE bug 1193078</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19645</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19645" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19645" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19645" ref_url="https://www.suse.com/security/cve/CVE-2019-19645" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19645/">CVE-2019-19645</cve>
	<bugzilla href="https://bugzilla.suse.com/1158958">SUSE bug 1158958</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19646</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19646" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19646" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19646" ref_url="https://www.suse.com/security/cve/CVE-2019-19646" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19646/">CVE-2019-19646</cve>
	<bugzilla href="https://bugzilla.suse.com/1158959">SUSE bug 1158959</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19746</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19746" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19746" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19746" ref_url="https://www.suse.com/security/cve/CVE-2019-19746" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2454-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009457.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1143-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LKD7IBCZKGMDHLZ7H4T5P7WTXHNFSOB6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1311-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PQ34JCCBYY5MVDLL7VGCWBOZKOQ5EXTK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1318-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4HYGTSDI2IQ34SYGQZGBYMH3NPMCAL2X/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2454-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RK4BRVCUPZKN5VS2JGWBPYITONWJCIZJ/" source="SUSE-SU"/>
    <description>
    make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19746/">CVE-2019-19746</cve>
	<bugzilla href="https://bugzilla.suse.com/1159130">SUSE bug 1159130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625872" comment="transfig-3.2.8a-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172240" comment="transfig is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19767</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19767" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19767" ref_url="https://www.suse.com/security/cve/CVE-2019-19767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19767/">CVE-2019-19767</cve>
	<bugzilla href="https://bugzilla.suse.com/1159297">SUSE bug 1159297</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19768</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19768" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19768" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19768" ref_url="https://www.suse.com/security/cve/CVE-2019-19768" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1085-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006753.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00039.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19768/">CVE-2019-19768</cve>
	<bugzilla href="https://bugzilla.suse.com/1159285">SUSE bug 1159285</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19769</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19769" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19769" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19769" ref_url="https://www.suse.com/security/cve/CVE-2019-19769" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008624.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1211-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0532-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZC652CKFCHQCNNU7MZKBTO27OZE22Q5U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0758-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BUQVIATUWQNZFSV6IFJENJSRWJSP2QHF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19769/">CVE-2019-19769</cve>
	<bugzilla href="https://bugzilla.suse.com/1159280">SUSE bug 1159280</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919770" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19770</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19770" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19770" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19770" ref_url="https://www.suse.com/security/cve/CVE-2019-19770" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1085-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006753.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006760.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0543-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00035.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19770/">CVE-2019-19770</cve>
	<bugzilla href="https://bugzilla.suse.com/1159198">SUSE bug 1159198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171295">SUSE bug 1171295</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19797</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19797" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19797" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19797" ref_url="https://www.suse.com/security/cve/CVE-2019-19797" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2454-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009457.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1143-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LKD7IBCZKGMDHLZ7H4T5P7WTXHNFSOB6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1311-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PQ34JCCBYY5MVDLL7VGCWBOZKOQ5EXTK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1318-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4HYGTSDI2IQ34SYGQZGBYMH3NPMCAL2X/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2454-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RK4BRVCUPZKN5VS2JGWBPYITONWJCIZJ/" source="SUSE-SU"/>
    <description>
    read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19797/">CVE-2019-19797</cve>
	<bugzilla href="https://bugzilla.suse.com/1159293">SUSE bug 1159293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625872" comment="transfig-3.2.8a-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172240" comment="transfig is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19807</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19807" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19807" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19807" ref_url="https://www.suse.com/security/cve/CVE-2019-19807" source="SUSE CVE"/>
    <description>
    In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. This is related to snd_timer_open and snd_timer_close_locked. The timeri variable was originally intended to be for a newly created timer instance, but was used for a different purpose after refactoring.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-18"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19807/">CVE-2019-19807</cve>
	<bugzilla href="https://bugzilla.suse.com/1159281">SUSE bug 1159281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919880" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19880</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19880" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19880" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19880" ref_url="https://www.suse.com/security/cve/CVE-2019-19880" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19880/">CVE-2019-19880</cve>
	<bugzilla href="https://bugzilla.suse.com/1159491">SUSE bug 1159491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159715">SUSE bug 1159715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919906" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19906</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19906" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19906" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19906" ref_url="https://www.suse.com/security/cve/CVE-2019-19906" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008126.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2471-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14579-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3939-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012519.html" source="SUSE-SU"/>
    <description>
    cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19906/">CVE-2019-19906</cve>
	<bugzilla href="https://bugzilla.suse.com/1159635">SUSE bug 1159635</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628396" comment="cyrus-sasl-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151195" comment="cyrus-sasl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628397" comment="cyrus-sasl-32bit-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177136" comment="cyrus-sasl-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628398" comment="cyrus-sasl-crammd5-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151196" comment="cyrus-sasl-crammd5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628399" comment="cyrus-sasl-crammd5-32bit-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177137" comment="cyrus-sasl-crammd5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628401" comment="cyrus-sasl-digestmd5-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151198" comment="cyrus-sasl-digestmd5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628402" comment="cyrus-sasl-digestmd5-32bit-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177138" comment="cyrus-sasl-digestmd5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628403" comment="cyrus-sasl-gssapi-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151199" comment="cyrus-sasl-gssapi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628404" comment="cyrus-sasl-gssapi-32bit-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177139" comment="cyrus-sasl-gssapi-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628406" comment="cyrus-sasl-plain-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151200" comment="cyrus-sasl-plain is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628407" comment="cyrus-sasl-plain-32bit-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177140" comment="cyrus-sasl-plain-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628408" comment="libsasl2-3-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151201" comment="libsasl2-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628409" comment="libsasl2-3-32bit-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151202" comment="libsasl2-3-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19922</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19922" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19922" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19922" ref_url="https://www.suse.com/security/cve/CVE-2019-19922" source="SUSE CVE"/>
    <description>
    kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by generating a workload that triggers unwanted slice expiration, aka CID-de53fd7aedb1. (In other words, although this slice expiration would typically be seen with benign workloads, it is possible that an attacker could calculate how many stray requests are required to force an entire Kubernetes cluster into a low-performance state caused by slice expiration, and ensure that a DDoS attack sent that number of stray requests. An attack does not affect the stability of the kernel; it only causes mismanagement of application execution.)
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19922/">CVE-2019-19922</cve>
	<bugzilla href="https://bugzilla.suse.com/1159717">SUSE bug 1159717</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919923" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19923</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19923" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19923" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19923" ref_url="https://www.suse.com/security/cve/CVE-2019-19923" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19923/">CVE-2019-19923</cve>
	<bugzilla href="https://bugzilla.suse.com/1160309">SUSE bug 1160309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919924" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19924</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19924" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19924" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19924" ref_url="https://www.suse.com/security/cve/CVE-2019-19924" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-19924/">CVE-2019-19924</cve>
	<bugzilla href="https://bugzilla.suse.com/1159850">SUSE bug 1159850</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919925" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19925</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19925" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19925" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19925" ref_url="https://www.suse.com/security/cve/CVE-2019-19925" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19925/">CVE-2019-19925</cve>
	<bugzilla href="https://bugzilla.suse.com/1159847">SUSE bug 1159847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919926" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19926</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19926" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19926" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19926" ref_url="https://www.suse.com/security/cve/CVE-2019-19926" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19926/">CVE-2019-19926</cve>
	<bugzilla href="https://bugzilla.suse.com/1159491">SUSE bug 1159491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159715">SUSE bug 1159715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19947</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19947" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19947" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19947" ref_url="https://www.suse.com/security/cve/CVE-2019-19947" source="SUSE CVE"/>
    <description>
    In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19947/">CVE-2019-19947</cve>
	<bugzilla href="https://bugzilla.suse.com/1159929">SUSE bug 1159929</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919948" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19948</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19948" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19948" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19948" ref_url="https://www.suse.com/security/cve/CVE-2019-19948" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006417.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006496.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0170-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00006.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19948/">CVE-2019-19948</cve>
	<bugzilla href="https://bugzilla.suse.com/1159861">SUSE bug 1159861</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919949" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19949</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19949" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19949" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19949" ref_url="https://www.suse.com/security/cve/CVE-2019-19949" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006417.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006496.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0170-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00006.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magick_png_write_raw_profile and LocaleNCompare.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-19949/">CVE-2019-19949</cve>
	<bugzilla href="https://bugzilla.suse.com/1160369">SUSE bug 1160369</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19956</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19956" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19956" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19956" ref_url="https://www.suse.com/security/cve/CVE-2019-19956" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006890.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006891.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007415.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1532-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007409.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008797.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0681-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-05/msg00124.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00005.html" source="SUSE-SU"/>
    <description>
    xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-&gt;oldNs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19956/">CVE-2019-19956</cve>
	<bugzilla href="https://bugzilla.suse.com/1159928">SUSE bug 1159928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191860">SUSE bug 1191860</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19959</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19959" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19959" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19959" ref_url="https://www.suse.com/security/cve/CVE-2019-19959" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19959/">CVE-2019-19959</cve>
	<bugzilla href="https://bugzilla.suse.com/1160438">SUSE bug 1160438</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19965</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19965" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19965" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19965" ref_url="https://www.suse.com/security/cve/CVE-2019-19965" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0558-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19965/">CVE-2019-19965</cve>
	<bugzilla href="https://bugzilla.suse.com/1159911">SUSE bug 1159911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201919977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-19977</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-19977" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19977" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-19977" ref_url="https://www.suse.com/security/cve/CVE-2019-19977" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:659-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009437.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:660-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-September/020142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009380.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2937-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009397.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2937-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009471.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1235-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HXOIPTG34E6FHFZ5MRT6B4BEC5ETU6ML/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2937-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TGZ4L5IPYNOJTWC7WZTAMPSFHIGKXQAE/" source="SUSE-SU"/>
    <description>
    libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19977/">CVE-2019-19977</cve>
	<bugzilla href="https://bugzilla.suse.com/1160462">SUSE bug 1160462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189097">SUSE bug 1189097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190329">SUSE bug 1190329</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191840">SUSE bug 1191840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192365">SUSE bug 1192365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193380">SUSE bug 1193380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193381">SUSE bug 1193381</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629426" comment="libesmtp-1.0.6-150.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632497" comment="libesmtp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629427" comment="libesmtp-devel-1.0.6-150.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632498" comment="libesmtp-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20005</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20005" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20005" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20005" ref_url="https://www.suse.com/security/cve/CVE-2019-20005" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009776.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3873-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009811.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1505-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q3FNQWDRSXZ7B45EGNO2YK4R6EGOPYN6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3804-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DM4S3HXSBD3QQY6J6J2S4KVWTO63OS7U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3805-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLIABFAMSFMQHHJZHXO7ZW2B6USV456X/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3815-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BNULBT7RBXXDXTGAFBIJZ4GX5T4OWM7O/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3873-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TRUN6AONIMN6NUO34LRB46EYI53X2XBI/" source="SUSE-SU"/>
    <description>
    An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to a heap-based buffer over-read while running strchr() starting with a pointer after a '\0' character (where the processing of a string was finished).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20005/">CVE-2019-20005</cve>
	<bugzilla href="https://bugzilla.suse.com/1191856">SUSE bug 1191856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657935" comment="libnetcdf-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658443" comment="libnetcdf-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657936" comment="libnetcdf-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658444" comment="libnetcdf-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657937" comment="libnetcdf-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658445" comment="libnetcdf-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657988" comment="libnetcdf-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658754" comment="libnetcdf-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657938" comment="libnetcdf-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658446" comment="libnetcdf-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657939" comment="libnetcdf-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658447" comment="libnetcdf-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657940" comment="libnetcdf-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658915" comment="libnetcdf-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658012" comment="libnetcdf13-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658252" comment="libnetcdf13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658013" comment="libnetcdf13-32bit-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658253" comment="libnetcdf13-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658014" comment="libnetcdf13-openmpi-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658254" comment="libnetcdf13-openmpi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658015" comment="libnetcdf13-openmpi-32bit-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658255" comment="libnetcdf13-openmpi-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657941" comment="libnetcdf18-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658916" comment="libnetcdf18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657942" comment="libnetcdf18-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658917" comment="libnetcdf18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657943" comment="libnetcdf18-openmpi2-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658918" comment="libnetcdf18-openmpi2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657944" comment="libnetcdf18-openmpi2-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658919" comment="libnetcdf18-openmpi2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657945" comment="libnetcdf18-openmpi3-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658920" comment="libnetcdf18-openmpi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657946" comment="libnetcdf18-openmpi3-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658921" comment="libnetcdf18-openmpi3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657947" comment="libnetcdf18-openmpi4-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658922" comment="libnetcdf18-openmpi4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657948" comment="libnetcdf18-openmpi4-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658923" comment="libnetcdf18-openmpi4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657989" comment="libnetcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658755" comment="libnetcdf_4_6_1-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657990" comment="libnetcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658756" comment="libnetcdf_4_6_1-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657991" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658757" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657992" comment="libnetcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658758" comment="libnetcdf_4_6_1-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657993" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658759" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657621" comment="libnetcdf_4_7_3-gnu-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658256" comment="libnetcdf_4_7_3-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657622" comment="libnetcdf_4_7_3-gnu-mpich-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658257" comment="libnetcdf_4_7_3-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657623" comment="libnetcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658258" comment="libnetcdf_4_7_3-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657624" comment="libnetcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658259" comment="libnetcdf_4_7_3-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657625" comment="libnetcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658260" comment="libnetcdf_4_7_3-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657949" comment="libnetcdf_4_7_4-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658924" comment="libnetcdf_4_7_4-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657950" comment="libnetcdf_4_7_4-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658925" comment="libnetcdf_4_7_4-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657951" comment="libnetcdf_4_7_4-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658926" comment="libnetcdf_4_7_4-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657952" comment="libnetcdf_4_7_4-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658927" comment="libnetcdf_4_7_4-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657953" comment="libnetcdf_4_7_4-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658928" comment="libnetcdf_4_7_4-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657954" comment="libnetcdf_4_7_4-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658929" comment="libnetcdf_4_7_4-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657955" comment="netcdf-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658930" comment="netcdf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657956" comment="netcdf-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658931" comment="netcdf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657957" comment="netcdf-devel-data-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658932" comment="netcdf-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657958" comment="netcdf-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658933" comment="netcdf-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657698" comment="netcdf-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658448" comment="netcdf-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657699" comment="netcdf-gnu-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658449" comment="netcdf-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657700" comment="netcdf-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658450" comment="netcdf-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657701" comment="netcdf-gnu-mpich-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658451" comment="netcdf-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657702" comment="netcdf-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658452" comment="netcdf-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657703" comment="netcdf-gnu-mvapich2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658453" comment="netcdf-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657994" comment="netcdf-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658760" comment="netcdf-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657995" comment="netcdf-gnu-openmpi1-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658761" comment="netcdf-gnu-openmpi1-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657959" comment="netcdf-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658454" comment="netcdf-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657960" comment="netcdf-gnu-openmpi2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658455" comment="netcdf-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657704" comment="netcdf-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658456" comment="netcdf-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657705" comment="netcdf-gnu-openmpi3-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658457" comment="netcdf-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657706" comment="netcdf-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658934" comment="netcdf-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657707" comment="netcdf-gnu-openmpi4-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658935" comment="netcdf-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658016" comment="netcdf-openmpi-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658261" comment="netcdf-openmpi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658017" comment="netcdf-openmpi-devel-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658262" comment="netcdf-openmpi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658018" comment="netcdf-openmpi-devel-data-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658263" comment="netcdf-openmpi-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658019" comment="netcdf-openmpi-devel-static-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658264" comment="netcdf-openmpi-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657961" comment="netcdf-openmpi2-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658936" comment="netcdf-openmpi2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657962" comment="netcdf-openmpi2-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658937" comment="netcdf-openmpi2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657963" comment="netcdf-openmpi2-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658938" comment="netcdf-openmpi2-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657964" comment="netcdf-openmpi3-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658939" comment="netcdf-openmpi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657965" comment="netcdf-openmpi3-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658940" comment="netcdf-openmpi3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657966" comment="netcdf-openmpi3-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658941" comment="netcdf-openmpi3-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657967" comment="netcdf-openmpi4-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658942" comment="netcdf-openmpi4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657968" comment="netcdf-openmpi4-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658943" comment="netcdf-openmpi4-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657969" comment="netcdf-openmpi4-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658944" comment="netcdf-openmpi4-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657996" comment="netcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658762" comment="netcdf_4_6_1-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657997" comment="netcdf_4_6_1-gnu-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658763" comment="netcdf_4_6_1-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657998" comment="netcdf_4_6_1-gnu-hpc-devel-data-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658764" comment="netcdf_4_6_1-gnu-hpc-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657999" comment="netcdf_4_6_1-gnu-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658765" comment="netcdf_4_6_1-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658000" comment="netcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658766" comment="netcdf_4_6_1-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658001" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658767" comment="netcdf_4_6_1-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658002" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658768" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658003" comment="netcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658769" comment="netcdf_4_6_1-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658004" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658770" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658005" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658771" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658006" comment="netcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658772" comment="netcdf_4_6_1-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658007" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658773" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658008" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658774" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658009" comment="netcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658775" comment="netcdf_4_6_1-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658010" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658776" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658011" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658777" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657626" comment="netcdf_4_7_3-gnu-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658265" comment="netcdf_4_7_3-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657627" comment="netcdf_4_7_3-gnu-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658266" comment="netcdf_4_7_3-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657628" comment="netcdf_4_7_3-gnu-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658267" comment="netcdf_4_7_3-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657629" comment="netcdf_4_7_3-gnu-mpich-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658268" comment="netcdf_4_7_3-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657630" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658269" comment="netcdf_4_7_3-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657631" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658270" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657632" comment="netcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658271" comment="netcdf_4_7_3-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657633" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658272" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657634" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658273" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657635" comment="netcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658274" comment="netcdf_4_7_3-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657636" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658275" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657637" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658276" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657638" comment="netcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658277" comment="netcdf_4_7_3-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657639" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658278" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657640" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658279" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657970" comment="netcdf_4_7_4-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658945" comment="netcdf_4_7_4-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657971" comment="netcdf_4_7_4-gnu-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658946" comment="netcdf_4_7_4-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657972" comment="netcdf_4_7_4-gnu-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658947" comment="netcdf_4_7_4-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657973" comment="netcdf_4_7_4-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658948" comment="netcdf_4_7_4-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657974" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658949" comment="netcdf_4_7_4-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657975" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658950" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657976" comment="netcdf_4_7_4-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658951" comment="netcdf_4_7_4-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657977" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658952" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657978" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658953" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657979" comment="netcdf_4_7_4-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658954" comment="netcdf_4_7_4-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657980" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658955" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657981" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658956" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657982" comment="netcdf_4_7_4-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658957" comment="netcdf_4_7_4-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657983" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658958" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657984" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658959" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657985" comment="netcdf_4_7_4-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658960" comment="netcdf_4_7_4-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657986" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658961" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657987" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658962" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920006" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20006</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20006" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20006" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20006" ref_url="https://www.suse.com/security/cve/CVE-2019-20006" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009776.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3873-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009811.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1505-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q3FNQWDRSXZ7B45EGNO2YK4R6EGOPYN6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3804-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DM4S3HXSBD3QQY6J6J2S4KVWTO63OS7U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3805-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLIABFAMSFMQHHJZHXO7ZW2B6USV456X/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3815-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BNULBT7RBXXDXTGAFBIJZ4GX5T4OWM7O/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3873-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TRUN6AONIMN6NUO34LRB46EYI53X2XBI/" source="SUSE-SU"/>
    <description>
    An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content puts a pointer to the internal address of a larger block as xml-&gt;txt. This is later deallocated (using free), leading to a segmentation fault.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20006/">CVE-2019-20006</cve>
	<bugzilla href="https://bugzilla.suse.com/1191856">SUSE bug 1191856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657935" comment="libnetcdf-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658443" comment="libnetcdf-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657936" comment="libnetcdf-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658444" comment="libnetcdf-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657937" comment="libnetcdf-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658445" comment="libnetcdf-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657988" comment="libnetcdf-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658754" comment="libnetcdf-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657938" comment="libnetcdf-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658446" comment="libnetcdf-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657939" comment="libnetcdf-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658447" comment="libnetcdf-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657940" comment="libnetcdf-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658915" comment="libnetcdf-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658012" comment="libnetcdf13-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658252" comment="libnetcdf13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658013" comment="libnetcdf13-32bit-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658253" comment="libnetcdf13-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658014" comment="libnetcdf13-openmpi-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658254" comment="libnetcdf13-openmpi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658015" comment="libnetcdf13-openmpi-32bit-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658255" comment="libnetcdf13-openmpi-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657941" comment="libnetcdf18-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658916" comment="libnetcdf18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657942" comment="libnetcdf18-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658917" comment="libnetcdf18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657943" comment="libnetcdf18-openmpi2-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658918" comment="libnetcdf18-openmpi2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657944" comment="libnetcdf18-openmpi2-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658919" comment="libnetcdf18-openmpi2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657945" comment="libnetcdf18-openmpi3-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658920" comment="libnetcdf18-openmpi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657946" comment="libnetcdf18-openmpi3-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658921" comment="libnetcdf18-openmpi3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657947" comment="libnetcdf18-openmpi4-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658922" comment="libnetcdf18-openmpi4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657948" comment="libnetcdf18-openmpi4-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658923" comment="libnetcdf18-openmpi4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657989" comment="libnetcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658755" comment="libnetcdf_4_6_1-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657990" comment="libnetcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658756" comment="libnetcdf_4_6_1-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657991" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658757" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657992" comment="libnetcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658758" comment="libnetcdf_4_6_1-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657993" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658759" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657621" comment="libnetcdf_4_7_3-gnu-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658256" comment="libnetcdf_4_7_3-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657622" comment="libnetcdf_4_7_3-gnu-mpich-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658257" comment="libnetcdf_4_7_3-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657623" comment="libnetcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658258" comment="libnetcdf_4_7_3-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657624" comment="libnetcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658259" comment="libnetcdf_4_7_3-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657625" comment="libnetcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658260" comment="libnetcdf_4_7_3-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657949" comment="libnetcdf_4_7_4-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658924" comment="libnetcdf_4_7_4-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657950" comment="libnetcdf_4_7_4-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658925" comment="libnetcdf_4_7_4-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657951" comment="libnetcdf_4_7_4-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658926" comment="libnetcdf_4_7_4-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657952" comment="libnetcdf_4_7_4-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658927" comment="libnetcdf_4_7_4-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657953" comment="libnetcdf_4_7_4-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658928" comment="libnetcdf_4_7_4-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657954" comment="libnetcdf_4_7_4-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658929" comment="libnetcdf_4_7_4-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657955" comment="netcdf-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658930" comment="netcdf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657956" comment="netcdf-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658931" comment="netcdf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657957" comment="netcdf-devel-data-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658932" comment="netcdf-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657958" comment="netcdf-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658933" comment="netcdf-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657698" comment="netcdf-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658448" comment="netcdf-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657699" comment="netcdf-gnu-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658449" comment="netcdf-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657700" comment="netcdf-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658450" comment="netcdf-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657701" comment="netcdf-gnu-mpich-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658451" comment="netcdf-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657702" comment="netcdf-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658452" comment="netcdf-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657703" comment="netcdf-gnu-mvapich2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658453" comment="netcdf-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657994" comment="netcdf-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658760" comment="netcdf-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657995" comment="netcdf-gnu-openmpi1-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658761" comment="netcdf-gnu-openmpi1-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657959" comment="netcdf-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658454" comment="netcdf-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657960" comment="netcdf-gnu-openmpi2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658455" comment="netcdf-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657704" comment="netcdf-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658456" comment="netcdf-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657705" comment="netcdf-gnu-openmpi3-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658457" comment="netcdf-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657706" comment="netcdf-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658934" comment="netcdf-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657707" comment="netcdf-gnu-openmpi4-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658935" comment="netcdf-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658016" comment="netcdf-openmpi-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658261" comment="netcdf-openmpi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658017" comment="netcdf-openmpi-devel-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658262" comment="netcdf-openmpi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658018" comment="netcdf-openmpi-devel-data-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658263" comment="netcdf-openmpi-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658019" comment="netcdf-openmpi-devel-static-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658264" comment="netcdf-openmpi-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657961" comment="netcdf-openmpi2-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658936" comment="netcdf-openmpi2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657962" comment="netcdf-openmpi2-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658937" comment="netcdf-openmpi2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657963" comment="netcdf-openmpi2-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658938" comment="netcdf-openmpi2-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657964" comment="netcdf-openmpi3-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658939" comment="netcdf-openmpi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657965" comment="netcdf-openmpi3-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658940" comment="netcdf-openmpi3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657966" comment="netcdf-openmpi3-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658941" comment="netcdf-openmpi3-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657967" comment="netcdf-openmpi4-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658942" comment="netcdf-openmpi4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657968" comment="netcdf-openmpi4-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658943" comment="netcdf-openmpi4-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657969" comment="netcdf-openmpi4-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658944" comment="netcdf-openmpi4-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657996" comment="netcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658762" comment="netcdf_4_6_1-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657997" comment="netcdf_4_6_1-gnu-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658763" comment="netcdf_4_6_1-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657998" comment="netcdf_4_6_1-gnu-hpc-devel-data-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658764" comment="netcdf_4_6_1-gnu-hpc-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657999" comment="netcdf_4_6_1-gnu-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658765" comment="netcdf_4_6_1-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658000" comment="netcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658766" comment="netcdf_4_6_1-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658001" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658767" comment="netcdf_4_6_1-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658002" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658768" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658003" comment="netcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658769" comment="netcdf_4_6_1-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658004" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658770" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658005" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658771" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658006" comment="netcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658772" comment="netcdf_4_6_1-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658007" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658773" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658008" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658774" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658009" comment="netcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658775" comment="netcdf_4_6_1-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658010" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658776" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658011" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658777" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657626" comment="netcdf_4_7_3-gnu-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658265" comment="netcdf_4_7_3-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657627" comment="netcdf_4_7_3-gnu-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658266" comment="netcdf_4_7_3-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657628" comment="netcdf_4_7_3-gnu-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658267" comment="netcdf_4_7_3-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657629" comment="netcdf_4_7_3-gnu-mpich-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658268" comment="netcdf_4_7_3-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657630" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658269" comment="netcdf_4_7_3-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657631" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658270" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657632" comment="netcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658271" comment="netcdf_4_7_3-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657633" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658272" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657634" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658273" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657635" comment="netcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658274" comment="netcdf_4_7_3-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657636" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658275" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657637" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658276" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657638" comment="netcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658277" comment="netcdf_4_7_3-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657639" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658278" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657640" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658279" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657970" comment="netcdf_4_7_4-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658945" comment="netcdf_4_7_4-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657971" comment="netcdf_4_7_4-gnu-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658946" comment="netcdf_4_7_4-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657972" comment="netcdf_4_7_4-gnu-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658947" comment="netcdf_4_7_4-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657973" comment="netcdf_4_7_4-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658948" comment="netcdf_4_7_4-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657974" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658949" comment="netcdf_4_7_4-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657975" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658950" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657976" comment="netcdf_4_7_4-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658951" comment="netcdf_4_7_4-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657977" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658952" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657978" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658953" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657979" comment="netcdf_4_7_4-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658954" comment="netcdf_4_7_4-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657980" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658955" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657981" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658956" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657982" comment="netcdf_4_7_4-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658957" comment="netcdf_4_7_4-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657983" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658958" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657984" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658959" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657985" comment="netcdf_4_7_4-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658960" comment="netcdf_4_7_4-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657986" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658961" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657987" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658962" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920007" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20007</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20007" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20007" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20007" ref_url="https://www.suse.com/security/cve/CVE-2019-20007" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009776.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3873-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009811.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1505-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q3FNQWDRSXZ7B45EGNO2YK4R6EGOPYN6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3804-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DM4S3HXSBD3QQY6J6J2S4KVWTO63OS7U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3805-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLIABFAMSFMQHHJZHXO7ZW2B6USV456X/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3815-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BNULBT7RBXXDXTGAFBIJZ4GX5T4OWM7O/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3873-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TRUN6AONIMN6NUO34LRB46EYI53X2XBI/" source="SUSE-SU"/>
    <description>
    An issue was discovered in ezXML 0.8.2 through 0.8.6. The function ezxml_str2utf8, while parsing a crafted XML file, performs zero-length reallocation in ezxml.c, leading to returning a NULL pointer (in some compilers). After this, the function ezxml_parse_str does not check whether the s variable is not NULL in ezxml.c, leading to a NULL pointer dereference and crash (segmentation fault).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20007/">CVE-2019-20007</cve>
	<bugzilla href="https://bugzilla.suse.com/1191856">SUSE bug 1191856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657935" comment="libnetcdf-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658443" comment="libnetcdf-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657936" comment="libnetcdf-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658444" comment="libnetcdf-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657937" comment="libnetcdf-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658445" comment="libnetcdf-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657988" comment="libnetcdf-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658754" comment="libnetcdf-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657938" comment="libnetcdf-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658446" comment="libnetcdf-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657939" comment="libnetcdf-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658447" comment="libnetcdf-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657940" comment="libnetcdf-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658915" comment="libnetcdf-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658012" comment="libnetcdf13-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658252" comment="libnetcdf13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658013" comment="libnetcdf13-32bit-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658253" comment="libnetcdf13-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658014" comment="libnetcdf13-openmpi-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658254" comment="libnetcdf13-openmpi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658015" comment="libnetcdf13-openmpi-32bit-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658255" comment="libnetcdf13-openmpi-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657941" comment="libnetcdf18-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658916" comment="libnetcdf18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657942" comment="libnetcdf18-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658917" comment="libnetcdf18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657943" comment="libnetcdf18-openmpi2-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658918" comment="libnetcdf18-openmpi2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657944" comment="libnetcdf18-openmpi2-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658919" comment="libnetcdf18-openmpi2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657945" comment="libnetcdf18-openmpi3-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658920" comment="libnetcdf18-openmpi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657946" comment="libnetcdf18-openmpi3-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658921" comment="libnetcdf18-openmpi3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657947" comment="libnetcdf18-openmpi4-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658922" comment="libnetcdf18-openmpi4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657948" comment="libnetcdf18-openmpi4-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658923" comment="libnetcdf18-openmpi4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657989" comment="libnetcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658755" comment="libnetcdf_4_6_1-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657990" comment="libnetcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658756" comment="libnetcdf_4_6_1-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657991" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658757" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657992" comment="libnetcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658758" comment="libnetcdf_4_6_1-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657993" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658759" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657621" comment="libnetcdf_4_7_3-gnu-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658256" comment="libnetcdf_4_7_3-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657622" comment="libnetcdf_4_7_3-gnu-mpich-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658257" comment="libnetcdf_4_7_3-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657623" comment="libnetcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658258" comment="libnetcdf_4_7_3-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657624" comment="libnetcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658259" comment="libnetcdf_4_7_3-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657625" comment="libnetcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658260" comment="libnetcdf_4_7_3-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657949" comment="libnetcdf_4_7_4-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658924" comment="libnetcdf_4_7_4-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657950" comment="libnetcdf_4_7_4-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658925" comment="libnetcdf_4_7_4-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657951" comment="libnetcdf_4_7_4-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658926" comment="libnetcdf_4_7_4-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657952" comment="libnetcdf_4_7_4-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658927" comment="libnetcdf_4_7_4-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657953" comment="libnetcdf_4_7_4-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658928" comment="libnetcdf_4_7_4-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657954" comment="libnetcdf_4_7_4-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658929" comment="libnetcdf_4_7_4-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657955" comment="netcdf-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658930" comment="netcdf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657956" comment="netcdf-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658931" comment="netcdf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657957" comment="netcdf-devel-data-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658932" comment="netcdf-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657958" comment="netcdf-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658933" comment="netcdf-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657698" comment="netcdf-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658448" comment="netcdf-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657699" comment="netcdf-gnu-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658449" comment="netcdf-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657700" comment="netcdf-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658450" comment="netcdf-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657701" comment="netcdf-gnu-mpich-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658451" comment="netcdf-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657702" comment="netcdf-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658452" comment="netcdf-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657703" comment="netcdf-gnu-mvapich2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658453" comment="netcdf-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657994" comment="netcdf-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658760" comment="netcdf-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657995" comment="netcdf-gnu-openmpi1-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658761" comment="netcdf-gnu-openmpi1-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657959" comment="netcdf-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658454" comment="netcdf-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657960" comment="netcdf-gnu-openmpi2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658455" comment="netcdf-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657704" comment="netcdf-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658456" comment="netcdf-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657705" comment="netcdf-gnu-openmpi3-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658457" comment="netcdf-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657706" comment="netcdf-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658934" comment="netcdf-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657707" comment="netcdf-gnu-openmpi4-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658935" comment="netcdf-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658016" comment="netcdf-openmpi-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658261" comment="netcdf-openmpi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658017" comment="netcdf-openmpi-devel-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658262" comment="netcdf-openmpi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658018" comment="netcdf-openmpi-devel-data-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658263" comment="netcdf-openmpi-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658019" comment="netcdf-openmpi-devel-static-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658264" comment="netcdf-openmpi-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657961" comment="netcdf-openmpi2-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658936" comment="netcdf-openmpi2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657962" comment="netcdf-openmpi2-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658937" comment="netcdf-openmpi2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657963" comment="netcdf-openmpi2-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658938" comment="netcdf-openmpi2-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657964" comment="netcdf-openmpi3-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658939" comment="netcdf-openmpi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657965" comment="netcdf-openmpi3-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658940" comment="netcdf-openmpi3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657966" comment="netcdf-openmpi3-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658941" comment="netcdf-openmpi3-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657967" comment="netcdf-openmpi4-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658942" comment="netcdf-openmpi4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657968" comment="netcdf-openmpi4-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658943" comment="netcdf-openmpi4-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657969" comment="netcdf-openmpi4-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658944" comment="netcdf-openmpi4-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657996" comment="netcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658762" comment="netcdf_4_6_1-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657997" comment="netcdf_4_6_1-gnu-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658763" comment="netcdf_4_6_1-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657998" comment="netcdf_4_6_1-gnu-hpc-devel-data-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658764" comment="netcdf_4_6_1-gnu-hpc-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657999" comment="netcdf_4_6_1-gnu-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658765" comment="netcdf_4_6_1-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658000" comment="netcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658766" comment="netcdf_4_6_1-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658001" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658767" comment="netcdf_4_6_1-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658002" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658768" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658003" comment="netcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658769" comment="netcdf_4_6_1-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658004" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658770" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658005" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658771" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658006" comment="netcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658772" comment="netcdf_4_6_1-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658007" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658773" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658008" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658774" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658009" comment="netcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658775" comment="netcdf_4_6_1-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658010" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658776" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658011" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658777" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657626" comment="netcdf_4_7_3-gnu-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658265" comment="netcdf_4_7_3-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657627" comment="netcdf_4_7_3-gnu-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658266" comment="netcdf_4_7_3-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657628" comment="netcdf_4_7_3-gnu-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658267" comment="netcdf_4_7_3-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657629" comment="netcdf_4_7_3-gnu-mpich-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658268" comment="netcdf_4_7_3-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657630" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658269" comment="netcdf_4_7_3-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657631" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658270" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657632" comment="netcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658271" comment="netcdf_4_7_3-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657633" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658272" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657634" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658273" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657635" comment="netcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658274" comment="netcdf_4_7_3-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657636" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658275" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657637" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658276" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657638" comment="netcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658277" comment="netcdf_4_7_3-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657639" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658278" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657640" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658279" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657970" comment="netcdf_4_7_4-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658945" comment="netcdf_4_7_4-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657971" comment="netcdf_4_7_4-gnu-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658946" comment="netcdf_4_7_4-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657972" comment="netcdf_4_7_4-gnu-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658947" comment="netcdf_4_7_4-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657973" comment="netcdf_4_7_4-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658948" comment="netcdf_4_7_4-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657974" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658949" comment="netcdf_4_7_4-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657975" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658950" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657976" comment="netcdf_4_7_4-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658951" comment="netcdf_4_7_4-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657977" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658952" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657978" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658953" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657979" comment="netcdf_4_7_4-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658954" comment="netcdf_4_7_4-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657980" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658955" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657981" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658956" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657982" comment="netcdf_4_7_4-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658957" comment="netcdf_4_7_4-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657983" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658958" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657984" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658959" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657985" comment="netcdf_4_7_4-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658960" comment="netcdf_4_7_4-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657986" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658961" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657987" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658962" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20044</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20044" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20044" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20044" ref_url="https://www.suse.com/security/cve/CVE-2019-20044" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0732-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010436.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0735-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BYQO6XCA5HFPKOF2ANXLGSZGFT63LHPA/" source="SUSE-SU"/>
    <description>
    In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-20044/">CVE-2019-20044</cve>
	<bugzilla href="https://bugzilla.suse.com/1163882">SUSE bug 1163882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200039">SUSE bug 1200039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200202">SUSE bug 1200202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200209">SUSE bug 1200209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670453" comment="zsh-5.6-7.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251907" comment="zsh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670572" comment="zsh-htmldoc-5.6-7.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251908" comment="zsh-htmldoc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20093</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20093" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20093" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20093" ref_url="https://www.suse.com/security/cve/CVE-2019-20093" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011034.html" source="SUSE-SU"/>
    <description>
    The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20093/">CVE-2019-20093</cve>
	<bugzilla href="https://bugzilla.suse.com/1159921">SUSE bug 1159921</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680692" comment="libpodofo-devel-0.9.6-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243194" comment="libpodofo-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680693" comment="libpodofo0_9_6-0.9.6-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243195" comment="libpodofo0_9_6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680694" comment="podofo-0.9.6-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243196" comment="podofo is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20198</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20198" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20198" ref_url="https://www.suse.com/security/cve/CVE-2019-20198" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009776.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3873-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009811.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1505-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q3FNQWDRSXZ7B45EGNO2YK4R6EGOPYN6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3804-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DM4S3HXSBD3QQY6J6J2S4KVWTO63OS7U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3805-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLIABFAMSFMQHHJZHXO7ZW2B6USV456X/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3815-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BNULBT7RBXXDXTGAFBIJZ4GX5T4OWM7O/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3873-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TRUN6AONIMN6NUO34LRB46EYI53X2XBI/" source="SUSE-SU"/>
    <description>
    An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_ent_ok() mishandles recursion, leading to stack consumption for a crafted XML file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20198/">CVE-2019-20198</cve>
	<bugzilla href="https://bugzilla.suse.com/1191856">SUSE bug 1191856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657935" comment="libnetcdf-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658443" comment="libnetcdf-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657936" comment="libnetcdf-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658444" comment="libnetcdf-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657937" comment="libnetcdf-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658445" comment="libnetcdf-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657988" comment="libnetcdf-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658754" comment="libnetcdf-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657938" comment="libnetcdf-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658446" comment="libnetcdf-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657939" comment="libnetcdf-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658447" comment="libnetcdf-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657940" comment="libnetcdf-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658915" comment="libnetcdf-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658012" comment="libnetcdf13-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658252" comment="libnetcdf13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658013" comment="libnetcdf13-32bit-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658253" comment="libnetcdf13-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658014" comment="libnetcdf13-openmpi-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658254" comment="libnetcdf13-openmpi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658015" comment="libnetcdf13-openmpi-32bit-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658255" comment="libnetcdf13-openmpi-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657941" comment="libnetcdf18-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658916" comment="libnetcdf18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657942" comment="libnetcdf18-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658917" comment="libnetcdf18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657943" comment="libnetcdf18-openmpi2-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658918" comment="libnetcdf18-openmpi2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657944" comment="libnetcdf18-openmpi2-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658919" comment="libnetcdf18-openmpi2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657945" comment="libnetcdf18-openmpi3-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658920" comment="libnetcdf18-openmpi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657946" comment="libnetcdf18-openmpi3-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658921" comment="libnetcdf18-openmpi3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657947" comment="libnetcdf18-openmpi4-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658922" comment="libnetcdf18-openmpi4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657948" comment="libnetcdf18-openmpi4-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658923" comment="libnetcdf18-openmpi4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657989" comment="libnetcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658755" comment="libnetcdf_4_6_1-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657990" comment="libnetcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658756" comment="libnetcdf_4_6_1-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657991" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658757" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657992" comment="libnetcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658758" comment="libnetcdf_4_6_1-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657993" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658759" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657621" comment="libnetcdf_4_7_3-gnu-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658256" comment="libnetcdf_4_7_3-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657622" comment="libnetcdf_4_7_3-gnu-mpich-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658257" comment="libnetcdf_4_7_3-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657623" comment="libnetcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658258" comment="libnetcdf_4_7_3-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657624" comment="libnetcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658259" comment="libnetcdf_4_7_3-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657625" comment="libnetcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658260" comment="libnetcdf_4_7_3-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657949" comment="libnetcdf_4_7_4-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658924" comment="libnetcdf_4_7_4-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657950" comment="libnetcdf_4_7_4-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658925" comment="libnetcdf_4_7_4-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657951" comment="libnetcdf_4_7_4-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658926" comment="libnetcdf_4_7_4-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657952" comment="libnetcdf_4_7_4-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658927" comment="libnetcdf_4_7_4-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657953" comment="libnetcdf_4_7_4-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658928" comment="libnetcdf_4_7_4-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657954" comment="libnetcdf_4_7_4-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658929" comment="libnetcdf_4_7_4-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657955" comment="netcdf-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658930" comment="netcdf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657956" comment="netcdf-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658931" comment="netcdf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657957" comment="netcdf-devel-data-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658932" comment="netcdf-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657958" comment="netcdf-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658933" comment="netcdf-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657698" comment="netcdf-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658448" comment="netcdf-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657699" comment="netcdf-gnu-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658449" comment="netcdf-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657700" comment="netcdf-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658450" comment="netcdf-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657701" comment="netcdf-gnu-mpich-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658451" comment="netcdf-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657702" comment="netcdf-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658452" comment="netcdf-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657703" comment="netcdf-gnu-mvapich2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658453" comment="netcdf-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657994" comment="netcdf-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658760" comment="netcdf-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657995" comment="netcdf-gnu-openmpi1-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658761" comment="netcdf-gnu-openmpi1-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657959" comment="netcdf-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658454" comment="netcdf-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657960" comment="netcdf-gnu-openmpi2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658455" comment="netcdf-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657704" comment="netcdf-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658456" comment="netcdf-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657705" comment="netcdf-gnu-openmpi3-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658457" comment="netcdf-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657706" comment="netcdf-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658934" comment="netcdf-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657707" comment="netcdf-gnu-openmpi4-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658935" comment="netcdf-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658016" comment="netcdf-openmpi-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658261" comment="netcdf-openmpi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658017" comment="netcdf-openmpi-devel-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658262" comment="netcdf-openmpi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658018" comment="netcdf-openmpi-devel-data-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658263" comment="netcdf-openmpi-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658019" comment="netcdf-openmpi-devel-static-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658264" comment="netcdf-openmpi-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657961" comment="netcdf-openmpi2-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658936" comment="netcdf-openmpi2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657962" comment="netcdf-openmpi2-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658937" comment="netcdf-openmpi2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657963" comment="netcdf-openmpi2-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658938" comment="netcdf-openmpi2-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657964" comment="netcdf-openmpi3-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658939" comment="netcdf-openmpi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657965" comment="netcdf-openmpi3-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658940" comment="netcdf-openmpi3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657966" comment="netcdf-openmpi3-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658941" comment="netcdf-openmpi3-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657967" comment="netcdf-openmpi4-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658942" comment="netcdf-openmpi4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657968" comment="netcdf-openmpi4-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658943" comment="netcdf-openmpi4-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657969" comment="netcdf-openmpi4-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658944" comment="netcdf-openmpi4-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657996" comment="netcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658762" comment="netcdf_4_6_1-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657997" comment="netcdf_4_6_1-gnu-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658763" comment="netcdf_4_6_1-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657998" comment="netcdf_4_6_1-gnu-hpc-devel-data-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658764" comment="netcdf_4_6_1-gnu-hpc-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657999" comment="netcdf_4_6_1-gnu-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658765" comment="netcdf_4_6_1-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658000" comment="netcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658766" comment="netcdf_4_6_1-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658001" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658767" comment="netcdf_4_6_1-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658002" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658768" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658003" comment="netcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658769" comment="netcdf_4_6_1-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658004" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658770" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658005" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658771" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658006" comment="netcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658772" comment="netcdf_4_6_1-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658007" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658773" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658008" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658774" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658009" comment="netcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658775" comment="netcdf_4_6_1-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658010" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658776" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658011" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658777" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657626" comment="netcdf_4_7_3-gnu-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658265" comment="netcdf_4_7_3-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657627" comment="netcdf_4_7_3-gnu-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658266" comment="netcdf_4_7_3-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657628" comment="netcdf_4_7_3-gnu-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658267" comment="netcdf_4_7_3-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657629" comment="netcdf_4_7_3-gnu-mpich-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658268" comment="netcdf_4_7_3-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657630" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658269" comment="netcdf_4_7_3-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657631" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658270" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657632" comment="netcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658271" comment="netcdf_4_7_3-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657633" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658272" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657634" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658273" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657635" comment="netcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658274" comment="netcdf_4_7_3-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657636" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658275" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657637" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658276" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657638" comment="netcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658277" comment="netcdf_4_7_3-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657639" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658278" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657640" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658279" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657970" comment="netcdf_4_7_4-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658945" comment="netcdf_4_7_4-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657971" comment="netcdf_4_7_4-gnu-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658946" comment="netcdf_4_7_4-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657972" comment="netcdf_4_7_4-gnu-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658947" comment="netcdf_4_7_4-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657973" comment="netcdf_4_7_4-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658948" comment="netcdf_4_7_4-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657974" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658949" comment="netcdf_4_7_4-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657975" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658950" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657976" comment="netcdf_4_7_4-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658951" comment="netcdf_4_7_4-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657977" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658952" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657978" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658953" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657979" comment="netcdf_4_7_4-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658954" comment="netcdf_4_7_4-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657980" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658955" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657981" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658956" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657982" comment="netcdf_4_7_4-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658957" comment="netcdf_4_7_4-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657983" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658958" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657984" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658959" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657985" comment="netcdf_4_7_4-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658960" comment="netcdf_4_7_4-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657986" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658961" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657987" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658962" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20199</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20199" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20199" ref_url="https://www.suse.com/security/cve/CVE-2019-20199" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009776.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3873-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009811.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1505-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q3FNQWDRSXZ7B45EGNO2YK4R6EGOPYN6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3804-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DM4S3HXSBD3QQY6J6J2S4KVWTO63OS7U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3805-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLIABFAMSFMQHHJZHXO7ZW2B6USV456X/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3815-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BNULBT7RBXXDXTGAFBIJZ4GX5T4OWM7O/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3873-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TRUN6AONIMN6NUO34LRB46EYI53X2XBI/" source="SUSE-SU"/>
    <description>
    An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while running strlen() on a NULL pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20199/">CVE-2019-20199</cve>
	<bugzilla href="https://bugzilla.suse.com/1191856">SUSE bug 1191856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657935" comment="libnetcdf-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658443" comment="libnetcdf-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657936" comment="libnetcdf-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658444" comment="libnetcdf-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657937" comment="libnetcdf-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658445" comment="libnetcdf-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657988" comment="libnetcdf-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658754" comment="libnetcdf-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657938" comment="libnetcdf-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658446" comment="libnetcdf-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657939" comment="libnetcdf-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658447" comment="libnetcdf-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657940" comment="libnetcdf-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658915" comment="libnetcdf-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658012" comment="libnetcdf13-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658252" comment="libnetcdf13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658013" comment="libnetcdf13-32bit-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658253" comment="libnetcdf13-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658014" comment="libnetcdf13-openmpi-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658254" comment="libnetcdf13-openmpi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658015" comment="libnetcdf13-openmpi-32bit-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658255" comment="libnetcdf13-openmpi-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657941" comment="libnetcdf18-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658916" comment="libnetcdf18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657942" comment="libnetcdf18-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658917" comment="libnetcdf18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657943" comment="libnetcdf18-openmpi2-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658918" comment="libnetcdf18-openmpi2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657944" comment="libnetcdf18-openmpi2-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658919" comment="libnetcdf18-openmpi2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657945" comment="libnetcdf18-openmpi3-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658920" comment="libnetcdf18-openmpi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657946" comment="libnetcdf18-openmpi3-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658921" comment="libnetcdf18-openmpi3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657947" comment="libnetcdf18-openmpi4-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658922" comment="libnetcdf18-openmpi4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657948" comment="libnetcdf18-openmpi4-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658923" comment="libnetcdf18-openmpi4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657989" comment="libnetcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658755" comment="libnetcdf_4_6_1-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657990" comment="libnetcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658756" comment="libnetcdf_4_6_1-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657991" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658757" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657992" comment="libnetcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658758" comment="libnetcdf_4_6_1-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657993" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658759" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657621" comment="libnetcdf_4_7_3-gnu-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658256" comment="libnetcdf_4_7_3-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657622" comment="libnetcdf_4_7_3-gnu-mpich-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658257" comment="libnetcdf_4_7_3-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657623" comment="libnetcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658258" comment="libnetcdf_4_7_3-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657624" comment="libnetcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658259" comment="libnetcdf_4_7_3-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657625" comment="libnetcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658260" comment="libnetcdf_4_7_3-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657949" comment="libnetcdf_4_7_4-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658924" comment="libnetcdf_4_7_4-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657950" comment="libnetcdf_4_7_4-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658925" comment="libnetcdf_4_7_4-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657951" comment="libnetcdf_4_7_4-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658926" comment="libnetcdf_4_7_4-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657952" comment="libnetcdf_4_7_4-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658927" comment="libnetcdf_4_7_4-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657953" comment="libnetcdf_4_7_4-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658928" comment="libnetcdf_4_7_4-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657954" comment="libnetcdf_4_7_4-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658929" comment="libnetcdf_4_7_4-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657955" comment="netcdf-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658930" comment="netcdf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657956" comment="netcdf-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658931" comment="netcdf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657957" comment="netcdf-devel-data-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658932" comment="netcdf-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657958" comment="netcdf-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658933" comment="netcdf-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657698" comment="netcdf-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658448" comment="netcdf-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657699" comment="netcdf-gnu-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658449" comment="netcdf-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657700" comment="netcdf-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658450" comment="netcdf-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657701" comment="netcdf-gnu-mpich-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658451" comment="netcdf-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657702" comment="netcdf-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658452" comment="netcdf-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657703" comment="netcdf-gnu-mvapich2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658453" comment="netcdf-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657994" comment="netcdf-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658760" comment="netcdf-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657995" comment="netcdf-gnu-openmpi1-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658761" comment="netcdf-gnu-openmpi1-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657959" comment="netcdf-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658454" comment="netcdf-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657960" comment="netcdf-gnu-openmpi2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658455" comment="netcdf-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657704" comment="netcdf-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658456" comment="netcdf-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657705" comment="netcdf-gnu-openmpi3-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658457" comment="netcdf-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657706" comment="netcdf-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658934" comment="netcdf-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657707" comment="netcdf-gnu-openmpi4-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658935" comment="netcdf-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658016" comment="netcdf-openmpi-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658261" comment="netcdf-openmpi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658017" comment="netcdf-openmpi-devel-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658262" comment="netcdf-openmpi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658018" comment="netcdf-openmpi-devel-data-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658263" comment="netcdf-openmpi-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658019" comment="netcdf-openmpi-devel-static-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658264" comment="netcdf-openmpi-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657961" comment="netcdf-openmpi2-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658936" comment="netcdf-openmpi2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657962" comment="netcdf-openmpi2-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658937" comment="netcdf-openmpi2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657963" comment="netcdf-openmpi2-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658938" comment="netcdf-openmpi2-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657964" comment="netcdf-openmpi3-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658939" comment="netcdf-openmpi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657965" comment="netcdf-openmpi3-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658940" comment="netcdf-openmpi3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657966" comment="netcdf-openmpi3-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658941" comment="netcdf-openmpi3-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657967" comment="netcdf-openmpi4-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658942" comment="netcdf-openmpi4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657968" comment="netcdf-openmpi4-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658943" comment="netcdf-openmpi4-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657969" comment="netcdf-openmpi4-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658944" comment="netcdf-openmpi4-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657996" comment="netcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658762" comment="netcdf_4_6_1-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657997" comment="netcdf_4_6_1-gnu-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658763" comment="netcdf_4_6_1-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657998" comment="netcdf_4_6_1-gnu-hpc-devel-data-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658764" comment="netcdf_4_6_1-gnu-hpc-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657999" comment="netcdf_4_6_1-gnu-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658765" comment="netcdf_4_6_1-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658000" comment="netcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658766" comment="netcdf_4_6_1-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658001" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658767" comment="netcdf_4_6_1-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658002" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658768" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658003" comment="netcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658769" comment="netcdf_4_6_1-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658004" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658770" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658005" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658771" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658006" comment="netcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658772" comment="netcdf_4_6_1-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658007" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658773" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658008" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658774" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658009" comment="netcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658775" comment="netcdf_4_6_1-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658010" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658776" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658011" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658777" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657626" comment="netcdf_4_7_3-gnu-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658265" comment="netcdf_4_7_3-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657627" comment="netcdf_4_7_3-gnu-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658266" comment="netcdf_4_7_3-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657628" comment="netcdf_4_7_3-gnu-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658267" comment="netcdf_4_7_3-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657629" comment="netcdf_4_7_3-gnu-mpich-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658268" comment="netcdf_4_7_3-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657630" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658269" comment="netcdf_4_7_3-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657631" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658270" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657632" comment="netcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658271" comment="netcdf_4_7_3-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657633" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658272" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657634" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658273" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657635" comment="netcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658274" comment="netcdf_4_7_3-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657636" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658275" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657637" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658276" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657638" comment="netcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658277" comment="netcdf_4_7_3-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657639" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658278" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657640" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658279" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657970" comment="netcdf_4_7_4-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658945" comment="netcdf_4_7_4-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657971" comment="netcdf_4_7_4-gnu-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658946" comment="netcdf_4_7_4-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657972" comment="netcdf_4_7_4-gnu-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658947" comment="netcdf_4_7_4-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657973" comment="netcdf_4_7_4-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658948" comment="netcdf_4_7_4-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657974" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658949" comment="netcdf_4_7_4-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657975" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658950" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657976" comment="netcdf_4_7_4-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658951" comment="netcdf_4_7_4-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657977" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658952" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657978" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658953" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657979" comment="netcdf_4_7_4-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658954" comment="netcdf_4_7_4-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657980" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658955" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657981" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658956" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657982" comment="netcdf_4_7_4-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658957" comment="netcdf_4_7_4-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657983" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658958" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657984" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658959" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657985" comment="netcdf_4_7_4-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658960" comment="netcdf_4_7_4-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657986" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658961" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657987" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658962" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20200</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20200" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20200" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20200" ref_url="https://www.suse.com/security/cve/CVE-2019-20200" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009776.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3873-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009811.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1505-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q3FNQWDRSXZ7B45EGNO2YK4R6EGOPYN6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3804-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DM4S3HXSBD3QQY6J6J2S4KVWTO63OS7U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3805-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLIABFAMSFMQHHJZHXO7ZW2B6USV456X/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3815-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BNULBT7RBXXDXTGAFBIJZ4GX5T4OWM7O/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3873-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TRUN6AONIMN6NUO34LRB46EYI53X2XBI/" source="SUSE-SU"/>
    <description>
    An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the "normalize line endings" feature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20200/">CVE-2019-20200</cve>
	<bugzilla href="https://bugzilla.suse.com/1191856">SUSE bug 1191856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657935" comment="libnetcdf-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658443" comment="libnetcdf-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657936" comment="libnetcdf-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658444" comment="libnetcdf-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657937" comment="libnetcdf-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658445" comment="libnetcdf-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657988" comment="libnetcdf-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658754" comment="libnetcdf-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657938" comment="libnetcdf-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658446" comment="libnetcdf-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657939" comment="libnetcdf-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658447" comment="libnetcdf-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657940" comment="libnetcdf-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658915" comment="libnetcdf-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658012" comment="libnetcdf13-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658252" comment="libnetcdf13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658013" comment="libnetcdf13-32bit-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658253" comment="libnetcdf13-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658014" comment="libnetcdf13-openmpi-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658254" comment="libnetcdf13-openmpi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658015" comment="libnetcdf13-openmpi-32bit-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658255" comment="libnetcdf13-openmpi-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657941" comment="libnetcdf18-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658916" comment="libnetcdf18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657942" comment="libnetcdf18-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658917" comment="libnetcdf18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657943" comment="libnetcdf18-openmpi2-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658918" comment="libnetcdf18-openmpi2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657944" comment="libnetcdf18-openmpi2-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658919" comment="libnetcdf18-openmpi2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657945" comment="libnetcdf18-openmpi3-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658920" comment="libnetcdf18-openmpi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657946" comment="libnetcdf18-openmpi3-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658921" comment="libnetcdf18-openmpi3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657947" comment="libnetcdf18-openmpi4-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658922" comment="libnetcdf18-openmpi4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657948" comment="libnetcdf18-openmpi4-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658923" comment="libnetcdf18-openmpi4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657989" comment="libnetcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658755" comment="libnetcdf_4_6_1-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657990" comment="libnetcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658756" comment="libnetcdf_4_6_1-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657991" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658757" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657992" comment="libnetcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658758" comment="libnetcdf_4_6_1-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657993" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658759" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657621" comment="libnetcdf_4_7_3-gnu-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658256" comment="libnetcdf_4_7_3-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657622" comment="libnetcdf_4_7_3-gnu-mpich-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658257" comment="libnetcdf_4_7_3-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657623" comment="libnetcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658258" comment="libnetcdf_4_7_3-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657624" comment="libnetcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658259" comment="libnetcdf_4_7_3-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657625" comment="libnetcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658260" comment="libnetcdf_4_7_3-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657949" comment="libnetcdf_4_7_4-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658924" comment="libnetcdf_4_7_4-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657950" comment="libnetcdf_4_7_4-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658925" comment="libnetcdf_4_7_4-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657951" comment="libnetcdf_4_7_4-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658926" comment="libnetcdf_4_7_4-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657952" comment="libnetcdf_4_7_4-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658927" comment="libnetcdf_4_7_4-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657953" comment="libnetcdf_4_7_4-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658928" comment="libnetcdf_4_7_4-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657954" comment="libnetcdf_4_7_4-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658929" comment="libnetcdf_4_7_4-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657955" comment="netcdf-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658930" comment="netcdf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657956" comment="netcdf-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658931" comment="netcdf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657957" comment="netcdf-devel-data-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658932" comment="netcdf-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657958" comment="netcdf-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658933" comment="netcdf-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657698" comment="netcdf-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658448" comment="netcdf-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657699" comment="netcdf-gnu-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658449" comment="netcdf-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657700" comment="netcdf-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658450" comment="netcdf-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657701" comment="netcdf-gnu-mpich-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658451" comment="netcdf-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657702" comment="netcdf-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658452" comment="netcdf-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657703" comment="netcdf-gnu-mvapich2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658453" comment="netcdf-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657994" comment="netcdf-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658760" comment="netcdf-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657995" comment="netcdf-gnu-openmpi1-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658761" comment="netcdf-gnu-openmpi1-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657959" comment="netcdf-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658454" comment="netcdf-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657960" comment="netcdf-gnu-openmpi2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658455" comment="netcdf-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657704" comment="netcdf-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658456" comment="netcdf-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657705" comment="netcdf-gnu-openmpi3-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658457" comment="netcdf-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657706" comment="netcdf-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658934" comment="netcdf-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657707" comment="netcdf-gnu-openmpi4-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658935" comment="netcdf-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658016" comment="netcdf-openmpi-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658261" comment="netcdf-openmpi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658017" comment="netcdf-openmpi-devel-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658262" comment="netcdf-openmpi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658018" comment="netcdf-openmpi-devel-data-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658263" comment="netcdf-openmpi-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658019" comment="netcdf-openmpi-devel-static-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658264" comment="netcdf-openmpi-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657961" comment="netcdf-openmpi2-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658936" comment="netcdf-openmpi2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657962" comment="netcdf-openmpi2-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658937" comment="netcdf-openmpi2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657963" comment="netcdf-openmpi2-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658938" comment="netcdf-openmpi2-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657964" comment="netcdf-openmpi3-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658939" comment="netcdf-openmpi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657965" comment="netcdf-openmpi3-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658940" comment="netcdf-openmpi3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657966" comment="netcdf-openmpi3-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658941" comment="netcdf-openmpi3-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657967" comment="netcdf-openmpi4-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658942" comment="netcdf-openmpi4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657968" comment="netcdf-openmpi4-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658943" comment="netcdf-openmpi4-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657969" comment="netcdf-openmpi4-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658944" comment="netcdf-openmpi4-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657996" comment="netcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658762" comment="netcdf_4_6_1-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657997" comment="netcdf_4_6_1-gnu-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658763" comment="netcdf_4_6_1-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657998" comment="netcdf_4_6_1-gnu-hpc-devel-data-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658764" comment="netcdf_4_6_1-gnu-hpc-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657999" comment="netcdf_4_6_1-gnu-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658765" comment="netcdf_4_6_1-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658000" comment="netcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658766" comment="netcdf_4_6_1-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658001" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658767" comment="netcdf_4_6_1-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658002" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658768" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658003" comment="netcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658769" comment="netcdf_4_6_1-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658004" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658770" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658005" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658771" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658006" comment="netcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658772" comment="netcdf_4_6_1-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658007" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658773" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658008" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658774" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658009" comment="netcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658775" comment="netcdf_4_6_1-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658010" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658776" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658011" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658777" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657626" comment="netcdf_4_7_3-gnu-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658265" comment="netcdf_4_7_3-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657627" comment="netcdf_4_7_3-gnu-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658266" comment="netcdf_4_7_3-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657628" comment="netcdf_4_7_3-gnu-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658267" comment="netcdf_4_7_3-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657629" comment="netcdf_4_7_3-gnu-mpich-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658268" comment="netcdf_4_7_3-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657630" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658269" comment="netcdf_4_7_3-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657631" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658270" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657632" comment="netcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658271" comment="netcdf_4_7_3-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657633" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658272" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657634" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658273" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657635" comment="netcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658274" comment="netcdf_4_7_3-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657636" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658275" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657637" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658276" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657638" comment="netcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658277" comment="netcdf_4_7_3-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657639" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658278" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657640" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658279" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657970" comment="netcdf_4_7_4-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658945" comment="netcdf_4_7_4-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657971" comment="netcdf_4_7_4-gnu-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658946" comment="netcdf_4_7_4-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657972" comment="netcdf_4_7_4-gnu-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658947" comment="netcdf_4_7_4-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657973" comment="netcdf_4_7_4-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658948" comment="netcdf_4_7_4-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657974" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658949" comment="netcdf_4_7_4-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657975" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658950" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657976" comment="netcdf_4_7_4-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658951" comment="netcdf_4_7_4-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657977" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658952" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657978" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658953" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657979" comment="netcdf_4_7_4-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658954" comment="netcdf_4_7_4-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657980" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658955" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657981" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658956" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657982" comment="netcdf_4_7_4-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658957" comment="netcdf_4_7_4-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657983" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658958" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657984" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658959" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657985" comment="netcdf_4_7_4-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658960" comment="netcdf_4_7_4-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657986" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658961" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657987" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658962" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20201</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20201" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20201" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20201" ref_url="https://www.suse.com/security/cve/CVE-2019-20201" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009776.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3873-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009811.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1505-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q3FNQWDRSXZ7B45EGNO2YK4R6EGOPYN6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3804-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DM4S3HXSBD3QQY6J6J2S4KVWTO63OS7U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3805-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLIABFAMSFMQHHJZHXO7ZW2B6USV456X/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3815-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BNULBT7RBXXDXTGAFBIJZ4GX5T4OWM7O/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3873-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TRUN6AONIMN6NUO34LRB46EYI53X2XBI/" source="SUSE-SU"/>
    <description>
    An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxml_parse_* functions mishandle XML entities, leading to an infinite loop in which memory allocations occur.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20201/">CVE-2019-20201</cve>
	<bugzilla href="https://bugzilla.suse.com/1191856">SUSE bug 1191856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657935" comment="libnetcdf-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658443" comment="libnetcdf-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657936" comment="libnetcdf-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658444" comment="libnetcdf-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657937" comment="libnetcdf-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658445" comment="libnetcdf-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657988" comment="libnetcdf-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658754" comment="libnetcdf-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657938" comment="libnetcdf-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658446" comment="libnetcdf-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657939" comment="libnetcdf-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658447" comment="libnetcdf-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657940" comment="libnetcdf-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658915" comment="libnetcdf-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658012" comment="libnetcdf13-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658252" comment="libnetcdf13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658013" comment="libnetcdf13-32bit-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658253" comment="libnetcdf13-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658014" comment="libnetcdf13-openmpi-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658254" comment="libnetcdf13-openmpi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658015" comment="libnetcdf13-openmpi-32bit-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658255" comment="libnetcdf13-openmpi-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657941" comment="libnetcdf18-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658916" comment="libnetcdf18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657942" comment="libnetcdf18-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658917" comment="libnetcdf18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657943" comment="libnetcdf18-openmpi2-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658918" comment="libnetcdf18-openmpi2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657944" comment="libnetcdf18-openmpi2-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658919" comment="libnetcdf18-openmpi2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657945" comment="libnetcdf18-openmpi3-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658920" comment="libnetcdf18-openmpi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657946" comment="libnetcdf18-openmpi3-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658921" comment="libnetcdf18-openmpi3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657947" comment="libnetcdf18-openmpi4-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658922" comment="libnetcdf18-openmpi4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657948" comment="libnetcdf18-openmpi4-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658923" comment="libnetcdf18-openmpi4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657989" comment="libnetcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658755" comment="libnetcdf_4_6_1-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657990" comment="libnetcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658756" comment="libnetcdf_4_6_1-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657991" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658757" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657992" comment="libnetcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658758" comment="libnetcdf_4_6_1-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657993" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658759" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657621" comment="libnetcdf_4_7_3-gnu-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658256" comment="libnetcdf_4_7_3-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657622" comment="libnetcdf_4_7_3-gnu-mpich-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658257" comment="libnetcdf_4_7_3-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657623" comment="libnetcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658258" comment="libnetcdf_4_7_3-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657624" comment="libnetcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658259" comment="libnetcdf_4_7_3-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657625" comment="libnetcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658260" comment="libnetcdf_4_7_3-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657949" comment="libnetcdf_4_7_4-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658924" comment="libnetcdf_4_7_4-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657950" comment="libnetcdf_4_7_4-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658925" comment="libnetcdf_4_7_4-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657951" comment="libnetcdf_4_7_4-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658926" comment="libnetcdf_4_7_4-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657952" comment="libnetcdf_4_7_4-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658927" comment="libnetcdf_4_7_4-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657953" comment="libnetcdf_4_7_4-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658928" comment="libnetcdf_4_7_4-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657954" comment="libnetcdf_4_7_4-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658929" comment="libnetcdf_4_7_4-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657955" comment="netcdf-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658930" comment="netcdf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657956" comment="netcdf-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658931" comment="netcdf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657957" comment="netcdf-devel-data-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658932" comment="netcdf-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657958" comment="netcdf-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658933" comment="netcdf-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657698" comment="netcdf-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658448" comment="netcdf-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657699" comment="netcdf-gnu-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658449" comment="netcdf-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657700" comment="netcdf-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658450" comment="netcdf-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657701" comment="netcdf-gnu-mpich-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658451" comment="netcdf-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657702" comment="netcdf-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658452" comment="netcdf-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657703" comment="netcdf-gnu-mvapich2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658453" comment="netcdf-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657994" comment="netcdf-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658760" comment="netcdf-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657995" comment="netcdf-gnu-openmpi1-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658761" comment="netcdf-gnu-openmpi1-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657959" comment="netcdf-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658454" comment="netcdf-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657960" comment="netcdf-gnu-openmpi2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658455" comment="netcdf-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657704" comment="netcdf-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658456" comment="netcdf-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657705" comment="netcdf-gnu-openmpi3-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658457" comment="netcdf-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657706" comment="netcdf-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658934" comment="netcdf-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657707" comment="netcdf-gnu-openmpi4-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658935" comment="netcdf-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658016" comment="netcdf-openmpi-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658261" comment="netcdf-openmpi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658017" comment="netcdf-openmpi-devel-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658262" comment="netcdf-openmpi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658018" comment="netcdf-openmpi-devel-data-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658263" comment="netcdf-openmpi-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658019" comment="netcdf-openmpi-devel-static-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658264" comment="netcdf-openmpi-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657961" comment="netcdf-openmpi2-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658936" comment="netcdf-openmpi2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657962" comment="netcdf-openmpi2-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658937" comment="netcdf-openmpi2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657963" comment="netcdf-openmpi2-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658938" comment="netcdf-openmpi2-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657964" comment="netcdf-openmpi3-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658939" comment="netcdf-openmpi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657965" comment="netcdf-openmpi3-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658940" comment="netcdf-openmpi3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657966" comment="netcdf-openmpi3-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658941" comment="netcdf-openmpi3-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657967" comment="netcdf-openmpi4-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658942" comment="netcdf-openmpi4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657968" comment="netcdf-openmpi4-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658943" comment="netcdf-openmpi4-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657969" comment="netcdf-openmpi4-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658944" comment="netcdf-openmpi4-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657996" comment="netcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658762" comment="netcdf_4_6_1-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657997" comment="netcdf_4_6_1-gnu-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658763" comment="netcdf_4_6_1-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657998" comment="netcdf_4_6_1-gnu-hpc-devel-data-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658764" comment="netcdf_4_6_1-gnu-hpc-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657999" comment="netcdf_4_6_1-gnu-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658765" comment="netcdf_4_6_1-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658000" comment="netcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658766" comment="netcdf_4_6_1-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658001" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658767" comment="netcdf_4_6_1-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658002" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658768" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658003" comment="netcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658769" comment="netcdf_4_6_1-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658004" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658770" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658005" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658771" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658006" comment="netcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658772" comment="netcdf_4_6_1-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658007" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658773" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658008" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658774" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658009" comment="netcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658775" comment="netcdf_4_6_1-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658010" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658776" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658011" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658777" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657626" comment="netcdf_4_7_3-gnu-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658265" comment="netcdf_4_7_3-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657627" comment="netcdf_4_7_3-gnu-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658266" comment="netcdf_4_7_3-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657628" comment="netcdf_4_7_3-gnu-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658267" comment="netcdf_4_7_3-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657629" comment="netcdf_4_7_3-gnu-mpich-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658268" comment="netcdf_4_7_3-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657630" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658269" comment="netcdf_4_7_3-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657631" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658270" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657632" comment="netcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658271" comment="netcdf_4_7_3-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657633" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658272" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657634" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658273" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657635" comment="netcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658274" comment="netcdf_4_7_3-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657636" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658275" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657637" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658276" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657638" comment="netcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658277" comment="netcdf_4_7_3-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657639" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658278" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657640" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658279" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657970" comment="netcdf_4_7_4-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658945" comment="netcdf_4_7_4-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657971" comment="netcdf_4_7_4-gnu-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658946" comment="netcdf_4_7_4-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657972" comment="netcdf_4_7_4-gnu-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658947" comment="netcdf_4_7_4-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657973" comment="netcdf_4_7_4-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658948" comment="netcdf_4_7_4-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657974" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658949" comment="netcdf_4_7_4-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657975" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658950" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657976" comment="netcdf_4_7_4-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658951" comment="netcdf_4_7_4-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657977" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658952" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657978" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658953" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657979" comment="netcdf_4_7_4-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658954" comment="netcdf_4_7_4-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657980" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658955" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657981" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658956" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657982" comment="netcdf_4_7_4-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658957" comment="netcdf_4_7_4-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657983" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658958" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657984" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658959" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657985" comment="netcdf_4_7_4-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658960" comment="netcdf_4_7_4-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657986" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658961" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657987" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658962" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20202</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20202" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20202" ref_url="https://www.suse.com/security/cve/CVE-2019-20202" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009776.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3873-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009811.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1505-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q3FNQWDRSXZ7B45EGNO2YK4R6EGOPYN6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3804-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DM4S3HXSBD3QQY6J6J2S4KVWTO63OS7U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3805-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLIABFAMSFMQHHJZHXO7ZW2B6USV456X/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3815-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BNULBT7RBXXDXTGAFBIJZ4GX5T4OWM7O/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3873-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TRUN6AONIMN6NUO34LRB46EYI53X2XBI/" source="SUSE-SU"/>
    <description>
    An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20202/">CVE-2019-20202</cve>
	<bugzilla href="https://bugzilla.suse.com/1191856">SUSE bug 1191856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657935" comment="libnetcdf-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658443" comment="libnetcdf-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657936" comment="libnetcdf-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658444" comment="libnetcdf-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657937" comment="libnetcdf-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658445" comment="libnetcdf-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657988" comment="libnetcdf-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658754" comment="libnetcdf-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657938" comment="libnetcdf-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658446" comment="libnetcdf-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657939" comment="libnetcdf-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658447" comment="libnetcdf-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657940" comment="libnetcdf-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658915" comment="libnetcdf-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658012" comment="libnetcdf13-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658252" comment="libnetcdf13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658013" comment="libnetcdf13-32bit-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658253" comment="libnetcdf13-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658014" comment="libnetcdf13-openmpi-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658254" comment="libnetcdf13-openmpi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658015" comment="libnetcdf13-openmpi-32bit-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658255" comment="libnetcdf13-openmpi-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657941" comment="libnetcdf18-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658916" comment="libnetcdf18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657942" comment="libnetcdf18-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658917" comment="libnetcdf18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657943" comment="libnetcdf18-openmpi2-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658918" comment="libnetcdf18-openmpi2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657944" comment="libnetcdf18-openmpi2-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658919" comment="libnetcdf18-openmpi2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657945" comment="libnetcdf18-openmpi3-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658920" comment="libnetcdf18-openmpi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657946" comment="libnetcdf18-openmpi3-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658921" comment="libnetcdf18-openmpi3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657947" comment="libnetcdf18-openmpi4-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658922" comment="libnetcdf18-openmpi4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657948" comment="libnetcdf18-openmpi4-32bit-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658923" comment="libnetcdf18-openmpi4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657989" comment="libnetcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658755" comment="libnetcdf_4_6_1-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657990" comment="libnetcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658756" comment="libnetcdf_4_6_1-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657991" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658757" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657992" comment="libnetcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658758" comment="libnetcdf_4_6_1-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657993" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658759" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657621" comment="libnetcdf_4_7_3-gnu-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658256" comment="libnetcdf_4_7_3-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657622" comment="libnetcdf_4_7_3-gnu-mpich-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658257" comment="libnetcdf_4_7_3-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657623" comment="libnetcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658258" comment="libnetcdf_4_7_3-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657624" comment="libnetcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658259" comment="libnetcdf_4_7_3-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657625" comment="libnetcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658260" comment="libnetcdf_4_7_3-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657949" comment="libnetcdf_4_7_4-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658924" comment="libnetcdf_4_7_4-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657950" comment="libnetcdf_4_7_4-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658925" comment="libnetcdf_4_7_4-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657951" comment="libnetcdf_4_7_4-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658926" comment="libnetcdf_4_7_4-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657952" comment="libnetcdf_4_7_4-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658927" comment="libnetcdf_4_7_4-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657953" comment="libnetcdf_4_7_4-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658928" comment="libnetcdf_4_7_4-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657954" comment="libnetcdf_4_7_4-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658929" comment="libnetcdf_4_7_4-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657955" comment="netcdf-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658930" comment="netcdf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657956" comment="netcdf-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658931" comment="netcdf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657957" comment="netcdf-devel-data-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658932" comment="netcdf-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657958" comment="netcdf-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658933" comment="netcdf-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657698" comment="netcdf-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658448" comment="netcdf-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657699" comment="netcdf-gnu-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658449" comment="netcdf-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657700" comment="netcdf-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658450" comment="netcdf-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657701" comment="netcdf-gnu-mpich-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658451" comment="netcdf-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657702" comment="netcdf-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658452" comment="netcdf-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657703" comment="netcdf-gnu-mvapich2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658453" comment="netcdf-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657994" comment="netcdf-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658760" comment="netcdf-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657995" comment="netcdf-gnu-openmpi1-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658761" comment="netcdf-gnu-openmpi1-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657959" comment="netcdf-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658454" comment="netcdf-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657960" comment="netcdf-gnu-openmpi2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658455" comment="netcdf-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657704" comment="netcdf-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658456" comment="netcdf-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657705" comment="netcdf-gnu-openmpi3-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658457" comment="netcdf-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657706" comment="netcdf-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658934" comment="netcdf-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657707" comment="netcdf-gnu-openmpi4-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658935" comment="netcdf-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658016" comment="netcdf-openmpi-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658261" comment="netcdf-openmpi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658017" comment="netcdf-openmpi-devel-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658262" comment="netcdf-openmpi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658018" comment="netcdf-openmpi-devel-data-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658263" comment="netcdf-openmpi-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658019" comment="netcdf-openmpi-devel-static-4.6.1-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658264" comment="netcdf-openmpi-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657961" comment="netcdf-openmpi2-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658936" comment="netcdf-openmpi2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657962" comment="netcdf-openmpi2-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658937" comment="netcdf-openmpi2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657963" comment="netcdf-openmpi2-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658938" comment="netcdf-openmpi2-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657964" comment="netcdf-openmpi3-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658939" comment="netcdf-openmpi3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657965" comment="netcdf-openmpi3-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658940" comment="netcdf-openmpi3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657966" comment="netcdf-openmpi3-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658941" comment="netcdf-openmpi3-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657967" comment="netcdf-openmpi4-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658942" comment="netcdf-openmpi4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657968" comment="netcdf-openmpi4-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658943" comment="netcdf-openmpi4-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657969" comment="netcdf-openmpi4-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658944" comment="netcdf-openmpi4-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657996" comment="netcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658762" comment="netcdf_4_6_1-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657997" comment="netcdf_4_6_1-gnu-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658763" comment="netcdf_4_6_1-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657998" comment="netcdf_4_6_1-gnu-hpc-devel-data-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658764" comment="netcdf_4_6_1-gnu-hpc-devel-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657999" comment="netcdf_4_6_1-gnu-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658765" comment="netcdf_4_6_1-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658000" comment="netcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658766" comment="netcdf_4_6_1-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658001" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658767" comment="netcdf_4_6_1-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658002" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658768" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658003" comment="netcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658769" comment="netcdf_4_6_1-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658004" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658770" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658005" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658771" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658006" comment="netcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658772" comment="netcdf_4_6_1-gnu-openmpi1-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658007" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658773" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658008" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658774" comment="netcdf_4_6_1-gnu-openmpi1-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658009" comment="netcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658775" comment="netcdf_4_6_1-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658010" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658776" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658011" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658777" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657626" comment="netcdf_4_7_3-gnu-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658265" comment="netcdf_4_7_3-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657627" comment="netcdf_4_7_3-gnu-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658266" comment="netcdf_4_7_3-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657628" comment="netcdf_4_7_3-gnu-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658267" comment="netcdf_4_7_3-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657629" comment="netcdf_4_7_3-gnu-mpich-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658268" comment="netcdf_4_7_3-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657630" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658269" comment="netcdf_4_7_3-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657631" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658270" comment="netcdf_4_7_3-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657632" comment="netcdf_4_7_3-gnu-mvapich2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658271" comment="netcdf_4_7_3-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657633" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658272" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657634" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658273" comment="netcdf_4_7_3-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657635" comment="netcdf_4_7_3-gnu-openmpi2-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658274" comment="netcdf_4_7_3-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657636" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658275" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657637" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658276" comment="netcdf_4_7_3-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657638" comment="netcdf_4_7_3-gnu-openmpi3-hpc-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658277" comment="netcdf_4_7_3-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657639" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658278" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657640" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-static-4.7.3-3.7.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658279" comment="netcdf_4_7_3-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657970" comment="netcdf_4_7_4-gnu-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658945" comment="netcdf_4_7_4-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657971" comment="netcdf_4_7_4-gnu-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658946" comment="netcdf_4_7_4-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657972" comment="netcdf_4_7_4-gnu-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658947" comment="netcdf_4_7_4-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657973" comment="netcdf_4_7_4-gnu-mpich-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658948" comment="netcdf_4_7_4-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657974" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658949" comment="netcdf_4_7_4-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657975" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658950" comment="netcdf_4_7_4-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657976" comment="netcdf_4_7_4-gnu-mvapich2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658951" comment="netcdf_4_7_4-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657977" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658952" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657978" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658953" comment="netcdf_4_7_4-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657979" comment="netcdf_4_7_4-gnu-openmpi2-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658954" comment="netcdf_4_7_4-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657980" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658955" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657981" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658956" comment="netcdf_4_7_4-gnu-openmpi2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657982" comment="netcdf_4_7_4-gnu-openmpi3-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658957" comment="netcdf_4_7_4-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657983" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658958" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657984" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658959" comment="netcdf_4_7_4-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657985" comment="netcdf_4_7_4-gnu-openmpi4-hpc-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658960" comment="netcdf_4_7_4-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657986" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658961" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657987" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-static-4.7.4-4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658962" comment="netcdf_4_7_4-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20218</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20218" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20218" ref_url="https://www.suse.com/security/cve/CVE-2019-20218" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20218/">CVE-2019-20218</cve>
	<bugzilla href="https://bugzilla.suse.com/1160439">SUSE bug 1160439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189840">SUSE bug 1189840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190372">SUSE bug 1190372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192495">SUSE bug 1192495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193078">SUSE bug 1193078</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920367" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20367</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20367" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20367" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20367" ref_url="https://www.suse.com/security/cve/CVE-2019-20367" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006825.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00043.html" source="SUSE-SU"/>
    <description>
    nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20367/">CVE-2019-20367</cve>
	<bugzilla href="https://bugzilla.suse.com/1160551">SUSE bug 1160551</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482145" comment="libbsd0-0.8.7-3.3.17 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009283681" comment="libbsd0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20386</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20386" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20386" ref_url="https://www.suse.com/security/cve/CVE-2019-20386" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:360-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:48-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006455.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00014.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20386/">CVE-2019-20386</cve>
	<bugzilla href="https://bugzilla.suse.com/1161436">SUSE bug 1161436</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20388</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20388" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20388" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20388" ref_url="https://www.suse.com/security/cve/CVE-2019-20388" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007415.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007409.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008797.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0681-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-05/msg00124.html" source="SUSE-SU"/>
    <description>
    xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20388/">CVE-2019-20388</cve>
	<bugzilla href="https://bugzilla.suse.com/1161521">SUSE bug 1161521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191860">SUSE bug 1191860</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20422</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20422" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20422" ref_url="https://www.suse.com/security/cve/CVE-2019-20422" source="SUSE CVE"/>
    <description>
    In the Linux kernel before 5.3.4, fib6_rule_lookup in net/ipv6/ip6_fib.c mishandles the RT6_LOOKUP_F_DST_NOREF flag in a reference-count decision, leading to (for example) a crash that was identified by syzkaller, aka CID-7b09c2d052db.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20422/">CVE-2019-20422</cve>
	<bugzilla href="https://bugzilla.suse.com/1161897">SUSE bug 1161897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20454</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20454" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20454" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20454" ref_url="https://www.suse.com/security/cve/CVE-2019-20454" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011771.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011772.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011815.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2229-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011755.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:2649-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZVHVSVNKKW7CC77JRUJ23MMS76WXHBBU/" source="SUSE-SU"/>
    <description>
    An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-04"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20454/">CVE-2019-20454</cve>
	<bugzilla href="https://bugzilla.suse.com/1164384">SUSE bug 1164384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172973">SUSE bug 1172973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009701251" comment="libpcre2-16-0-10.31-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153649" comment="libpcre2-16-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009701335" comment="libpcre2-16-0-32bit-10.31-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153650" comment="libpcre2-16-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009701252" comment="libpcre2-32-0-10.31-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153651" comment="libpcre2-32-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009701336" comment="libpcre2-32-0-32bit-10.31-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153652" comment="libpcre2-32-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009701253" comment="libpcre2-8-0-10.31-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153653" comment="libpcre2-8-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009701337" comment="libpcre2-8-0-32bit-10.31-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153654" comment="libpcre2-8-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009701254" comment="libpcre2-posix2-10.31-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695748" comment="libpcre2-posix2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009701338" comment="libpcre2-posix2-32bit-10.31-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695749" comment="libpcre2-posix2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009701255" comment="pcre2-devel-10.31-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153658" comment="pcre2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009701339" comment="pcre2-devel-static-10.31-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153659" comment="pcre2-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009701340" comment="pcre2-doc-10.31-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153660" comment="pcre2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009701341" comment="pcre2-tools-10.31-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153661" comment="pcre2-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20503</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20503" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20503" ref_url="https://www.suse.com/security/cve/CVE-2019-20503" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006599.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0340-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0365-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0366-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html" source="SUSE-SU"/>
    <description>
    usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-20503/">CVE-2019-20503</cve>
	<bugzilla href="https://bugzilla.suse.com/1166238">SUSE bug 1166238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167090">SUSE bug 1167090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20788</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20788" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20788" ref_url="https://www.suse.com/security/cve/CVE-2019-20788" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006771.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1164-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006773.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006774.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00027.html" source="SUSE-SU"/>
    <description>
    libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value. NOTE: this may overlap CVE-2019-15690.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-20788/">CVE-2019-20788</cve>
	<bugzilla href="https://bugzilla.suse.com/1170441">SUSE bug 1170441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173698">SUSE bug 1173698</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20807</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20807" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20807" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20807" ref_url="https://www.suse.com/security/cve/CVE-2019-20807" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006887.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006895.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006896.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0794-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00018.html" source="SUSE-SU"/>
    <description>
    In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-20807/">CVE-2019-20807</cve>
	<bugzilla href="https://bugzilla.suse.com/1172225">SUSE bug 1172225</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629044" comment="vim-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151193" comment="vim is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629045" comment="vim-data-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151194" comment="vim-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629046" comment="vim-data-common-8.0.1568-5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177135" comment="vim-data-common is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20810</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20810" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20810" ref_url="https://www.suse.com/security/cve/CVE-2019-20810" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2152-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for a failure path, which causes a memory leak, aka CID-9453264ef586.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20810/">CVE-2019-20810</cve>
	<bugzilla href="https://bugzilla.suse.com/1172458">SUSE bug 1172458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20811</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20811" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20811" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20811" ref_url="https://www.suse.com/security/cve/CVE-2019-20811" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1651-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1668-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011291.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011310.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-18"/>
	<updated date="2022-07-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20811/">CVE-2019-20811</cve>
	<bugzilla href="https://bugzilla.suse.com/1172456">SUSE bug 1172456</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695342" comment="kernel-debug-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009693407" comment="kernel-default-man-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695343" comment="kernel-kvmsmall-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695344" comment="kernel-vanilla-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695345" comment="kernel-vanilla-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695346" comment="kernel-vanilla-devel-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695347" comment="kernel-vanilla-livepatch-devel-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695348" comment="kernel-zfcpdump-man-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20812</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20812" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20812" ref_url="https://www.suse.com/security/cve/CVE-2019-20812" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2152-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel before 5.4.7. The prb_calc_retire_blk_tmo() function in net/packet/af_packet.c can result in a denial of service (CPU consumption and soft lockup) in a certain failure case involving TPACKET_V3, aka CID-b43d1f9f7067.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20812/">CVE-2019-20812</cve>
	<bugzilla href="https://bugzilla.suse.com/1172453">SUSE bug 1172453</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20838</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20838" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20838" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20838" ref_url="https://www.suse.com/security/cve/CVE-2019-20838" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009675.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009676.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:474-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009677.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:476-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-October/020654.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009718.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009758.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:514-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009759.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:138-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:343-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010517.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010518.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010519.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010520.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:373-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:52-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:55-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:56-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:80-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:83-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010107.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009689.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:750-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009690.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:28-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:29-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3529-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-October/020617.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3652-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009715.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1441-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ANBRV4PU5AWEEYUWZYBLJCQBG3AHEGD/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3529-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DOG6FED4Y3TBAFL2V2XUUC43MKZLFGH3/" source="SUSE-SU"/>
    <description>
    libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20838/">CVE-2019-20838</cve>
	<bugzilla href="https://bugzilla.suse.com/1172973">SUSE bug 1172973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189526">SUSE bug 1189526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193384">SUSE bug 1193384</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652864" comment="libpcre1-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652865" comment="libpcre1-32bit-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652866" comment="libpcre16-0-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652913" comment="libpcre16-0-32bit-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652867" comment="libpcrecpp0-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652868" comment="libpcrecpp0-32bit-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652869" comment="libpcreposix0-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652914" comment="libpcreposix0-32bit-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652870" comment="pcre-devel-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652915" comment="pcre-devel-static-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652916" comment="pcre-doc-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652871" comment="pcre-tools-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20839</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20839" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20839" ref_url="https://www.suse.com/security/cve/CVE-2019-20839" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1922-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2167-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007241.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html" source="SUSE-SU"/>
    <description>
    libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20839/">CVE-2019-20839</cve>
	<bugzilla href="https://bugzilla.suse.com/1173477">SUSE bug 1173477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173875">SUSE bug 1173875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20840</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20840" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20840" ref_url="https://www.suse.com/security/cve/CVE-2019-20840" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1922-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2167-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007241.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20840/">CVE-2019-20840</cve>
	<bugzilla href="https://bugzilla.suse.com/1173477">SUSE bug 1173477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173876">SUSE bug 1173876</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20907</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20907" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20907" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20907" ref_url="https://www.suse.com/security/cve/CVE-2019-20907" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007282.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007892.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008118.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2332-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S3JTHM6LLDKL7VPNRJUSRPNZAD2FZ25H/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2333-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FLGERALYYFTBIX3ZKPM6EQ2WJVUXLOXY/" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20907/">CVE-2019-20907</cve>
	<bugzilla href="https://bugzilla.suse.com/1174091">SUSE bug 1174091</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201920916" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-20916</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-20916" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20916" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:750-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007933.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:762-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:763-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007935.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010876.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2698-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2726-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007473.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007614.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007892.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3565-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007889.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3566-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007890.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007908.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007909.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007975.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3865-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008282.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008291.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0432-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008310.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0529-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1454-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010862.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1613-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2143-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LG3I7MSGZF7WN3YNM7ML4QMO6MXYUU73/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2152-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4KXU352TPOYPGUNSKDJRXFXWPD5NF32K/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2169-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7DKY5FFZVXAPBL5ATB6LJG4VYEF3GOLN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2184-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G3AA6BSUJEGBBKUCQO6J25OSG7PA6ZKH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2185-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KOMPFK5R4IK4IFOQTL5NIJK6DKSYRSXT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2189-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/E2GBJR7SZL3UIJETOGQDYOPIODBESJYI/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2190-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/623Y5GJHFGANTQ36ECKXIXY3QVKGYSCE/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2211-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EUMJS3WWV7Y2IVJFRMZNDUXZBSPWORBP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0270-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WUT6BSX5663NCXU3Y4KR3RA3RQHJMCFI/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0331-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3AKEBUCTPHZWXJGF6EWK7HBTO726SP2Y/" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680247" comment="python2-pip-20.0.2-150100.6.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294865" comment="python2-pip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009492945" comment="python3-pip-20.0.2-6.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151932" comment="python3-pip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629000" comment="python3-setuptools-40.5.0-6.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009303048" comment="python3-setuptools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009511085" comment="python39-pip-20.2.4-7.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623213" comment="python39-pip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009511086" comment="python39-setuptools-44.1.1-7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623214" comment="python39-setuptools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2126" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2126" ref_url="https://www.suse.com/security/cve/CVE-2019-2126" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006387.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html" source="SUSE-SU"/>
    <description>
    In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127702368.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2126/">CVE-2019-2126</cve>
	<bugzilla href="https://bugzilla.suse.com/1160611">SUSE bug 1160611</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482448" comment="libvpx4-1.6.1-6.6.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177224" comment="libvpx4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2201</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2201" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2201" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2201" ref_url="https://www.suse.com/security/cve/CVE-2019-2201" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2971-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006137.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2529-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2530-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00048.html" source="SUSE-SU"/>
    <description>
    In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120551338
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2201/">CVE-2019-2201</cve>
	<bugzilla href="https://bugzilla.suse.com/1156402">SUSE bug 1156402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628779" comment="libjpeg8-8.1.2-5.15.7 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152543" comment="libjpeg8 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2422</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2422" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2422" ref_url="https://www.suse.com/security/cve/CVE-2019-2422" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0585-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190585-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005193.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1439-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1500-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2422/">CVE-2019-2422</cve>
	<bugzilla href="https://bugzilla.suse.com/1122293">SUSE bug 1122293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2426</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2426" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2426" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2426" ref_url="https://www.suse.com/security/cve/CVE-2019-2426" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2028-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005762.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1439-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1500-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2426/">CVE-2019-2426</cve>
	<bugzilla href="https://bugzilla.suse.com/1134297">SUSE bug 1134297</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192446" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2446</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2446" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2446" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2446" ref_url="https://www.suse.com/security/cve/CVE-2019-2446" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2446/">CVE-2019-2446</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2448</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2448" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2448" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2448" ref_url="https://www.suse.com/security/cve/CVE-2019-2448" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2448/">CVE-2019-2448</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2450</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2450" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2450" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2450" ref_url="https://www.suse.com/security/cve/CVE-2019-2450" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2450/">CVE-2019-2450</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2451</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2451" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2451" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2451" ref_url="https://www.suse.com/security/cve/CVE-2019-2451" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2451/">CVE-2019-2451</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2500</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2500" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2500" ref_url="https://www.suse.com/security/cve/CVE-2019-2500" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2500/">CVE-2019-2500</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2501</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2501" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2501" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2501" ref_url="https://www.suse.com/security/cve/CVE-2019-2501" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 3.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2501/">CVE-2019-2501</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2503</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2503" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2503" ref_url="https://www.suse.com/security/cve/CVE-2019-2503" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00005.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.4/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2503/">CVE-2019-2503</cve>
	<bugzilla href="https://bugzilla.suse.com/1122198">SUSE bug 1122198</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201925031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-25031</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-25031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25031" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-25031" ref_url="https://www.suse.com/security/cve/CVE-2019-25031" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0176-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0301-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021588.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0176-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTS3PI42CZC7TVKVUTBOIMO2PDFTABYC/" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-25031/">CVE-2019-25031</cve>
	<bugzilla href="https://bugzilla.suse.com/1185382">SUSE bug 1185382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664287" comment="libunbound2-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177204" comment="libunbound2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664373" comment="unbound-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286673" comment="unbound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664288" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177205" comment="unbound-anchor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664289" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286674" comment="unbound-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664374" comment="unbound-munin-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286675" comment="unbound-munin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664375" comment="unbound-python-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286676" comment="unbound-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201925032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-25032</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-25032" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25032" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-25032" ref_url="https://www.suse.com/security/cve/CVE-2019-25032" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0176-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0301-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021588.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0176-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTS3PI42CZC7TVKVUTBOIMO2PDFTABYC/" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25032/">CVE-2019-25032</cve>
	<bugzilla href="https://bugzilla.suse.com/1185383">SUSE bug 1185383</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664287" comment="libunbound2-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177204" comment="libunbound2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664373" comment="unbound-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286673" comment="unbound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664288" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177205" comment="unbound-anchor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664289" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286674" comment="unbound-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664374" comment="unbound-munin-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286675" comment="unbound-munin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664375" comment="unbound-python-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286676" comment="unbound-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201925033" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-25033</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-25033" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25033" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-25033" ref_url="https://www.suse.com/security/cve/CVE-2019-25033" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0176-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0301-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021588.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0176-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTS3PI42CZC7TVKVUTBOIMO2PDFTABYC/" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25033/">CVE-2019-25033</cve>
	<bugzilla href="https://bugzilla.suse.com/1185384">SUSE bug 1185384</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664287" comment="libunbound2-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177204" comment="libunbound2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664373" comment="unbound-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286673" comment="unbound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664288" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177205" comment="unbound-anchor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664289" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286674" comment="unbound-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664374" comment="unbound-munin-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286675" comment="unbound-munin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664375" comment="unbound-python-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286676" comment="unbound-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201925034" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-25034</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-25034" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25034" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-25034" ref_url="https://www.suse.com/security/cve/CVE-2019-25034" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0176-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0301-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021588.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0176-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTS3PI42CZC7TVKVUTBOIMO2PDFTABYC/" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-25034/">CVE-2019-25034</cve>
	<bugzilla href="https://bugzilla.suse.com/1185385">SUSE bug 1185385</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664287" comment="libunbound2-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177204" comment="libunbound2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664373" comment="unbound-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286673" comment="unbound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664288" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177205" comment="unbound-anchor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664289" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286674" comment="unbound-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664374" comment="unbound-munin-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286675" comment="unbound-munin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664375" comment="unbound-python-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286676" comment="unbound-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201925035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-25035</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-25035" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25035" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-25035" ref_url="https://www.suse.com/security/cve/CVE-2019-25035" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0176-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0301-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021588.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0176-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTS3PI42CZC7TVKVUTBOIMO2PDFTABYC/" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-25035/">CVE-2019-25035</cve>
	<bugzilla href="https://bugzilla.suse.com/1185386">SUSE bug 1185386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664287" comment="libunbound2-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177204" comment="libunbound2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664373" comment="unbound-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286673" comment="unbound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664288" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177205" comment="unbound-anchor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664289" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286674" comment="unbound-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664374" comment="unbound-munin-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286675" comment="unbound-munin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664375" comment="unbound-python-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286676" comment="unbound-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201925036" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-25036</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-25036" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25036" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-25036" ref_url="https://www.suse.com/security/cve/CVE-2019-25036" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0176-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0301-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021588.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0176-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTS3PI42CZC7TVKVUTBOIMO2PDFTABYC/" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25036/">CVE-2019-25036</cve>
	<bugzilla href="https://bugzilla.suse.com/1185387">SUSE bug 1185387</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664287" comment="libunbound2-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177204" comment="libunbound2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664373" comment="unbound-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286673" comment="unbound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664288" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177205" comment="unbound-anchor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664289" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286674" comment="unbound-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664374" comment="unbound-munin-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286675" comment="unbound-munin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664375" comment="unbound-python-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286676" comment="unbound-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201925037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-25037</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-25037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25037" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-25037" ref_url="https://www.suse.com/security/cve/CVE-2019-25037" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0176-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0301-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021588.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0176-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTS3PI42CZC7TVKVUTBOIMO2PDFTABYC/" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25037/">CVE-2019-25037</cve>
	<bugzilla href="https://bugzilla.suse.com/1185388">SUSE bug 1185388</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664287" comment="libunbound2-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177204" comment="libunbound2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664373" comment="unbound-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286673" comment="unbound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664288" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177205" comment="unbound-anchor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664289" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286674" comment="unbound-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664374" comment="unbound-munin-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286675" comment="unbound-munin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664375" comment="unbound-python-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286676" comment="unbound-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201925038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-25038</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-25038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25038" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-25038" ref_url="https://www.suse.com/security/cve/CVE-2019-25038" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0176-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0301-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021588.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0176-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTS3PI42CZC7TVKVUTBOIMO2PDFTABYC/" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25038/">CVE-2019-25038</cve>
	<bugzilla href="https://bugzilla.suse.com/1185389">SUSE bug 1185389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664287" comment="libunbound2-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177204" comment="libunbound2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664373" comment="unbound-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286673" comment="unbound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664288" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177205" comment="unbound-anchor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664289" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286674" comment="unbound-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664374" comment="unbound-munin-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286675" comment="unbound-munin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664375" comment="unbound-python-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286676" comment="unbound-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201925039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-25039</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-25039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25039" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-25039" ref_url="https://www.suse.com/security/cve/CVE-2019-25039" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0176-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0301-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021588.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0176-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTS3PI42CZC7TVKVUTBOIMO2PDFTABYC/" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25039/">CVE-2019-25039</cve>
	<bugzilla href="https://bugzilla.suse.com/1185390">SUSE bug 1185390</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664287" comment="libunbound2-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177204" comment="libunbound2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664373" comment="unbound-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286673" comment="unbound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664288" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177205" comment="unbound-anchor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664289" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286674" comment="unbound-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664374" comment="unbound-munin-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286675" comment="unbound-munin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664375" comment="unbound-python-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286676" comment="unbound-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2504</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2504" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2504" ref_url="https://www.suse.com/security/cve/CVE-2019-2504" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 3.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2504/">CVE-2019-2504</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201925040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-25040</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-25040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25040" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-25040" ref_url="https://www.suse.com/security/cve/CVE-2019-25040" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0176-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0301-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021588.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0176-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTS3PI42CZC7TVKVUTBOIMO2PDFTABYC/" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25040/">CVE-2019-25040</cve>
	<bugzilla href="https://bugzilla.suse.com/1185391">SUSE bug 1185391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664287" comment="libunbound2-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177204" comment="libunbound2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664373" comment="unbound-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286673" comment="unbound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664288" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177205" comment="unbound-anchor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664289" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286674" comment="unbound-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664374" comment="unbound-munin-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286675" comment="unbound-munin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664375" comment="unbound-python-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286676" comment="unbound-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201925041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-25041</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-25041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25041" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-25041" ref_url="https://www.suse.com/security/cve/CVE-2019-25041" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0176-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0301-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021588.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0176-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTS3PI42CZC7TVKVUTBOIMO2PDFTABYC/" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25041/">CVE-2019-25041</cve>
	<bugzilla href="https://bugzilla.suse.com/1185392">SUSE bug 1185392</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664287" comment="libunbound2-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177204" comment="libunbound2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664373" comment="unbound-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286673" comment="unbound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664288" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177205" comment="unbound-anchor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664289" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286674" comment="unbound-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664374" comment="unbound-munin-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286675" comment="unbound-munin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664375" comment="unbound-python-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286676" comment="unbound-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201925042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-25042</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-25042" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25042" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-25042" ref_url="https://www.suse.com/security/cve/CVE-2019-25042" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0176-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0301-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021588.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0176-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTS3PI42CZC7TVKVUTBOIMO2PDFTABYC/" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-25042/">CVE-2019-25042</cve>
	<bugzilla href="https://bugzilla.suse.com/1185393">SUSE bug 1185393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664287" comment="libunbound2-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177204" comment="libunbound2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664373" comment="unbound-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286673" comment="unbound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664288" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177205" comment="unbound-anchor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664289" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286674" comment="unbound-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664374" comment="unbound-munin-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286675" comment="unbound-munin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664375" comment="unbound-python-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286676" comment="unbound-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2505</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2505" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2505" ref_url="https://www.suse.com/security/cve/CVE-2019-2505" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 3.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2505/">CVE-2019-2505</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201925051" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-25051</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-25051" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25051" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-25051" ref_url="https://www.suse.com/security/cve/CVE-2019-25051" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009356.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1181-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KFDL4ZU73CCA7DXOG7N2VKN4DXLIO7WL/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2794-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/52SJCPNULPFJAYMPRPDX7QYNTBFA4SXP/" source="SUSE-SU"/>
    <description>
    objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-25051/">CVE-2019-25051</cve>
	<bugzilla href="https://bugzilla.suse.com/1188576">SUSE bug 1188576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189485">SUSE bug 1189485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192363">SUSE bug 1192363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193390">SUSE bug 1193390</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627846" comment="aspell-0.60.8-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631516" comment="aspell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627847" comment="aspell-devel-0.60.8-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631517" comment="aspell-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627987" comment="aspell-ispell-0.60.8-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631518" comment="aspell-ispell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627988" comment="aspell-spell-0.60.8-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631519" comment="aspell-spell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627848" comment="libaspell15-0.60.8-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631520" comment="libaspell15 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627989" comment="libaspell15-32bit-0.60.8-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631521" comment="libaspell15-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627849" comment="libpspell15-0.60.8-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631522" comment="libpspell15 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627990" comment="libpspell15-32bit-0.60.8-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631523" comment="libpspell15-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2506</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2506" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2506" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2506" ref_url="https://www.suse.com/security/cve/CVE-2019-2506" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 3.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2506/">CVE-2019-2506</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201925074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-25074</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-25074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25074" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-25074" ref_url="https://www.suse.com/security/cve/CVE-2019-25074" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012206.html" source="SUSE-SU"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-13"/>
	<updated date="2022-09-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-25074/">CVE-2019-25074</cve>
	<bugzilla href="https://bugzilla.suse.com/1202022">SUSE bug 1202022</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009709897" comment="frr-7.4-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673839" comment="frr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009709898" comment="frr-devel-7.4-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673840" comment="frr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009709899" comment="libfrr0-7.4-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673841" comment="libfrr0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009709900" comment="libfrr_pb0-7.4-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673842" comment="libfrr_pb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009709901" comment="libfrrcares0-7.4-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673843" comment="libfrrcares0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009709902" comment="libfrrfpm_pb0-7.4-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673844" comment="libfrrfpm_pb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009709903" comment="libfrrgrpc_pb0-7.4-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673845" comment="libfrrgrpc_pb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009709904" comment="libfrrospfapiclient0-7.4-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673846" comment="libfrrospfapiclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009709905" comment="libfrrsnmp0-7.4-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673847" comment="libfrrsnmp0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009709906" comment="libfrrzmq0-7.4-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673848" comment="libfrrzmq0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009709907" comment="libmlag_pb0-7.4-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673849" comment="libmlag_pb0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2508</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2508" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2508" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2508" ref_url="https://www.suse.com/security/cve/CVE-2019-2508" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2508/">CVE-2019-2508</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2509</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2509" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2509" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2509" ref_url="https://www.suse.com/security/cve/CVE-2019-2509" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2509/">CVE-2019-2509</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2510</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2510" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2510" ref_url="https://www.suse.com/security/cve/CVE-2019-2510" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005192.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005427.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2510/">CVE-2019-2510</cve>
	<bugzilla href="https://bugzilla.suse.com/1122198">SUSE bug 1122198</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2511</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2511" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2511" ref_url="https://www.suse.com/security/cve/CVE-2019-2511" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2511/">CVE-2019-2511</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192520" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2520</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2520" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2520" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2520" ref_url="https://www.suse.com/security/cve/CVE-2019-2520" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2520/">CVE-2019-2520</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2521</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2521" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2521" ref_url="https://www.suse.com/security/cve/CVE-2019-2521" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2521/">CVE-2019-2521</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2522</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2522" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2522" ref_url="https://www.suse.com/security/cve/CVE-2019-2522" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2522/">CVE-2019-2522</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2523</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2523" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2523" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2523" ref_url="https://www.suse.com/security/cve/CVE-2019-2523" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2523/">CVE-2019-2523</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2524</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2524" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2524" ref_url="https://www.suse.com/security/cve/CVE-2019-2524" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2524/">CVE-2019-2524</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2525</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2525" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2525" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2525" ref_url="https://www.suse.com/security/cve/CVE-2019-2525" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 5.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2525/">CVE-2019-2525</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2526</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2526" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2526" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2526" ref_url="https://www.suse.com/security/cve/CVE-2019-2526" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2526/">CVE-2019-2526</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192527" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2527</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2527" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2527" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2527" ref_url="https://www.suse.com/security/cve/CVE-2019-2527" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.26 and prior to 6.0.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2527/">CVE-2019-2527</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2537</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2537" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2537" ref_url="https://www.suse.com/security/cve/CVE-2019-2537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005192.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005813.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2537/">CVE-2019-2537</cve>
	<bugzilla href="https://bugzilla.suse.com/1122198">SUSE bug 1122198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136037">SUSE bug 1136037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2548</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2548" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2548" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2548" ref_url="https://www.suse.com/security/cve/CVE-2019-2548" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2548/">CVE-2019-2548</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2552</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2552" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2552" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2552" ref_url="https://www.suse.com/security/cve/CVE-2019-2552" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2552/">CVE-2019-2552</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2553</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2553" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2553" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2553" ref_url="https://www.suse.com/security/cve/CVE-2019-2553" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 3.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2553/">CVE-2019-2553</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2554</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2554" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2554" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2554" ref_url="https://www.suse.com/security/cve/CVE-2019-2554" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2554/">CVE-2019-2554</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2555</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2555" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2555" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2555" ref_url="https://www.suse.com/security/cve/CVE-2019-2555" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2555/">CVE-2019-2555</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2556</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2556" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2556" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2556" ref_url="https://www.suse.com/security/cve/CVE-2019-2556" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2556/">CVE-2019-2556</cve>
	<bugzilla href="https://bugzilla.suse.com/1122212">SUSE bug 1122212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2574</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2574" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2574" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2574" ref_url="https://www.suse.com/security/cve/CVE-2019-2574" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2574/">CVE-2019-2574</cve>
	<bugzilla href="https://bugzilla.suse.com/1132827">SUSE bug 1132827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2602</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2602" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2602" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2602" ref_url="https://www.suse.com/security/cve/CVE-2019-2602" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005437.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1211-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1308-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005485.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1308-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005493.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1644-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005616.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1439-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1500-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2602/">CVE-2019-2602</cve>
	<bugzilla href="https://bugzilla.suse.com/1132728">SUSE bug 1132728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134718">SUSE bug 1134718</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192614" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2614</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2614" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2614" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2614" ref_url="https://www.suse.com/security/cve/CVE-2019-2614" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2020-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005758.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2330-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005890.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2867-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192867-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006248.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1913-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1915-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2614/">CVE-2019-2614</cve>
	<bugzilla href="https://bugzilla.suse.com/1132826">SUSE bug 1132826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136035">SUSE bug 1136035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141798">SUSE bug 1141798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2627</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2627" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2627" ref_url="https://www.suse.com/security/cve/CVE-2019-2627" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2020-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005758.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2330-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005890.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2867-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192867-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006248.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1913-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1915-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2627/">CVE-2019-2627</cve>
	<bugzilla href="https://bugzilla.suse.com/1132826">SUSE bug 1132826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136035">SUSE bug 1136035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141798">SUSE bug 1141798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192628" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2628</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2628" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2628" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2628" ref_url="https://www.suse.com/security/cve/CVE-2019-2628" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2020-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005758.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2330-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005890.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2867-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192867-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006248.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1913-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1915-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2628/">CVE-2019-2628</cve>
	<bugzilla href="https://bugzilla.suse.com/1136035">SUSE bug 1136035</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192656" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2656</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2656" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2656" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2656" ref_url="https://www.suse.com/security/cve/CVE-2019-2656" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2656/">CVE-2019-2656</cve>
	<bugzilla href="https://bugzilla.suse.com/1132827">SUSE bug 1132827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192657" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2657</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2657" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2657" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2657" ref_url="https://www.suse.com/security/cve/CVE-2019-2657" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2657/">CVE-2019-2657</cve>
	<bugzilla href="https://bugzilla.suse.com/1132827">SUSE bug 1132827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2678</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2678" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2678" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2678" ref_url="https://www.suse.com/security/cve/CVE-2019-2678" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2678/">CVE-2019-2678</cve>
	<bugzilla href="https://bugzilla.suse.com/1132827">SUSE bug 1132827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192679" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2679</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2679" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2679" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2679" ref_url="https://www.suse.com/security/cve/CVE-2019-2679" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2679/">CVE-2019-2679</cve>
	<bugzilla href="https://bugzilla.suse.com/1132827">SUSE bug 1132827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192680" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2680</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2680" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2680" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2680" ref_url="https://www.suse.com/security/cve/CVE-2019-2680" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2680/">CVE-2019-2680</cve>
	<bugzilla href="https://bugzilla.suse.com/1132827">SUSE bug 1132827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192684" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2684</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2684" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2684" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2684" ref_url="https://www.suse.com/security/cve/CVE-2019-2684" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005437.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1211-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1308-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005485.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1308-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005493.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1644-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005616.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1439-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1500-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-2684/">CVE-2019-2684</cve>
	<bugzilla href="https://bugzilla.suse.com/1132732">SUSE bug 1132732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134718">SUSE bug 1134718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184734">SUSE bug 1184734</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2690</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2690" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2690" ref_url="https://www.suse.com/security/cve/CVE-2019-2690" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2690/">CVE-2019-2690</cve>
	<bugzilla href="https://bugzilla.suse.com/1132827">SUSE bug 1132827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2696</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2696" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2696" ref_url="https://www.suse.com/security/cve/CVE-2019-2696" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2696/">CVE-2019-2696</cve>
	<bugzilla href="https://bugzilla.suse.com/1132827">SUSE bug 1132827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192703" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2703</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2703" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2703" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2703" ref_url="https://www.suse.com/security/cve/CVE-2019-2703" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2703/">CVE-2019-2703</cve>
	<bugzilla href="https://bugzilla.suse.com/1132827">SUSE bug 1132827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2708</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2708" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2708" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2708" ref_url="https://www.suse.com/security/cve/CVE-2019-2708" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013108.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013158.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Data Store. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-25"/>
	<updated date="2022-11-30"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2708/">CVE-2019-2708</cve>
	<bugzilla href="https://bugzilla.suse.com/1174414">SUSE bug 1174414</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725447" comment="db48-doc-4.8.30-150000.7.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009726772" comment="db48-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725448" comment="db48-utils-4.8.30-150000.7.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009726773" comment="db48-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725449" comment="libdb-4_8-4.8.30-150000.7.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009726774" comment="libdb-4_8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725450" comment="libdb-4_8-32bit-4.8.30-150000.7.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009726775" comment="libdb-4_8-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725451" comment="libdb-4_8-devel-4.8.30-150000.7.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009726776" comment="libdb-4_8-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725452" comment="libdb-4_8-devel-32bit-4.8.30-150000.7.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009726777" comment="libdb-4_8-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725453" comment="libdb_java-4_8-4.8.30-150000.7.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009726778" comment="libdb_java-4_8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725454" comment="libdb_java-4_8-devel-4.8.30-150000.7.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009726779" comment="libdb_java-4_8-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2721</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2721" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2721" ref_url="https://www.suse.com/security/cve/CVE-2019-2721" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2721/">CVE-2019-2721</cve>
	<bugzilla href="https://bugzilla.suse.com/1132827">SUSE bug 1132827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2722</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2722" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2722" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2722" ref_url="https://www.suse.com/security/cve/CVE-2019-2722" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2722/">CVE-2019-2722</cve>
	<bugzilla href="https://bugzilla.suse.com/1132827">SUSE bug 1132827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192723" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2723</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2723" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2723" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2723" ref_url="https://www.suse.com/security/cve/CVE-2019-2723" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2723/">CVE-2019-2723</cve>
	<bugzilla href="https://bugzilla.suse.com/1132827">SUSE bug 1132827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2737</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2737" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2737" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2737" ref_url="https://www.suse.com/security/cve/CVE-2019-2737" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006262.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3369-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193369-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006654.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00037.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2737/">CVE-2019-2737</cve>
	<bugzilla href="https://bugzilla.suse.com/1132826">SUSE bug 1132826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141798">SUSE bug 1141798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156669">SUSE bug 1156669</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2739</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2739" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2739" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2739" ref_url="https://www.suse.com/security/cve/CVE-2019-2739" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006262.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3369-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193369-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006654.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00037.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-2739/">CVE-2019-2739</cve>
	<bugzilla href="https://bugzilla.suse.com/1132826">SUSE bug 1132826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141798">SUSE bug 1141798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156669">SUSE bug 1156669</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2740</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2740" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2740" ref_url="https://www.suse.com/security/cve/CVE-2019-2740" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006262.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3369-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193369-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006654.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00037.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2740/">CVE-2019-2740</cve>
	<bugzilla href="https://bugzilla.suse.com/1132826">SUSE bug 1132826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141798">SUSE bug 1141798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156669">SUSE bug 1156669</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2745</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2745" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2745" ref_url="https://www.suse.com/security/cve/CVE-2019-2745" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2002-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192002-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005760.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2028-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005762.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2036-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005767.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2036-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005820.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1916-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2745/">CVE-2019-2745</cve>
	<bugzilla href="https://bugzilla.suse.com/1141784">SUSE bug 1141784</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2758</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2758" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2758" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2758" ref_url="https://www.suse.com/security/cve/CVE-2019-2758" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006262.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3369-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193369-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006654.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00037.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-2758/">CVE-2019-2758</cve>
	<bugzilla href="https://bugzilla.suse.com/1141798">SUSE bug 1141798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156669">SUSE bug 1156669</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2762</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2762" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2762" ref_url="https://www.suse.com/security/cve/CVE-2019-2762" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14160-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2002-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192002-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005760.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2028-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005762.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2036-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005767.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2036-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2291-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192291-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005896.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2371-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192371-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1916-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2762/">CVE-2019-2762</cve>
	<bugzilla href="https://bugzilla.suse.com/1141782">SUSE bug 1141782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1147021">SUSE bug 1147021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2766</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2766" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2766" ref_url="https://www.suse.com/security/cve/CVE-2019-2766" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14160-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2002-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192002-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005760.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2028-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005762.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2036-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005767.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2036-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2291-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192291-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005896.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2371-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192371-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1916-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2766/">CVE-2019-2766</cve>
	<bugzilla href="https://bugzilla.suse.com/1141789">SUSE bug 1141789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1147021">SUSE bug 1147021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2769</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2769" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2769" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2769" ref_url="https://www.suse.com/security/cve/CVE-2019-2769" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14160-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2002-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192002-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005760.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2028-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005762.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2036-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005767.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2036-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2291-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192291-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005896.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2371-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192371-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1916-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2769/">CVE-2019-2769</cve>
	<bugzilla href="https://bugzilla.suse.com/1141783">SUSE bug 1141783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1147021">SUSE bug 1147021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192786" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2786</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2786" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2786" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2786" ref_url="https://www.suse.com/security/cve/CVE-2019-2786" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2002-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192002-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005760.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2028-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005762.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2036-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005767.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2036-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2291-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192291-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2371-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192371-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1916-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2786/">CVE-2019-2786</cve>
	<bugzilla href="https://bugzilla.suse.com/1141787">SUSE bug 1141787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1147021">SUSE bug 1147021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2805</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2805" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2805" ref_url="https://www.suse.com/security/cve/CVE-2019-2805" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006262.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3369-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193369-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006654.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00037.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2805/">CVE-2019-2805</cve>
	<bugzilla href="https://bugzilla.suse.com/1132826">SUSE bug 1132826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141798">SUSE bug 1141798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156669">SUSE bug 1156669</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2816</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2816" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2816" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2816" ref_url="https://www.suse.com/security/cve/CVE-2019-2816" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14160-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2002-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192002-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005760.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2028-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005762.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2036-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005767.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2036-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2291-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192291-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005896.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2371-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192371-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1916-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-2816/">CVE-2019-2816</cve>
	<bugzilla href="https://bugzilla.suse.com/1141785">SUSE bug 1141785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1147021">SUSE bug 1147021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2818</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2818" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2818" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2818" ref_url="https://www.suse.com/security/cve/CVE-2019-2818" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2002-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192002-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1916-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2818/">CVE-2019-2818</cve>
	<bugzilla href="https://bugzilla.suse.com/1141788">SUSE bug 1141788</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2821</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2821" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2821" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2821" ref_url="https://www.suse.com/security/cve/CVE-2019-2821" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2002-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192002-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1916-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2821/">CVE-2019-2821</cve>
	<bugzilla href="https://bugzilla.suse.com/1141781">SUSE bug 1141781</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2848</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2848" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2848" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2848" ref_url="https://www.suse.com/security/cve/CVE-2019-2848" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2848/">CVE-2019-2848</cve>
	<bugzilla href="https://bugzilla.suse.com/1141801">SUSE bug 1141801</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192850" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2850</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2850" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2850" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2850" ref_url="https://www.suse.com/security/cve/CVE-2019-2850" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 2.8 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2850/">CVE-2019-2850</cve>
	<bugzilla href="https://bugzilla.suse.com/1141801">SUSE bug 1141801</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192859" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2859</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2859" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2859" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2859" ref_url="https://www.suse.com/security/cve/CVE-2019-2859" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2859/">CVE-2019-2859</cve>
	<bugzilla href="https://bugzilla.suse.com/1141801">SUSE bug 1141801</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2863</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2863" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2863" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2863" ref_url="https://www.suse.com/security/cve/CVE-2019-2863" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2863/">CVE-2019-2863</cve>
	<bugzilla href="https://bugzilla.suse.com/1141801">SUSE bug 1141801</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2864</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2864" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2864" ref_url="https://www.suse.com/security/cve/CVE-2019-2864" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2864/">CVE-2019-2864</cve>
	<bugzilla href="https://bugzilla.suse.com/1141801">SUSE bug 1141801</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192865" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2865</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2865" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2865" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2865" ref_url="https://www.suse.com/security/cve/CVE-2019-2865" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2865/">CVE-2019-2865</cve>
	<bugzilla href="https://bugzilla.suse.com/1141801">SUSE bug 1141801</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2866</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2866" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2866" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2866" ref_url="https://www.suse.com/security/cve/CVE-2019-2866" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2866/">CVE-2019-2866</cve>
	<bugzilla href="https://bugzilla.suse.com/1141801">SUSE bug 1141801</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2867</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2867" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2867" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2867" ref_url="https://www.suse.com/security/cve/CVE-2019-2867" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2867/">CVE-2019-2867</cve>
	<bugzilla href="https://bugzilla.suse.com/1141801">SUSE bug 1141801</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192873" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2873</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2873" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2873" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2873" ref_url="https://www.suse.com/security/cve/CVE-2019-2873" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2873/">CVE-2019-2873</cve>
	<bugzilla href="https://bugzilla.suse.com/1141801">SUSE bug 1141801</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192874" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2874</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2874" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2874" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2874" ref_url="https://www.suse.com/security/cve/CVE-2019-2874" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2874/">CVE-2019-2874</cve>
	<bugzilla href="https://bugzilla.suse.com/1141801">SUSE bug 1141801</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192875" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2875</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2875" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2875" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2875" ref_url="https://www.suse.com/security/cve/CVE-2019-2875" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2875/">CVE-2019-2875</cve>
	<bugzilla href="https://bugzilla.suse.com/1141801">SUSE bug 1141801</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192876" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2876</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2876" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2876" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2876" ref_url="https://www.suse.com/security/cve/CVE-2019-2876" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2876/">CVE-2019-2876</cve>
	<bugzilla href="https://bugzilla.suse.com/1141801">SUSE bug 1141801</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192877" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2877</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2877" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2877" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2877" ref_url="https://www.suse.com/security/cve/CVE-2019-2877" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2877/">CVE-2019-2877</cve>
	<bugzilla href="https://bugzilla.suse.com/1141801">SUSE bug 1141801</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192894" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2894</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2894" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2894" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2894" ref_url="https://www.suse.com/security/cve/CVE-2019-2894" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2894/">CVE-2019-2894</cve>
	<bugzilla href="https://bugzilla.suse.com/1152856">SUSE bug 1152856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192926" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2926</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2926" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2926" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2926" ref_url="https://www.suse.com/security/cve/CVE-2019-2926" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 2.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2926/">CVE-2019-2926</cve>
	<bugzilla href="https://bugzilla.suse.com/1154166">SUSE bug 1154166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192933" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2933</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2933" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2933" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2933" ref_url="https://www.suse.com/security/cve/CVE-2019-2933" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0051-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200051-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2933/">CVE-2019-2933</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158442">SUSE bug 1158442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192938" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2938</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2938" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2938" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2938" ref_url="https://www.suse.com/security/cve/CVE-2019-2938" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006262.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3369-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193369-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006654.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00037.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2938/">CVE-2019-2938</cve>
	<bugzilla href="https://bugzilla.suse.com/1154162">SUSE bug 1154162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156669">SUSE bug 1156669</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2944</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2944" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2944" ref_url="https://www.suse.com/security/cve/CVE-2019-2944" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-2944/">CVE-2019-2944</cve>
	<bugzilla href="https://bugzilla.suse.com/1154166">SUSE bug 1154166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2945</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2945" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2945" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2945" ref_url="https://www.suse.com/security/cve/CVE-2019-2945" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0051-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200051-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2945/">CVE-2019-2945</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158442">SUSE bug 1158442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192949" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2949</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2949" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2949" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2949" ref_url="https://www.suse.com/security/cve/CVE-2019-2949" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006985.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2949/">CVE-2019-2949</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172277">SUSE bug 1172277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2958</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2958" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2958" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2958" ref_url="https://www.suse.com/security/cve/CVE-2019-2958" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-2958/">CVE-2019-2958</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158442">SUSE bug 1158442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2962</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2962" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2962" ref_url="https://www.suse.com/security/cve/CVE-2019-2962" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0051-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200051-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2962/">CVE-2019-2962</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158442">SUSE bug 1158442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2964</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2964" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2964" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2964" ref_url="https://www.suse.com/security/cve/CVE-2019-2964" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0051-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200051-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2964/">CVE-2019-2964</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158442">SUSE bug 1158442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2973</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2973" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2973" ref_url="https://www.suse.com/security/cve/CVE-2019-2973" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0051-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200051-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2973/">CVE-2019-2973</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158442">SUSE bug 1158442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2974</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2974" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2974" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2974" ref_url="https://www.suse.com/security/cve/CVE-2019-2974" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006262.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3369-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193369-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3370-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006279.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0050-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200050-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006654.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00037.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2974/">CVE-2019-2974</cve>
	<bugzilla href="https://bugzilla.suse.com/1154162">SUSE bug 1154162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156669">SUSE bug 1156669</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2975</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2975" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2975" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2975" ref_url="https://www.suse.com/security/cve/CVE-2019-2975" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-2975/">CVE-2019-2975</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158442">SUSE bug 1158442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2977</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2977" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2977" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2977" ref_url="https://www.suse.com/security/cve/CVE-2019-2977" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.8 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2977/">CVE-2019-2977</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2978</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2978" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2978" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2978" ref_url="https://www.suse.com/security/cve/CVE-2019-2978" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0051-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200051-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2978/">CVE-2019-2978</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158442">SUSE bug 1158442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192981" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2981</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2981" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2981" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2981" ref_url="https://www.suse.com/security/cve/CVE-2019-2981" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0051-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200051-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2981/">CVE-2019-2981</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158442">SUSE bug 1158442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2983</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2983" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2983" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2983" ref_url="https://www.suse.com/security/cve/CVE-2019-2983" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0051-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200051-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2983/">CVE-2019-2983</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158442">SUSE bug 1158442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2984</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2984" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2984" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2984" ref_url="https://www.suse.com/security/cve/CVE-2019-2984" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.0 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2984/">CVE-2019-2984</cve>
	<bugzilla href="https://bugzilla.suse.com/1154166">SUSE bug 1154166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192987" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2987</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2987" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2987" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2987" ref_url="https://www.suse.com/security/cve/CVE-2019-2987" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2987/">CVE-2019-2987</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2988</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2988" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2988" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2988" ref_url="https://www.suse.com/security/cve/CVE-2019-2988" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2988/">CVE-2019-2988</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158442">SUSE bug 1158442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192989" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2989</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2989" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2989" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2989" ref_url="https://www.suse.com/security/cve/CVE-2019-2989" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0051-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200051-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS v3.0 Base Score 6.8 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-2989/">CVE-2019-2989</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158442">SUSE bug 1158442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2992</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2992" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2992" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2992" ref_url="https://www.suse.com/security/cve/CVE-2019-2992" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0051-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200051-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2992/">CVE-2019-2992</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158442">SUSE bug 1158442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20192999" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-2999</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-2999" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2999" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-2999" ref_url="https://www.suse.com/security/cve/CVE-2019-2999" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0051-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200051-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006314.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-2999/">CVE-2019-2999</cve>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158442">SUSE bug 1158442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3002</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3002" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3002" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3002" ref_url="https://www.suse.com/security/cve/CVE-2019-3002" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.0 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3002/">CVE-2019-3002</cve>
	<bugzilla href="https://bugzilla.suse.com/1154166">SUSE bug 1154166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3005</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3005" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3005" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3005" ref_url="https://www.suse.com/security/cve/CVE-2019-3005" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.0 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3005/">CVE-2019-3005</cve>
	<bugzilla href="https://bugzilla.suse.com/1154166">SUSE bug 1154166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193016" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3016</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3016" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3016" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3016" ref_url="https://www.suse.com/security/cve/CVE-2019-3016" source="SUSE CVE"/>
    <description>
    In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest. This problem is limit to the host running linux kernel 4.10 with a guest running linux kernel 4.16 or later. The problem mainly affects AMD processors but Intel CPUs cannot be ruled out.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-3016/">CVE-2019-3016</cve>
	<bugzilla href="https://bugzilla.suse.com/1161154">SUSE bug 1161154</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193017" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3017</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3017" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3017" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3017" ref_url="https://www.suse.com/security/cve/CVE-2019-3017" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3017/">CVE-2019-3017</cve>
	<bugzilla href="https://bugzilla.suse.com/1154166">SUSE bug 1154166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3021</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3021" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3021" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3021" ref_url="https://www.suse.com/security/cve/CVE-2019-3021" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3021/">CVE-2019-3021</cve>
	<bugzilla href="https://bugzilla.suse.com/1154166">SUSE bug 1154166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3026</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3026" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3026" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3026" ref_url="https://www.suse.com/security/cve/CVE-2019-3026" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-3026/">CVE-2019-3026</cve>
	<bugzilla href="https://bugzilla.suse.com/1154166">SUSE bug 1154166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3028</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3028" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3028" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3028" ref_url="https://www.suse.com/security/cve/CVE-2019-3028" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3028/">CVE-2019-3028</cve>
	<bugzilla href="https://bugzilla.suse.com/1154166">SUSE bug 1154166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3031</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3031" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3031" ref_url="https://www.suse.com/security/cve/CVE-2019-3031" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-3031/">CVE-2019-3031</cve>
	<bugzilla href="https://bugzilla.suse.com/1154166">SUSE bug 1154166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3500</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3500" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3500" ref_url="https://www.suse.com/security/cve/CVE-2019-3500" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1125-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/X3RWOJOX6LLCQBYIEUS2KKAEEPLXW6WP/" source="SUSE-SU"/>
    <description>
    aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3500/">CVE-2019-3500</cve>
	<bugzilla href="https://bugzilla.suse.com/1120488">SUSE bug 1120488</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630374" comment="aria2-1.35.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151348" comment="aria2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630375" comment="aria2-devel-1.35.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243009" comment="aria2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630376" comment="aria2-lang-1.35.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151349" comment="aria2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630377" comment="libaria2-0-1.35.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154087" comment="libaria2-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3687</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3687" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3687" ref_url="https://www.suse.com/security/cve/CVE-2019-3687" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006559.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006556.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1520-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CDE67H3SKCA2N6SED6KU5T3MBX3UVI6N/" source="SUSE-SU"/>
    <description>
    The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710bda34bc21c80c66276119aa.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-3687/">CVE-2019-3687</cve>
	<bugzilla href="https://bugzilla.suse.com/1148788">SUSE bug 1148788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180102">SUSE bug 1180102</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009619692" comment="permissions-20181225-23.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009273426" comment="permissions is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658913" comment="permissions-zypp-plugin-20200127-lp153.24.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009273427" comment="permissions-zypp-plugin is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3688</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3688" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3688" ref_url="https://www.suse.com/security/cve/CVE-2019-3688" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006211.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006772.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009118.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1520-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CDE67H3SKCA2N6SED6KU5T3MBX3UVI6N/" source="SUSE-SU"/>
    <description>
    The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-3688/">CVE-2019-3688</cve>
	<bugzilla href="https://bugzilla.suse.com/1093414">SUSE bug 1093414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149108">SUSE bug 1149108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009619692" comment="permissions-20181225-23.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009273426" comment="permissions is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658913" comment="permissions-zypp-plugin-20200127-lp153.24.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009273427" comment="permissions-zypp-plugin is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3689</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3689" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3689" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3689" ref_url="https://www.suse.com/security/cve/CVE-2019-3689" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2776-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192776-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2781-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192781-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2435-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00006.html" source="SUSE-SU"/>
    <description>
    The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3689/">CVE-2019-3689</cve>
	<bugzilla href="https://bugzilla.suse.com/1150733">SUSE bug 1150733</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694902" comment="nfs-client-2.1.1-10.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009269093" comment="nfs-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694903" comment="nfs-kernel-server-2.1.1-10.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009269095" comment="nfs-kernel-server is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3690</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3690" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3690" ref_url="https://www.suse.com/security/cve/CVE-2019-3690" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006211.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006772.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009118.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00024.html" source="SUSE-SU"/>
    <description>
    The chkstat tool in the permissions package followed symlinks before commit a9e1d26cd49ef9ee0c2060c859321128a6dd4230 (please also check the additional hardenings after this fix). This allowed local attackers with control over a path that is traversed by chkstat to escalate privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-3690/">CVE-2019-3690</cve>
	<bugzilla href="https://bugzilla.suse.com/1148336">SUSE bug 1148336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150734">SUSE bug 1150734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157880">SUSE bug 1157880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157883">SUSE bug 1157883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160594">SUSE bug 1160594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160764">SUSE bug 1160764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163922">SUSE bug 1163922</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694909" comment="permissions-20181225-23.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009273426" comment="permissions is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193700" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3700</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3700" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3700" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3700" ref_url="https://www.suse.com/security/cve/CVE-2019-3700" source="SUSE CVE"/>
    <description>
    yast2-security didn't use secure defaults to protect passwords. This became a problem on 2019-10-07 when configuration files that set secure settings were moved to a different location. As of the 20191022 snapshot the insecure default settings were used until yast2-security switched to stronger defaults in 4.2.6 and used the new configuration file locations. Password created during this time used DES password encryption and are not properly protected against attackers that are able to access the password hashes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-3700/">CVE-2019-3700</cve>
	<bugzilla href="https://bugzilla.suse.com/1157465">SUSE bug 1157465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157541">SUSE bug 1157541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629060" comment="yast2-security-4.3.16-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695695" comment="yast2-security is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3813</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3813" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3813" ref_url="https://www.suse.com/security/cve/CVE-2019-3813" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0229-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0231-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005405.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13943-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005094.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3813/">CVE-2019-3813</cve>
	<bugzilla href="https://bugzilla.suse.com/1122706">SUSE bug 1122706</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629866" comment="libspice-server1-0.14.3-1.48 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3820</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3820" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3820" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3820" ref_url="https://www.suse.com/security/cve/CVE-2019-3820" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1390-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1459-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005547.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1529-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00049.html" source="SUSE-SU"/>
    <description>
    It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-3820/">CVE-2019-3820</cve>
	<bugzilla href="https://bugzilla.suse.com/1124493">SUSE bug 1124493</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629143" comment="gnome-shell-3.34.5-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151510" comment="gnome-shell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684231" comment="gnome-shell-calendar-3.34.5-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151512" comment="gnome-shell-calendar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629145" comment="gnome-shell-lang-3.34.5-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151513" comment="gnome-shell-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3821</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3821" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3821" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3821" ref_url="https://www.suse.com/security/cve/CVE-2019-3821" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005774.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled. An unauthenticated attacker could create multiple connections to ceph RADOS gateway to exhaust file descriptors for ceph-radosgw service resulting in a remote denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3821/">CVE-2019-3821</cve>
	<bugzilla href="https://bugzilla.suse.com/1125080">SUSE bug 1125080</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694875" comment="librados2-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694876" comment="librbd1-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3822</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3822" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3822" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3822" ref_url="https://www.suse.com/security/cve/CVE-2019-3822" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0249-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005327.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005111.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00023.html" source="SUSE-SU"/>
    <description>
    libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 header (`lib/vauth/ntlm.c:Curl_auth_create_ntlm_type3_message()`), generates the request HTTP header contents based on previously received data. The check that exists to prevent the local buffer from getting overflowed is implemented wrongly (using unsigned math) and as such it does not prevent the overflow from happening. This output data can grow larger than the local buffer if very large 'nt response' data is extracted from a previous NTLMv2 header provided by the malicious or broken HTTP server. Such a 'large value' needs to be around 1000 bytes or more. The actual payload data copied to the target buffer comes from the NTLMv2 type-2 response header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3822/">CVE-2019-3822</cve>
	<bugzilla href="https://bugzilla.suse.com/1123377">SUSE bug 1123377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141798">SUSE bug 1141798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3823</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3823" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3823" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3823" ref_url="https://www.suse.com/security/cve/CVE-2019-3823" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0249-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005327.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005111.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00023.html" source="SUSE-SU"/>
    <description>
    libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to `smtp_endofresp()` isn't NUL terminated and contains no character ending the parsed number, and `len` is set to 5, then the `strtol()` call reads beyond the allocated buffer. The read contents will not be returned to the caller.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-3823/">CVE-2019-3823</cve>
	<bugzilla href="https://bugzilla.suse.com/1123378">SUSE bug 1123378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141798">SUSE bug 1141798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3824</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3824" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3824" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3824" ref_url="https://www.suse.com/security/cve/CVE-2019-3824" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0639-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190639-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1163-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00035.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3824/">CVE-2019-3824</cve>
	<bugzilla href="https://bugzilla.suse.com/1125410">SUSE bug 1125410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130703">SUSE bug 1130703</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628548" comment="libldb2-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291435" comment="libldb2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628549" comment="libldb2-32bit-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291436" comment="libldb2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628550" comment="python3-ldb-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247520" comment="python3-ldb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3825</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3825" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3825" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3825" ref_url="https://www.suse.com/security/cve/CVE-2019-3825" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00017.html" source="SUSE-SU"/>
    <description>
    A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3825/">CVE-2019-3825</cve>
	<bugzilla href="https://bugzilla.suse.com/1124628">SUSE bug 1124628</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694740" comment="gdm-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151581" comment="gdm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694741" comment="gdm-lang-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151582" comment="gdm-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694742" comment="gdmflexiserver-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151583" comment="gdmflexiserver is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694743" comment="libgdm1-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151584" comment="libgdm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694744" comment="typelib-1_0-Gdm-1_0-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151585" comment="typelib-1_0-Gdm-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3827</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3827" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3827" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3827" ref_url="https://www.suse.com/security/cve/CVE-2019-3827" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005137.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00072.html" source="SUSE-SU"/>
    <description>
    An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running under privileges of users belonging to the wheel group to further escalate its privileges by modifying system files without user's knowledge. Successful exploitation requires uncommon system configuration.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-3827/">CVE-2019-3827</cve>
	<bugzilla href="https://bugzilla.suse.com/1125084">SUSE bug 1125084</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487297" comment="gvfs-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245313" comment="gvfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487298" comment="gvfs-backend-afc-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245315" comment="gvfs-backend-afc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487299" comment="gvfs-backend-samba-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245316" comment="gvfs-backend-samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487300" comment="gvfs-backends-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245317" comment="gvfs-backends is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487302" comment="gvfs-fuse-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245319" comment="gvfs-fuse is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487303" comment="gvfs-lang-1.42.2-4.24 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245320" comment="gvfs-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3829</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3829" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3829" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3829" ref_url="https://www.suse.com/security/cve/CVE-2019-3829" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005414.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1353-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00017.html" source="SUSE-SU"/>
    <description>
    A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or later is affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3829/">CVE-2019-3829</cve>
	<bugzilla href="https://bugzilla.suse.com/1130681">SUSE bug 1130681</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628489" comment="gnutls-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628491" comment="libgnutls30-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177128" comment="libgnutls30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628492" comment="libgnutls30-32bit-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009235745" comment="libgnutls30-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3835</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3835" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3835" ref_url="https://www.suse.com/security/cve/CVE-2019-3835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005970.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html" source="SUSE-SU"/>
    <description>
    It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3835/">CVE-2019-3835</cve>
	<bugzilla href="https://bugzilla.suse.com/1129180">SUSE bug 1129180</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3836</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3836" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3836" ref_url="https://www.suse.com/security/cve/CVE-2019-3836" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005414.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1353-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00017.html" source="SUSE-SU"/>
    <description>
    It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3836/">CVE-2019-3836</cve>
	<bugzilla href="https://bugzilla.suse.com/1130682">SUSE bug 1130682</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628489" comment="gnutls-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628491" comment="libgnutls30-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177128" comment="libgnutls30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628492" comment="libgnutls30-32bit-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009235745" comment="libgnutls30-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3838</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3838" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3838" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3838" ref_url="https://www.suse.com/security/cve/CVE-2019-3838" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005228.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1121-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00018.html" source="SUSE-SU"/>
    <description>
    It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3838/">CVE-2019-3838</cve>
	<bugzilla href="https://bugzilla.suse.com/1018128">SUSE bug 1018128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030263">SUSE bug 1030263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1032135">SUSE bug 1032135</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038835">SUSE bug 1038835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050888">SUSE bug 1050888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050889">SUSE bug 1050889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106171">SUSE bug 1106171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106172">SUSE bug 1106172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106173">SUSE bug 1106173</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107422">SUSE bug 1107422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107423">SUSE bug 1107423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107581">SUSE bug 1107581</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111479">SUSE bug 1111479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112229">SUSE bug 1112229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114495">SUSE bug 1114495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117022">SUSE bug 1117022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117327">SUSE bug 1117327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118318">SUSE bug 1118318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129180">SUSE bug 1129180</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129186">SUSE bug 1129186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136756">SUSE bug 1136756</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3842</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3842" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3842" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3842" ref_url="https://www.suse.com/security/cve/CVE-2019-3842" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1364-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005509.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1364-2" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20191364-2.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html" source="SUSE-SU"/>
    <description>
    In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-3842/">CVE-2019-3842</cve>
	<bugzilla href="https://bugzilla.suse.com/1132348">SUSE bug 1132348</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3843</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3843" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3843" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3843" ref_url="https://www.suse.com/security/cve/CVE-2019-3843" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1364-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005509.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1364-2" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20191364-2.html" source="SUSE-SU"/>
    <description>
    It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-3843/">CVE-2019-3843</cve>
	<bugzilla href="https://bugzilla.suse.com/1133506">SUSE bug 1133506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3844</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3844" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3844" ref_url="https://www.suse.com/security/cve/CVE-2019-3844" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1364-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005509.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1364-2" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20191364-2.html" source="SUSE-SU"/>
    <description>
    It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the GID will be recycled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-3844/">CVE-2019-3844</cve>
	<bugzilla href="https://bugzilla.suse.com/1133509">SUSE bug 1133509</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3855</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3855" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3855" ref_url="https://www.suse.com/security/cve/CVE-2019-3855" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13982-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913982-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1075-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1109-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2126-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VZ5CXNJKJVQFPMHVDXDS6F67TKZ3TJ7E/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HAQH2P56QS5PVJGYRATVMCCAWSF5JABQ/" source="SUSE-SU"/>
    <description>
    An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3855/">CVE-2019-3855</cve>
	<bugzilla href="https://bugzilla.suse.com/1128471">SUSE bug 1128471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134329">SUSE bug 1134329</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135434">SUSE bug 1135434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141850">SUSE bug 1141850</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628874" comment="libssh2-1-1.9.0-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152658" comment="libssh2-1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193856" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3856</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3856" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3856" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3856" ref_url="https://www.suse.com/security/cve/CVE-2019-3856" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13982-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913982-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1075-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1109-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2126-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VZ5CXNJKJVQFPMHVDXDS6F67TKZ3TJ7E/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HAQH2P56QS5PVJGYRATVMCCAWSF5JABQ/" source="SUSE-SU"/>
    <description>
    An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3856/">CVE-2019-3856</cve>
	<bugzilla href="https://bugzilla.suse.com/1128472">SUSE bug 1128472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135434">SUSE bug 1135434</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628874" comment="libssh2-1-1.9.0-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152658" comment="libssh2-1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193857" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3857</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3857" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3857" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3857" ref_url="https://www.suse.com/security/cve/CVE-2019-3857" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13982-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913982-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1075-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1109-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2126-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VZ5CXNJKJVQFPMHVDXDS6F67TKZ3TJ7E/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HAQH2P56QS5PVJGYRATVMCCAWSF5JABQ/" source="SUSE-SU"/>
    <description>
    An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3857/">CVE-2019-3857</cve>
	<bugzilla href="https://bugzilla.suse.com/1128474">SUSE bug 1128474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135434">SUSE bug 1135434</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628874" comment="libssh2-1-1.9.0-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152658" comment="libssh2-1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3858</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3858" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3858" ref_url="https://www.suse.com/security/cve/CVE-2019-3858" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13982-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913982-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1075-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1109-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2126-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VZ5CXNJKJVQFPMHVDXDS6F67TKZ3TJ7E/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HAQH2P56QS5PVJGYRATVMCCAWSF5JABQ/" source="SUSE-SU"/>
    <description>
    An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3858/">CVE-2019-3858</cve>
	<bugzilla href="https://bugzilla.suse.com/1128476">SUSE bug 1128476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135434">SUSE bug 1135434</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628874" comment="libssh2-1-1.9.0-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152658" comment="libssh2-1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193859" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3859</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3859" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3859" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3859" ref_url="https://www.suse.com/security/cve/CVE-2019-3859" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005377.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13982-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913982-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14031-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1075-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1109-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00103.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2126-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VZ5CXNJKJVQFPMHVDXDS6F67TKZ3TJ7E/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HAQH2P56QS5PVJGYRATVMCCAWSF5JABQ/" source="SUSE-SU"/>
    <description>
    An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3859/">CVE-2019-3859</cve>
	<bugzilla href="https://bugzilla.suse.com/1128480">SUSE bug 1128480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130103">SUSE bug 1130103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135434">SUSE bug 1135434</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628874" comment="libssh2-1-1.9.0-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152658" comment="libssh2-1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193860" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3860</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3860" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3860" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3860" ref_url="https://www.suse.com/security/cve/CVE-2019-3860" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13982-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913982-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14099-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1606-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1075-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1109-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2126-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VZ5CXNJKJVQFPMHVDXDS6F67TKZ3TJ7E/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HAQH2P56QS5PVJGYRATVMCCAWSF5JABQ/" source="SUSE-SU"/>
    <description>
    An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3860/">CVE-2019-3860</cve>
	<bugzilla href="https://bugzilla.suse.com/1128481">SUSE bug 1128481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135434">SUSE bug 1135434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136570">SUSE bug 1136570</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628874" comment="libssh2-1-1.9.0-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152658" comment="libssh2-1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193861" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3861</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3861" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3861" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3861" ref_url="https://www.suse.com/security/cve/CVE-2019-3861" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13982-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913982-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1075-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1109-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2126-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VZ5CXNJKJVQFPMHVDXDS6F67TKZ3TJ7E/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HAQH2P56QS5PVJGYRATVMCCAWSF5JABQ/" source="SUSE-SU"/>
    <description>
    An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-04"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-3861/">CVE-2019-3861</cve>
	<bugzilla href="https://bugzilla.suse.com/1128490">SUSE bug 1128490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135434">SUSE bug 1135434</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628874" comment="libssh2-1-1.9.0-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152658" comment="libssh2-1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3862</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3862" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3862" ref_url="https://www.suse.com/security/cve/CVE-2019-3862" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13982-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913982-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1075-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1109-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2126-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VZ5CXNJKJVQFPMHVDXDS6F67TKZ3TJ7E/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HAQH2P56QS5PVJGYRATVMCCAWSF5JABQ/" source="SUSE-SU"/>
    <description>
    An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-04"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3862/">CVE-2019-3862</cve>
	<bugzilla href="https://bugzilla.suse.com/1128492">SUSE bug 1128492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135434">SUSE bug 1135434</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628874" comment="libssh2-1-1.9.0-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152658" comment="libssh2-1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3863</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3863" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3863" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3863" ref_url="https://www.suse.com/security/cve/CVE-2019-3863" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13982-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913982-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1075-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1109-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2126-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VZ5CXNJKJVQFPMHVDXDS6F67TKZ3TJ7E/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HAQH2P56QS5PVJGYRATVMCCAWSF5JABQ/" source="SUSE-SU"/>
    <description>
    A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used as an index to copy memory causing in an out of bounds memory write error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3863/">CVE-2019-3863</cve>
	<bugzilla href="https://bugzilla.suse.com/1128493">SUSE bug 1128493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130103">SUSE bug 1130103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135434">SUSE bug 1135434</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628874" comment="libssh2-1-1.9.0-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152658" comment="libssh2-1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3870</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3870" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3870" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3870" ref_url="https://www.suse.com/security/cve/CVE-2019-3870" source="SUSE CVE"/>
    <description>
    A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdirectory of the install location. This directory is typically mode 0700, that is owner (root) only access. However in some upgraded installations it will have other permissions, such as 0755, because this was the default before Samba 4.8. Within this directory, files are created with mode 0666, which is world-writable, including a sample krb5.conf, and the list of DNS names and servicePrincipalName values to update.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-3870/">CVE-2019-3870</cve>
	<bugzilla href="https://bugzilla.suse.com/1130703">SUSE bug 1130703</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193874" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3874</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3874" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3874" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3874" ref_url="https://www.suse.com/security/cve/CVE-2019-3874" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009486.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3217-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-September/020289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3969-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009872.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4561-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013341.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3876-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JOIHHN3KQX7O34NG25NJOF7PFEZF2TVP/" source="SUSE-SU"/>
    <description>
    The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3874/">CVE-2019-3874</cve>
	<bugzilla href="https://bugzilla.suse.com/1129898">SUSE bug 1129898</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658245" comment="kernel-debug-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658155" comment="kernel-default-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658246" comment="kernel-kvmsmall-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658247" comment="kernel-vanilla-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658248" comment="kernel-vanilla-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658249" comment="kernel-vanilla-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658250" comment="kernel-vanilla-livepatch-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658251" comment="kernel-zfcpdump-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193880" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3880</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3880" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3880" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3880" ref_url="https://www.suse.com/security/cve/CVE-2019-3880" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1037-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1040-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005430.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005440.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14042-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005435.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00106.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-3880/">CVE-2019-3880</cve>
	<bugzilla href="https://bugzilla.suse.com/1131060">SUSE bug 1131060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139519">SUSE bug 1139519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193886" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3886</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3886" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3886" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3886" ref_url="https://www.suse.com/security/cve/CVE-2019-3886" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005338.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1042-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1285-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005533.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1294-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00105.html" source="SUSE-SU"/>
    <description>
    An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-3886/">CVE-2019-3886</cve>
	<bugzilla href="https://bugzilla.suse.com/1131595">SUSE bug 1131595</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133150">SUSE bug 1133150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138301">SUSE bug 1138301</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20193900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-3900</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-3900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3900" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-3900" ref_url="https://www.suse.com/security/cve/CVE-2019-3900" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009486.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3217-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-September/020289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3969-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009872.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012222.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012274.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3876-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JOIHHN3KQX7O34NG25NJOF7PFEZF2TVP/" source="SUSE-SU"/>
    <description>
    An infinite loop issue was found in the vhost_net kernel module while handling incoming packets in handle_rx(). The infinite loop could occur if one end sends packets faster than the other end can process them. A guest user, maybe a remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3900/">CVE-2019-3900</cve>
	<bugzilla href="https://bugzilla.suse.com/1133374">SUSE bug 1133374</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658245" comment="kernel-debug-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658155" comment="kernel-default-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658246" comment="kernel-kvmsmall-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658247" comment="kernel-vanilla-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658248" comment="kernel-vanilla-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658249" comment="kernel-vanilla-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658250" comment="kernel-vanilla-livepatch-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658251" comment="kernel-zfcpdump-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195008" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5008</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5008" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5008" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5008" ref_url="https://www.suse.com/security/cve/CVE-2019-5008" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005833.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00000.html" source="SUSE-SU"/>
    <description>
    hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the attacker to cause a denial of service via a device driver.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5008/">CVE-2019-5008</cve>
	<bugzilla href="https://bugzilla.suse.com/1133031">SUSE bug 1133031</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5010</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5010" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5010" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:732-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006377.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0243-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005394.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0482-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005374.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0302-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006445.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007892.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008118.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2332-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S3JTHM6LLDKL7VPNRJUSRPNZAD2FZ25H/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2333-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FLGERALYYFTBIX3ZKPM6EQ2WJVUXLOXY/" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<bugzilla href="https://bugzilla.suse.com/1122191">SUSE bug 1122191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5068</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5068" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5068" ref_url="https://www.suse.com/security/cve/CVE-2019-5068" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0111-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0132-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006386.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0145-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006389.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006390.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009451.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00037.html" source="SUSE-SU"/>
    <description>
    An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-5068/">CVE-2019-5068</cve>
	<bugzilla href="https://bugzilla.suse.com/1156015">SUSE bug 1156015</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628228" comment="Mesa-20.2.4-57.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276538" comment="Mesa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628232" comment="Mesa-dri-20.2.4-57.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276542" comment="Mesa-dri is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684212" comment="Mesa-dri-nouveau-20.2.4-57.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276545" comment="Mesa-dri-nouveau is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628235" comment="Mesa-gallium-20.2.4-57.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276548" comment="Mesa-gallium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628238" comment="Mesa-libEGL1-20.2.4-57.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276551" comment="Mesa-libEGL1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628241" comment="Mesa-libGL1-20.2.4-57.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276554" comment="Mesa-libGL1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628250" comment="Mesa-libglapi0-20.2.4-57.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276569" comment="Mesa-libglapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628252" comment="Mesa-libva-20.2.4-57.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276571" comment="Mesa-libva is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628258" comment="libgbm1-20.2.4-57.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276582" comment="libgbm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684214" comment="libvdpau_nouveau-20.2.4-57.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276584" comment="libvdpau_nouveau is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628260" comment="libvdpau_r300-20.2.4-57.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276586" comment="libvdpau_r300 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628261" comment="libvdpau_r600-20.2.4-57.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276588" comment="libvdpau_r600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628262" comment="libvdpau_radeonsi-20.2.4-57.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276590" comment="libvdpau_radeonsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628263" comment="libvulkan_intel-20.2.4-57.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276592" comment="libvulkan_intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628264" comment="libvulkan_radeon-20.2.4-57.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276594" comment="libvulkan_radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628266" comment="libxatracker2-1.0.0-57.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276597" comment="libxatracker2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5094</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5094" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5094" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5094" ref_url="https://www.suse.com/security/cve/CVE-2019-5094" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
    <description>
    An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5094/">CVE-2019-5094</cve>
	<bugzilla href="https://bugzilla.suse.com/1152101">SUSE bug 1152101</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628421" comment="e2fsprogs-1.43.8-4.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152602" comment="e2fsprogs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628425" comment="libcom_err2-1.43.8-4.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152605" comment="libcom_err2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628426" comment="libcom_err2-32bit-1.43.8-4.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152606" comment="libcom_err2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628429" comment="libext2fs2-1.43.8-4.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152608" comment="libext2fs2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5188</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5188" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5188" ref_url="https://www.suse.com/security/cve/CVE-2019-5188" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:31-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006421.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:33-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006430.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:35-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006437.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:39-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:51-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:52-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:9-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006338.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006332.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006415.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0360-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006471.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00004.html" source="SUSE-SU"/>
    <description>
    A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5188/">CVE-2019-5188</cve>
	<bugzilla href="https://bugzilla.suse.com/1160571">SUSE bug 1160571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628421" comment="e2fsprogs-1.43.8-4.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152602" comment="e2fsprogs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628425" comment="libcom_err2-1.43.8-4.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152605" comment="libcom_err2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628426" comment="libcom_err2-32bit-1.43.8-4.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152606" comment="libcom_err2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628429" comment="libext2fs2-1.43.8-4.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152608" comment="libext2fs2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5435</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5435" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5435" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5435" ref_url="https://www.suse.com/security/cve/CVE-2019-5435" source="SUSE CVE"/>
    <description>
    An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5435/">CVE-2019-5435</cve>
	<bugzilla href="https://bugzilla.suse.com/1135176">SUSE bug 1135176</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154162">SUSE bug 1154162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5436</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5436" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5436" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5436" ref_url="https://www.suse.com/security/cve/CVE-2019-5436" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1357-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005640.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1363-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005506.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005491.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2009-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192009-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1492-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1508-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00017.html" source="SUSE-SU"/>
    <description>
    A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5436/">CVE-2019-5436</cve>
	<bugzilla href="https://bugzilla.suse.com/1135170">SUSE bug 1135170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149496">SUSE bug 1149496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154162">SUSE bug 1154162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5439</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5439" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5439" ref_url="https://www.suse.com/security/cve/CVE-2019-5439" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html" source="SUSE-SU"/>
    <description>
    A Buffer Overflow in VLC Media Player &lt; 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5439/">CVE-2019-5439</cve>
	<bugzilla href="https://bugzilla.suse.com/1138354">SUSE bug 1138354</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5459</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5459" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5459" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5459" ref_url="https://www.suse.com/security/cve/CVE-2019-5459" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html" source="SUSE-SU"/>
    <description>
    An Integer underflow in VLC Media Player versions &lt; 3.0.7 leads to an out-of-band read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5459/">CVE-2019-5459</cve>
	<bugzilla href="https://bugzilla.suse.com/1143549">SUSE bug 1143549</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5460</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5460" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5460" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5460" ref_url="https://www.suse.com/security/cve/CVE-2019-5460" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html" source="SUSE-SU"/>
    <description>
    Double Free in VLC versions &lt;= 3.0.6 leads to a crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5460/">CVE-2019-5460</cve>
	<bugzilla href="https://bugzilla.suse.com/1143547">SUSE bug 1143547</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5477</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5477" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5477" ref_url="https://www.suse.com/security/cve/CVE-2019-5477" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2867-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192867-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0210-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008244.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008258.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0237-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RLEJCRYIVSTKE34ZJIXITKLZOOKOAMWQ/" source="SUSE-SU"/>
    <description>
    A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5477/">CVE-2019-5477</cve>
	<bugzilla href="https://bugzilla.suse.com/1146578">SUSE bug 1146578</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195481" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5481</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5481" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5481" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5481" ref_url="https://www.suse.com/security/cve/CVE-2019-5481" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2373-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192373-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005919.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2169-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html" source="SUSE-SU"/>
    <description>
    Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5481/">CVE-2019-5481</cve>
	<bugzilla href="https://bugzilla.suse.com/1149495">SUSE bug 1149495</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5482</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5482" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5482" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5482" ref_url="https://www.suse.com/security/cve/CVE-2019-5482" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005897.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2339-2" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192339-2.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2373-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192373-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005919.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2169-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5482/">CVE-2019-5482</cve>
	<bugzilla href="https://bugzilla.suse.com/1149496">SUSE bug 1149496</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5736</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5736" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5736" ref_url="https://www.suse.com/security/cve/CVE-2019-5736" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005155.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005452.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1234-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005814.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008717.html" source="SUSE-SU"/>
		<reference ref_id="TID000019404" ref_url="https://www.suse.com/support/kb/doc/?id=000019404" source="SUSE-SU"/>
		<reference ref_id="TID7023708" ref_url="https://www.suse.com/support/kb/doc/?id=7023708" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0170-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0201-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0252-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1079-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1227-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1506-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2286-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00029.html" source="SUSE-SU"/>
    <description>
    runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5736/">CVE-2019-5736</cve>
	<bugzilla href="https://bugzilla.suse.com/1121967">SUSE bug 1121967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122185">SUSE bug 1122185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173421">SUSE bug 1173421</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629101" comment="flatpak-1.10.2-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171006" comment="flatpak is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629104" comment="libflatpak0-1.10.2-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171009" comment="libflatpak0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629105" comment="system-user-flatpak-1.10.2-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009350838" comment="system-user-flatpak is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195747" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5747</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5747" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5747" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5747" ref_url="https://www.suse.com/security/cve/CVE-2019-5747" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP client, server, and/or relay) might allow a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to assurance of a 4-byte length when decoding DHCP_SUBNET. NOTE: this issue exists because of an incomplete fix for CVE-2018-20679.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5747/">CVE-2019-5747</cve>
	<bugzilla href="https://bugzilla.suse.com/1121426">SUSE bug 1121426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121428">SUSE bug 1121428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152555" comment="busybox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653584" comment="busybox-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5754</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5754" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5754" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5754" ref_url="https://www.suse.com/security/cve/CVE-2019-5754" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running or able to cause use of a proxy server to obtain cleartext of transport encryption via malicious network proxy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5754/">CVE-2019-5754</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5755</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5755" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5755" ref_url="https://www.suse.com/security/cve/CVE-2019-5755" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5755/">CVE-2019-5755</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5756</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5756" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5756" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5756" ref_url="https://www.suse.com/security/cve/CVE-2019-5756" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5756/">CVE-2019-5756</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195757" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5757</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5757" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5757" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5757" ref_url="https://www.suse.com/security/cve/CVE-2019-5757" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    An incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5757/">CVE-2019-5757</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5758</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5758" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5758" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5758" ref_url="https://www.suse.com/security/cve/CVE-2019-5758" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Incorrect object lifecycle management in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5758/">CVE-2019-5758</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195759" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5759</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5759" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5759" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5759" ref_url="https://www.suse.com/security/cve/CVE-2019-5759" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5759/">CVE-2019-5759</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5760</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5760" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5760" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5760" ref_url="https://www.suse.com/security/cve/CVE-2019-5760" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5760/">CVE-2019-5760</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5761</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5761" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5761" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5761" ref_url="https://www.suse.com/security/cve/CVE-2019-5761" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Incorrect object lifecycle management in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5761/">CVE-2019-5761</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5762</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5762" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5762" ref_url="https://www.suse.com/security/cve/CVE-2019-5762" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5762/">CVE-2019-5762</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5763</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5763" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5763" ref_url="https://www.suse.com/security/cve/CVE-2019-5763" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Failure to check error conditions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5763/">CVE-2019-5763</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5764</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5764" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5764" ref_url="https://www.suse.com/security/cve/CVE-2019-5764" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5764/">CVE-2019-5764</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5765</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5765" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5765" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5765" ref_url="https://www.suse.com/security/cve/CVE-2019-5765" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5765/">CVE-2019-5765</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5766</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5766" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5766" ref_url="https://www.suse.com/security/cve/CVE-2019-5766" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5766/">CVE-2019-5766</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5767</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5767" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5767" ref_url="https://www.suse.com/security/cve/CVE-2019-5767" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an attacker who convinced the user to install a malicious application to access privacy/security sensitive web APIs via a crafted APK.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5767/">CVE-2019-5767</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5768</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5768" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5768" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5768" ref_url="https://www.suse.com/security/cve/CVE-2019-5768" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5768/">CVE-2019-5768</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5769</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5769" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5769" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5769" ref_url="https://www.suse.com/security/cve/CVE-2019-5769" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of invalid end character position when front rendering in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5769/">CVE-2019-5769</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195770" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5770</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5770" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5770" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5770" ref_url="https://www.suse.com/security/cve/CVE-2019-5770" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5770/">CVE-2019-5770</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5771</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5771" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5771" ref_url="https://www.suse.com/security/cve/CVE-2019-5771" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    An incorrect JIT of GLSL shaders in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5771/">CVE-2019-5771</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5772</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5772" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5772" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5772" ref_url="https://www.suse.com/security/cve/CVE-2019-5772" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-5772/">CVE-2019-5772</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5773</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5773" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5773" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5773" ref_url="https://www.suse.com/security/cve/CVE-2019-5773" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Insufficient origin validation in IndexedDB in Google Chrome prior to 72.0.3626.81 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5773/">CVE-2019-5773</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5774</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5774" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5774" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5774" ref_url="https://www.suse.com/security/cve/CVE-2019-5774" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5774/">CVE-2019-5774</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5775</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5775" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5775" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5775" ref_url="https://www.suse.com/security/cve/CVE-2019-5775" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5775/">CVE-2019-5775</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5776</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5776" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5776" ref_url="https://www.suse.com/security/cve/CVE-2019-5776" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5776/">CVE-2019-5776</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5777</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5777" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5777" ref_url="https://www.suse.com/security/cve/CVE-2019-5777" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5777/">CVE-2019-5777</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5778</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5778" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5778" ref_url="https://www.suse.com/security/cve/CVE-2019-5778" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to bypass extension permission checks for privileged pages via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5778/">CVE-2019-5778</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5779</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5779" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5779" ref_url="https://www.suse.com/security/cve/CVE-2019-5779" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5779/">CVE-2019-5779</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195780" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5780</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5780" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5780" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5780" ref_url="https://www.suse.com/security/cve/CVE-2019-5780" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5780/">CVE-2019-5780</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5781</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5781" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5781" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5781" ref_url="https://www.suse.com/security/cve/CVE-2019-5781" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5781/">CVE-2019-5781</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5782</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5782" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5782" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5782" ref_url="https://www.suse.com/security/cve/CVE-2019-5782" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5782/">CVE-2019-5782</cve>
	<bugzilla href="https://bugzilla.suse.com/1123641">SUSE bug 1123641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195784" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5784</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5784" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5784" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5784" ref_url="https://www.suse.com/security/cve/CVE-2019-5784" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00047.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of deferred code in V8 in Google Chrome prior to 72.0.3626.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5784/">CVE-2019-5784</cve>
	<bugzilla href="https://bugzilla.suse.com/1124936">SUSE bug 1124936</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195785" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5785</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5785" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5785" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5785" ref_url="https://www.suse.com/security/cve/CVE-2019-5785" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0469-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0202-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html" source="SUSE-SU"/>
    <description>
    Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5785/">CVE-2019-5785</cve>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125396">SUSE bug 1125396</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195786" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5786</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5786" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5786" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5786" ref_url="https://www.suse.com/security/cve/CVE-2019-5786" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00010.html" source="SUSE-SU"/>
    <description>
    Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-5786/">CVE-2019-5786</cve>
	<bugzilla href="https://bugzilla.suse.com/1127602">SUSE bug 1127602</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5787</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5787" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5787" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5787" ref_url="https://www.suse.com/security/cve/CVE-2019-5787" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5787/">CVE-2019-5787</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5788</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5788" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5788" ref_url="https://www.suse.com/security/cve/CVE-2019-5788" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5788/">CVE-2019-5788</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5789</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5789" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5789" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5789" ref_url="https://www.suse.com/security/cve/CVE-2019-5789" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5789/">CVE-2019-5789</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5790</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5790" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5790" ref_url="https://www.suse.com/security/cve/CVE-2019-5790" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5790/">CVE-2019-5790</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5791</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5791" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5791" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5791" ref_url="https://www.suse.com/security/cve/CVE-2019-5791" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5791/">CVE-2019-5791</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5792</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5792" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5792" ref_url="https://www.suse.com/security/cve/CVE-2019-5792" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5792/">CVE-2019-5792</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5793</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5793" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5793" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5793" ref_url="https://www.suse.com/security/cve/CVE-2019-5793" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5793/">CVE-2019-5793</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5794</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5794" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5794" ref_url="https://www.suse.com/security/cve/CVE-2019-5794" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5794/">CVE-2019-5794</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195795" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5795</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5795" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5795" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5795" ref_url="https://www.suse.com/security/cve/CVE-2019-5795" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5795/">CVE-2019-5795</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195796" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5796</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5796" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5796" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5796" ref_url="https://www.suse.com/security/cve/CVE-2019-5796" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5796/">CVE-2019-5796</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5797</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5797" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5797" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5797" ref_url="https://www.suse.com/security/cve/CVE-2019-5797" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5797/">CVE-2019-5797</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5798</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5798" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5798" ref_url="https://www.suse.com/security/cve/CVE-2019-5798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5798/">CVE-2019-5798</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5799</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5799" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5799" ref_url="https://www.suse.com/security/cve/CVE-2019-5799" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Incorrect inheritance of a new document's policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5799/">CVE-2019-5799</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5800</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5800" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5800" ref_url="https://www.suse.com/security/cve/CVE-2019-5800" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5800/">CVE-2019-5800</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5801</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5801" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5801" ref_url="https://www.suse.com/security/cve/CVE-2019-5801" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Incorrect eliding of URLs in Omnibox in Google Chrome on iOS prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5801/">CVE-2019-5801</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5802</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5802" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5802" ref_url="https://www.suse.com/security/cve/CVE-2019-5802" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5802/">CVE-2019-5802</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5803</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5803" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5803" ref_url="https://www.suse.com/security/cve/CVE-2019-5803" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5803/">CVE-2019-5803</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5804</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5804" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5804" ref_url="https://www.suse.com/security/cve/CVE-2019-5804" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Incorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a local attacker to perform domain spoofing via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5804/">CVE-2019-5804</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5805</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5805" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5805" ref_url="https://www.suse.com/security/cve/CVE-2019-5805" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Use-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-5805/">CVE-2019-5805</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5806</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5806" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5806" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5806" ref_url="https://www.suse.com/security/cve/CVE-2019-5806" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5806/">CVE-2019-5806</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5807</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5807" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5807" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5807" ref_url="https://www.suse.com/security/cve/CVE-2019-5807" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5807/">CVE-2019-5807</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5808</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5808" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5808" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5808" ref_url="https://www.suse.com/security/cve/CVE-2019-5808" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5808/">CVE-2019-5808</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195809" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5809</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5809" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5809" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5809" ref_url="https://www.suse.com/security/cve/CVE-2019-5809" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5809/">CVE-2019-5809</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5810</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5810" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5810" ref_url="https://www.suse.com/security/cve/CVE-2019-5810" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Information leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5810/">CVE-2019-5810</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5811</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5811" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5811" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5811" ref_url="https://www.suse.com/security/cve/CVE-2019-5811" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5811/">CVE-2019-5811</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5812</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5812" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5812" ref_url="https://www.suse.com/security/cve/CVE-2019-5812" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Inadequate security UI in iOS UI in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5812/">CVE-2019-5812</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5813</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5813" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5813" ref_url="https://www.suse.com/security/cve/CVE-2019-5813" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5813/">CVE-2019-5813</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5814</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5814" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5814" ref_url="https://www.suse.com/security/cve/CVE-2019-5814" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5814/">CVE-2019-5814</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5815</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5815" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5815" ref_url="https://www.suse.com/security/cve/CVE-2019-5815" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5815/">CVE-2019-5815</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5816</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5816" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5816" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5816" ref_url="https://www.suse.com/security/cve/CVE-2019-5816" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5816/">CVE-2019-5816</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5817</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5817" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5817" ref_url="https://www.suse.com/security/cve/CVE-2019-5817" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5817/">CVE-2019-5817</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5818</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5818" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5818" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5818" ref_url="https://www.suse.com/security/cve/CVE-2019-5818" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Uninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5818/">CVE-2019-5818</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5819</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5819" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5819" ref_url="https://www.suse.com/security/cve/CVE-2019-5819" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in developer tools in Google Chrome on OS X prior to 74.0.3729.108 allowed a local attacker to execute arbitrary code via a crafted string copied to clipboard.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5819/">CVE-2019-5819</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5820</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5820" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5820" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5820" ref_url="https://www.suse.com/security/cve/CVE-2019-5820" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5820/">CVE-2019-5820</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5821</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5821" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5821" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5821" ref_url="https://www.suse.com/security/cve/CVE-2019-5821" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5821/">CVE-2019-5821</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5822</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5822" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5822" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5822" ref_url="https://www.suse.com/security/cve/CVE-2019-5822" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5822/">CVE-2019-5822</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5823</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5823" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5823" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5823" ref_url="https://www.suse.com/security/cve/CVE-2019-5823" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-5823/">CVE-2019-5823</cve>
	<bugzilla href="https://bugzilla.suse.com/1133313">SUSE bug 1133313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5824</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5824" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5824" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5824" ref_url="https://www.suse.com/security/cve/CVE-2019-5824" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1456-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1488-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Parameter passing error in media in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5824/">CVE-2019-5824</cve>
	<bugzilla href="https://bugzilla.suse.com/1134218">SUSE bug 1134218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5827</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5827" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5827" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5827" ref_url="https://www.suse.com/security/cve/CVE-2019-5827" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1456-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1488-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Integer overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5827/">CVE-2019-5827</cve>
	<bugzilla href="https://bugzilla.suse.com/1134218">SUSE bug 1134218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5828</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5828" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5828" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5828" ref_url="https://www.suse.com/security/cve/CVE-2019-5828" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1558-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1559-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Object lifecycle issue in ServiceWorker in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5828/">CVE-2019-5828</cve>
	<bugzilla href="https://bugzilla.suse.com/1137332">SUSE bug 1137332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5829</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5829" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5829" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5829" ref_url="https://www.suse.com/security/cve/CVE-2019-5829" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1558-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1559-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Integer overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5829/">CVE-2019-5829</cve>
	<bugzilla href="https://bugzilla.suse.com/1137332">SUSE bug 1137332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5830</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5830" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5830" ref_url="https://www.suse.com/security/cve/CVE-2019-5830" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1558-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1559-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5830/">CVE-2019-5830</cve>
	<bugzilla href="https://bugzilla.suse.com/1137332">SUSE bug 1137332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5831</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5831" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5831" ref_url="https://www.suse.com/security/cve/CVE-2019-5831" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1558-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1559-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5831/">CVE-2019-5831</cve>
	<bugzilla href="https://bugzilla.suse.com/1137332">SUSE bug 1137332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195832" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5832</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5832" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5832" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5832" ref_url="https://www.suse.com/security/cve/CVE-2019-5832" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1558-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1559-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5832/">CVE-2019-5832</cve>
	<bugzilla href="https://bugzilla.suse.com/1137332">SUSE bug 1137332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5833</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5833" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5833" ref_url="https://www.suse.com/security/cve/CVE-2019-5833" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1558-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1559-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Incorrect dialog box scoping in browser in Google Chrome on Android prior to 75.0.3770.80 allowed a remote attacker to display misleading security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-5833/">CVE-2019-5833</cve>
	<bugzilla href="https://bugzilla.suse.com/1137332">SUSE bug 1137332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5834</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5834" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5834" ref_url="https://www.suse.com/security/cve/CVE-2019-5834" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1558-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1559-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5834/">CVE-2019-5834</cve>
	<bugzilla href="https://bugzilla.suse.com/1137332">SUSE bug 1137332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5835</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5835" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5835" ref_url="https://www.suse.com/security/cve/CVE-2019-5835" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1558-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1559-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Object lifecycle issue in SwiftShader in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5835/">CVE-2019-5835</cve>
	<bugzilla href="https://bugzilla.suse.com/1137332">SUSE bug 1137332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5836</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5836" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5836" ref_url="https://www.suse.com/security/cve/CVE-2019-5836" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1558-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1559-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5836/">CVE-2019-5836</cve>
	<bugzilla href="https://bugzilla.suse.com/1137332">SUSE bug 1137332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5837</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5837" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5837" ref_url="https://www.suse.com/security/cve/CVE-2019-5837" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1558-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1559-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Resource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5837/">CVE-2019-5837</cve>
	<bugzilla href="https://bugzilla.suse.com/1137332">SUSE bug 1137332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5838</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5838" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5838" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5838" ref_url="https://www.suse.com/security/cve/CVE-2019-5838" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1558-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1559-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinced a user to install a malicious extension to bypass restrictions on file URIs via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-5838/">CVE-2019-5838</cve>
	<bugzilla href="https://bugzilla.suse.com/1137332">SUSE bug 1137332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5839</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5839" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5839" ref_url="https://www.suse.com/security/cve/CVE-2019-5839" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1558-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1559-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Excessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote attacker who convinced a user to input a URL to bypass website URL validation via a crafted URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-5839/">CVE-2019-5839</cve>
	<bugzilla href="https://bugzilla.suse.com/1137332">SUSE bug 1137332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5840</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5840" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5840" ref_url="https://www.suse.com/security/cve/CVE-2019-5840" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1558-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1559-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-5840/">CVE-2019-5840</cve>
	<bugzilla href="https://bugzilla.suse.com/1137332">SUSE bug 1137332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5842</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5842" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5842" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5842" ref_url="https://www.suse.com/security/cve/CVE-2019-5842" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html" source="SUSE-SU"/>
    <description>
    Use after free in Blink in Google Chrome prior to 75.0.3770.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5842/">CVE-2019-5842</cve>
	<bugzilla href="https://bugzilla.suse.com/1137332">SUSE bug 1137332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138287">SUSE bug 1138287</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5844</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5844" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5844" ref_url="https://www.suse.com/security/cve/CVE-2019-5844" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0004-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0006-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0009-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00023.html" source="SUSE-SU"/>
    <description>
    Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5844/">CVE-2019-5844</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5845</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5845" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5845" ref_url="https://www.suse.com/security/cve/CVE-2019-5845" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0004-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0006-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0009-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00023.html" source="SUSE-SU"/>
    <description>
    Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5845/">CVE-2019-5845</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5846</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5846" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5846" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5846" ref_url="https://www.suse.com/security/cve/CVE-2019-5846" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0004-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0006-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0009-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00023.html" source="SUSE-SU"/>
    <description>
    Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5846/">CVE-2019-5846</cve>
	<bugzilla href="https://bugzilla.suse.com/1129059">SUSE bug 1129059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195847" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5847</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5847" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5847" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5847" ref_url="https://www.suse.com/security/cve/CVE-2019-5847" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1815-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00057.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5847/">CVE-2019-5847</cve>
	<bugzilla href="https://bugzilla.suse.com/1141649">SUSE bug 1141649</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5848</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5848" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5848" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5848" ref_url="https://www.suse.com/security/cve/CVE-2019-5848" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1815-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00057.html" source="SUSE-SU"/>
    <description>
    Incorrect font handling in autofill in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5848/">CVE-2019-5848</cve>
	<bugzilla href="https://bugzilla.suse.com/1141649">SUSE bug 1141649</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195850" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5850</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5850" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5850" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5850" ref_url="https://www.suse.com/security/cve/CVE-2019-5850" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1901-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5850/">CVE-2019-5850</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195851" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5851</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5851" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5851" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5851" ref_url="https://www.suse.com/security/cve/CVE-2019-5851" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1901-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5851/">CVE-2019-5851</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5852</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5852" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5852" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5852" ref_url="https://www.suse.com/security/cve/CVE-2019-5852" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1901-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-5852/">CVE-2019-5852</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195853" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5853</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5853" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5853" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5853" ref_url="https://www.suse.com/security/cve/CVE-2019-5853" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1901-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5853/">CVE-2019-5853</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195854" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5854</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5854" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5854" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5854" ref_url="https://www.suse.com/security/cve/CVE-2019-5854" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1901-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5854/">CVE-2019-5854</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5855</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5855" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5855" ref_url="https://www.suse.com/security/cve/CVE-2019-5855" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1901-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5855/">CVE-2019-5855</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195856" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5856</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5856" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5856" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5856" ref_url="https://www.suse.com/security/cve/CVE-2019-5856" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1901-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-5856/">CVE-2019-5856</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195857" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5857</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5857" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5857" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5857" ref_url="https://www.suse.com/security/cve/CVE-2019-5857" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1901-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5857/">CVE-2019-5857</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5858</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5858" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5858" ref_url="https://www.suse.com/security/cve/CVE-2019-5858" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1901-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-5858/">CVE-2019-5858</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195859" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5859</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5859" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5859" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5859" ref_url="https://www.suse.com/security/cve/CVE-2019-5859" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1901-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5859/">CVE-2019-5859</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195860" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5860</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5860" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5860" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5860" ref_url="https://www.suse.com/security/cve/CVE-2019-5860" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1901-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5860/">CVE-2019-5860</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195861" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5861</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5861" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5861" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5861" ref_url="https://www.suse.com/security/cve/CVE-2019-5861" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1901-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-5861/">CVE-2019-5861</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5862</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5862" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5862" ref_url="https://www.suse.com/security/cve/CVE-2019-5862" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1901-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-5862/">CVE-2019-5862</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5863</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5863" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5863" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5863" ref_url="https://www.suse.com/security/cve/CVE-2019-5863" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1901-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-5863/">CVE-2019-5863</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5864</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5864" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5864" ref_url="https://www.suse.com/security/cve/CVE-2019-5864" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1901-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-5864/">CVE-2019-5864</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195865" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5865</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5865" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5865" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5865" ref_url="https://www.suse.com/security/cve/CVE-2019-5865" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1901-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-5865/">CVE-2019-5865</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5867</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5867" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5867" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5867" ref_url="https://www.suse.com/security/cve/CVE-2019-5867" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1928-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1931-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Out of bounds read in JavaScript in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5867/">CVE-2019-5867</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145242">SUSE bug 1145242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195868" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5868</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5868" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5868" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5868" ref_url="https://www.suse.com/security/cve/CVE-2019-5868" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1928-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1931-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in PDFium in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5868/">CVE-2019-5868</cve>
	<bugzilla href="https://bugzilla.suse.com/1143492">SUSE bug 1143492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145242">SUSE bug 1145242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195869" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5869</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5869" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5869" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5869" ref_url="https://www.suse.com/security/cve/CVE-2019-5869" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in Blink in Google Chrome prior to 76.0.3809.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5869/">CVE-2019-5869</cve>
	<bugzilla href="https://bugzilla.suse.com/1149143">SUSE bug 1149143</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5870</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5870" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5870" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5870" ref_url="https://www.suse.com/security/cve/CVE-2019-5870" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5870/">CVE-2019-5870</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195871" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5871</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5871" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5871" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5871" ref_url="https://www.suse.com/security/cve/CVE-2019-5871" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2019-5871/">CVE-2019-5871</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195872" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5872</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5872" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5872" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5872" ref_url="https://www.suse.com/security/cve/CVE-2019-5872" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5872/">CVE-2019-5872</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195874" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5874</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5874" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5874" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5874" ref_url="https://www.suse.com/security/cve/CVE-2019-5874" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient filtering in URI schemes in Google Chrome on Windows prior to 77.0.3865.75 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5874/">CVE-2019-5874</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195875" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5875</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5875" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5875" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5875" ref_url="https://www.suse.com/security/cve/CVE-2019-5875" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-5875/">CVE-2019-5875</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195876" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5876</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5876" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5876" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5876" ref_url="https://www.suse.com/security/cve/CVE-2019-5876" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in media in Google Chrome on Android prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5876/">CVE-2019-5876</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195877" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5877</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5877" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5877" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5877" ref_url="https://www.suse.com/security/cve/CVE-2019-5877" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Out of bounds memory access in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5877/">CVE-2019-5877</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195878" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5878</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5878" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5878" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5878" ref_url="https://www.suse.com/security/cve/CVE-2019-5878" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Use after free in V8 in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5878/">CVE-2019-5878</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195879" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5879</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5879" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5879" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5879" ref_url="https://www.suse.com/security/cve/CVE-2019-5879" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5879/">CVE-2019-5879</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195880" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5880</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5880" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5880" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5880" ref_url="https://www.suse.com/security/cve/CVE-2019-5880" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-5880/">CVE-2019-5880</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195881" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5881</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5881" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5881" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5881" ref_url="https://www.suse.com/security/cve/CVE-2019-5881" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:2152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Out of bounds read in SwiftShader in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2019-5881/">CVE-2019-5881</cve>
	<bugzilla href="https://bugzilla.suse.com/1150425">SUSE bug 1150425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20195953" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-5953</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-5953" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5953" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-5953" ref_url="https://www.suse.com/security/cve/CVE-2019-5953" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0925-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190925-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005343.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00098.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5953/">CVE-2019-5953</cve>
	<bugzilla href="https://bugzilla.suse.com/1131493">SUSE bug 1131493</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482565" comment="wget-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694929" comment="wget-lang-1.20.3-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695522" comment="wget-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6109</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6109" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6109" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6109" ref_url="https://www.suse.com/security/cve/CVE-2019-6109" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0125-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005404.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0126-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0132-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0941-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005333.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005565.html" source="SUSE-SU"/>
		<reference ref_id="TID000019375" ref_url="https://www.suse.com/support/kb/doc/?id=000019375" source="SUSE-SU"/>
		<reference ref_id="TID7023647" ref_url="https://www.suse.com/support/kb/doc/?id=7023647" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0091-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0307-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00058.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-6109/">CVE-2019-6109</cve>
	<bugzilla href="https://bugzilla.suse.com/1121571">SUSE bug 1121571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121816">SUSE bug 1121816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121818">SUSE bug 1121818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121821">SUSE bug 1121821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138392">SUSE bug 1138392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144902">SUSE bug 1144902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148884">SUSE bug 1148884</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628954" comment="openssh-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628955" comment="openssh-clients-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659235" comment="openssh-clients is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628956" comment="openssh-common-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659236" comment="openssh-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628958" comment="openssh-server-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659237" comment="openssh-server is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6110</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6110" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6110" ref_url="https://www.suse.com/security/cve/CVE-2019-6110" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0125-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005404.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0126-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0132-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005049.html" source="SUSE-SU"/>
		<reference ref_id="TID000019375" ref_url="https://www.suse.com/support/kb/doc/?id=000019375" source="SUSE-SU"/>
		<reference ref_id="TID7023647" ref_url="https://www.suse.com/support/kb/doc/?id=7023647" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0091-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00041.html" source="SUSE-SU"/>
    <description>
    In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-6110/">CVE-2019-6110</cve>
	<bugzilla href="https://bugzilla.suse.com/1121571">SUSE bug 1121571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121816">SUSE bug 1121816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121818">SUSE bug 1121818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121821">SUSE bug 1121821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628954" comment="openssh-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628955" comment="openssh-clients-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659235" comment="openssh-clients is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628956" comment="openssh-common-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659236" comment="openssh-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628958" comment="openssh-server-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659237" comment="openssh-server is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6111</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6111" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6111" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6111" ref_url="https://www.suse.com/security/cve/CVE-2019-6111" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0125-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005404.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0126-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0132-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0941-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005333.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005565.html" source="SUSE-SU"/>
		<reference ref_id="TID000019375" ref_url="https://www.suse.com/support/kb/doc/?id=000019375" source="SUSE-SU"/>
		<reference ref_id="TID7023647" ref_url="https://www.suse.com/support/kb/doc/?id=7023647" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0091-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0307-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00058.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-6111/">CVE-2019-6111</cve>
	<bugzilla href="https://bugzilla.suse.com/1121571">SUSE bug 1121571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121816">SUSE bug 1121816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121818">SUSE bug 1121818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121821">SUSE bug 1121821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123028">SUSE bug 1123028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123220">SUSE bug 1123220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131109">SUSE bug 1131109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138392">SUSE bug 1138392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144902">SUSE bug 1144902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148884">SUSE bug 1148884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201840">SUSE bug 1201840</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628954" comment="openssh-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628955" comment="openssh-clients-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659235" comment="openssh-clients is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628956" comment="openssh-common-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659236" comment="openssh-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628958" comment="openssh-server-8.4p1-1.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659237" comment="openssh-server is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6116</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6116" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6116" ref_url="https://www.suse.com/security/cve/CVE-2019-6116" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0144-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0144-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0145-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0104-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00047.html" source="SUSE-SU"/>
    <description>
    In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-6116/">CVE-2019-6116</cve>
	<bugzilla href="https://bugzilla.suse.com/1122319">SUSE bug 1122319</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129186">SUSE bug 1129186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134156">SUSE bug 1134156</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6128</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6128" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6128" ref_url="https://www.suse.com/security/cve/CVE-2019-6128" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14002-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005277.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006177.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00041.html" source="SUSE-SU"/>
    <description>
    The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-6128/">CVE-2019-6128</cve>
	<bugzilla href="https://bugzilla.suse.com/1121626">SUSE bug 1121626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153715">SUSE bug 1153715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6133</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6133" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6133" ref_url="https://www.suse.com/security/cve/CVE-2019-6133" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005759.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2035-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005768.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2035-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00049.html" source="SUSE-SU"/>
    <description>
    In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6133/">CVE-2019-6133</cve>
	<bugzilla href="https://bugzilla.suse.com/1070943">SUSE bug 1070943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121826">SUSE bug 1121826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121872">SUSE bug 1121872</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482356" comment="libpolkit0-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151393" comment="libpolkit0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482357" comment="polkit-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151394" comment="polkit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482359" comment="typelib-1_0-Polkit-1_0-0.116-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151396" comment="typelib-1_0-Polkit-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6201</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6201" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6201" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6201" ref_url="https://www.suse.com/security/cve/CVE-2019-6201" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005426.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-6201/">CVE-2019-6201</cve>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6212</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6212" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6212" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6212" ref_url="https://www.suse.com/security/cve/CVE-2019-6212" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005162.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00015.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6212/">CVE-2019-6212</cve>
	<bugzilla href="https://bugzilla.suse.com/1124937">SUSE bug 1124937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6215</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6215" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6215" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6215" ref_url="https://www.suse.com/security/cve/CVE-2019-6215" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005162.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00015.html" source="SUSE-SU"/>
    <description>
    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6215/">CVE-2019-6215</cve>
	<bugzilla href="https://bugzilla.suse.com/1124937">SUSE bug 1124937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6216</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6216" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6216" ref_url="https://www.suse.com/security/cve/CVE-2019-6216" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005162.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00015.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6216/">CVE-2019-6216</cve>
	<bugzilla href="https://bugzilla.suse.com/1124937">SUSE bug 1124937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6217</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6217" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6217" ref_url="https://www.suse.com/security/cve/CVE-2019-6217" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005162.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00015.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6217/">CVE-2019-6217</cve>
	<bugzilla href="https://bugzilla.suse.com/1124937">SUSE bug 1124937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6226</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6226" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6226" ref_url="https://www.suse.com/security/cve/CVE-2019-6226" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005162.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00015.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6226/">CVE-2019-6226</cve>
	<bugzilla href="https://bugzilla.suse.com/1124937">SUSE bug 1124937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196227" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6227</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6227" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6227" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6227" ref_url="https://www.suse.com/security/cve/CVE-2019-6227" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005162.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00015.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6227/">CVE-2019-6227</cve>
	<bugzilla href="https://bugzilla.suse.com/1124937">SUSE bug 1124937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196229" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6229</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6229" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6229" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6229" ref_url="https://www.suse.com/security/cve/CVE-2019-6229" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005162.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00015.html" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to universal cross site scripting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-6229/">CVE-2019-6229</cve>
	<bugzilla href="https://bugzilla.suse.com/1124937">SUSE bug 1124937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196233" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6233</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6233" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6233" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6233" ref_url="https://www.suse.com/security/cve/CVE-2019-6233" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005162.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00015.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6233/">CVE-2019-6233</cve>
	<bugzilla href="https://bugzilla.suse.com/1124937">SUSE bug 1124937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196234" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6234</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6234" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6234" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6234" ref_url="https://www.suse.com/security/cve/CVE-2019-6234" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005162.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00015.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6234/">CVE-2019-6234</cve>
	<bugzilla href="https://bugzilla.suse.com/1124937">SUSE bug 1124937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6251</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6251" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6251" ref_url="https://www.suse.com/security/cve/CVE-2019-6251" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005426.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html" source="SUSE-SU"/>
    <description>
    WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-6251/">CVE-2019-6251</cve>
	<bugzilla href="https://bugzilla.suse.com/1121894">SUSE bug 1121894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196256" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6256</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6256" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6256" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6256" ref_url="https://www.suse.com/security/cve/CVE-2019-6256" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00026.html" source="SUSE-SU"/>
    <description>
    A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmd_TunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request within the same TCP session. This occurs because of a call to an incorrect virtual function pointer in the readSocket function in GroupsockHelper.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6256/">CVE-2019-6256</cve>
	<bugzilla href="https://bugzilla.suse.com/1121892">SUSE bug 1121892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694827" comment="libBasicUsageEnvironment1-2019.06.28-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260574" comment="libBasicUsageEnvironment1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694828" comment="libUsageEnvironment3-2019.06.28-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260576" comment="libUsageEnvironment3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694829" comment="libgroupsock8-2019.06.28-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260578" comment="libgroupsock8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694830" comment="libliveMedia66-2019.06.28-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260580" comment="libliveMedia66 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6285</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6285" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6285" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6285" ref_url="https://www.suse.com/security/cve/CVE-2019-6285" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:477-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010620.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:483-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010624.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010625.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:485-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:488-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010629.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010635.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010639.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010640.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010641.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010643.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010644.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:504-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010646.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:516-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:973-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:485-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1072-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010617.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010618.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1073-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010703.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1073-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U5JRSH3JEFDRI2LLKIUVXRRMZJAO5ZPH/" source="SUSE-SU"/>
    <description>
    The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-6285/">CVE-2019-6285</cve>
	<bugzilla href="https://bugzilla.suse.com/1122004">SUSE bug 1122004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122021">SUSE bug 1122021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129245">SUSE bug 1129245</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671370" comment="libyaml-cpp0_6-0.6.1-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677956" comment="libyaml-cpp0_6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671380" comment="yaml-cpp-devel-0.6.1-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677957" comment="yaml-cpp-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196292" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6292</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6292" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6292" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6292" ref_url="https://www.suse.com/security/cve/CVE-2019-6292" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:477-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010620.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:483-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010624.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010625.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:485-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:488-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010629.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010635.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010639.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010640.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010641.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010643.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010644.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:504-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010646.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:516-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:973-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:485-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1072-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010617.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010618.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1073-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010703.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1073-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U5JRSH3JEFDRI2LLKIUVXRRMZJAO5ZPH/" source="SUSE-SU"/>
    <description>
    An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, HandleNode. Remote attackers could leverage this vulnerability to cause a denial-of-service via a cpp file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-6292/">CVE-2019-6292</cve>
	<bugzilla href="https://bugzilla.suse.com/1122021">SUSE bug 1122021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671370" comment="libyaml-cpp0_6-0.6.1-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677956" comment="libyaml-cpp0_6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671380" comment="yaml-cpp-devel-0.6.1-4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677957" comment="yaml-cpp-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196446" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6446</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6446" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6446" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6446" ref_url="https://www.suse.com/security/cve/CVE-2019-6446" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0418-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0419-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0448-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13951-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2462-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2462-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2225-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2227-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00015.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED **   An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is  a behavior that might have legitimate applications in (for example)  loading serialized Python object arrays from trusted and authenticated  sources.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6446/">CVE-2019-6446</cve>
	<bugzilla href="https://bugzilla.suse.com/1122208">SUSE bug 1122208</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628989" comment="python3-numpy-1.17.3-7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245328" comment="python3-numpy is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6454</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6454" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6454" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6454" ref_url="https://www.suse.com/security/cve/CVE-2019-6454" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0425-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0425-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005336.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0426-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1364-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005509.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1364-2" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20191364-2.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6454/">CVE-2019-6454</cve>
	<bugzilla href="https://bugzilla.suse.com/1125352">SUSE bug 1125352</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196465" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6465</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6465" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6465" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6465" ref_url="https://www.suse.com/security/cve/CVE-2019-6465" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1406-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005528.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1449-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005538.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005975.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1532-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00027.html" source="SUSE-SU"/>
    <description>
    Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -&gt; 9.10.8-P1, 9.11.0 -&gt; 9.11.5-P2, 9.12.0 -&gt; 9.12.3-P2, and versions 9.9.3-S1 -&gt; 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -&gt; 9.13.6 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2019-6465.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-6465/">CVE-2019-6465</cve>
	<bugzilla href="https://bugzilla.suse.com/1126069">SUSE bug 1126069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148887">SUSE bug 1148887</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6467</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6467" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6467" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6467" ref_url="https://www.suse.com/security/cve/CVE-2019-6467" source="SUSE CVE"/>
    <description>
    A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAIN redirection for recursive clients, is also serving a local copy of the root zone or using mirroring to provide the root zone, although other configurations are also possible. Versions affected: BIND 9.12.0-&gt; 9.12.4, 9.14.0. Also affects all releases in the 9.13 development branch.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6467/">CVE-2019-6467</cve>
	<bugzilla href="https://bugzilla.suse.com/1133186">SUSE bug 1133186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6470</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6470" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6470" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6470" ref_url="https://www.suse.com/security/cve/CVE-2019-6470" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2657-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192657-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2727-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006128.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2340-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2341-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00048.html" source="SUSE-SU"/>
    <description>
    There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6470/">CVE-2019-6470</cve>
	<bugzilla href="https://bugzilla.suse.com/1134078">SUSE bug 1134078</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628411" comment="dhcp-4.3.5-6.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628412" comment="dhcp-client-4.3.5-6.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196471" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6471</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6471" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6471" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6471" ref_url="https://www.suse.com/security/cve/CVE-2019-6471" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005975.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005988.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00013.html" source="SUSE-SU"/>
    <description>
    A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -&gt; 9.11.7, 9.12.0 -&gt; 9.12.4-P1, 9.14.0 -&gt; 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -&gt; 9.11.7-S1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6471/">CVE-2019-6471</cve>
	<bugzilla href="https://bugzilla.suse.com/1138687">SUSE bug 1138687</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6475</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6475" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6475" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6475" ref_url="https://www.suse.com/security/cve/CVE-2019-6475" source="SUSE CVE"/>
    <description>
    Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional recursion, and when mirror zone data cannot be validated, BIND falls back to using traditional recursion instead of the mirror zone. However, an error in the validity checks for the incoming zone data can allow an on-path attacker to replace zone data that was validated with a configured trust anchor with forged data of the attacker's choosing. The mirror zone feature is most often used to serve a local copy of the root zone. If an attacker was able to insert themselves into the network path between a recursive server using a mirror zone and a root name server, this vulnerability could then be used to cause the recursive server to accept a copy of falsified root zone data. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to 9.15.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-6475/">CVE-2019-6475</cve>
	<bugzilla href="https://bugzilla.suse.com/1153993">SUSE bug 1153993</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153994">SUSE bug 1153994</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6476</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6476" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6476" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6476" ref_url="https://www.suse.com/security/cve/CVE-2019-6476" source="SUSE CVE"/>
    <description>
    A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if a forwarder returns a referral rather than resolving the query. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to 9.15.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6476/">CVE-2019-6476</cve>
	<bugzilla href="https://bugzilla.suse.com/1153993">SUSE bug 1153993</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153994">SUSE bug 1153994</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6477</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6477" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6477" ref_url="https://www.suse.com/security/cve/CVE-2019-6477" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007552.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html" source="SUSE-SU"/>
    <description>
    With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than the server has been provisioned to handle. When a TCP connection with a large number of pipelined queries is closed, the load on the server releasing these multiple resources can cause it to become unresponsive, even for queries that can be answered authoritatively or from cache. (This is most likely to be perceived as an intermittent server problem).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6477/">CVE-2019-6477</cve>
	<bugzilla href="https://bugzilla.suse.com/1157051">SUSE bug 1157051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197136">SUSE bug 1197136</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6502</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6502" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6502" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6502" ref_url="https://www.suse.com/security/cve/CVE-2019-6502" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013092.html" source="SUSE-SU"/>
    <description>
    sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-24"/>
	<updated date="2022-11-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-6502/">CVE-2019-6502</cve>
	<bugzilla href="https://bugzilla.suse.com/1122756">SUSE bug 1122756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179291">SUSE bug 1179291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714497" comment="opensc-0.19.0-150100.3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239073" comment="opensc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714756" comment="opensc-32bit-0.19.0-150100.3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239136" comment="opensc-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6706</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6706" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6706" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6706" ref_url="https://www.suse.com/security/cve/CVE-2019-6706" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00024.html" source="SUSE-SU"/>
    <description>
    Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6706/">CVE-2019-6706</cve>
	<bugzilla href="https://bugzilla.suse.com/1123043">SUSE bug 1123043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481427" comment="liblua5_3-5-5.3.4-3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244414" comment="liblua5_3-5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481428" comment="liblua5_3-5-32bit-5.3.4-3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244415" comment="liblua5_3-5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481429" comment="lua53-5.3.4-3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244416" comment="lua53 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6778</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6778" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6778" ref_url="https://www.suse.com/security/cve/CVE-2019-6778" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0423-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0457-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0471-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0471-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005385.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005305.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005320.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005126.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14011-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006662.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006664.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14396-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006868.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1514-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006872.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1523-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006874.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008673.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00007.html" source="SUSE-SU"/>
    <description>
    In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6778/">CVE-2019-6778</cve>
	<bugzilla href="https://bugzilla.suse.com/1123156">SUSE bug 1123156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123157">SUSE bug 1123157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6977</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6977" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6977" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6977" ref_url="https://www.suse.com/security/cve/CVE-2019-6977" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0449-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13961-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005123.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0276-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00025.html" source="SUSE-SU"/>
    <description>
    gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-6977/">CVE-2019-6977</cve>
	<bugzilla href="https://bugzilla.suse.com/1123354">SUSE bug 1123354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123361">SUSE bug 1123361</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20196978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-6978</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-6978" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6978" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-6978" ref_url="https://www.suse.com/security/cve/CVE-2019-6978" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13961-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006586.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1516-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010962.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00025.html" source="SUSE-SU"/>
    <description>
    The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-6978/">CVE-2019-6978</cve>
	<bugzilla href="https://bugzilla.suse.com/1123522">SUSE bug 1123522</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482237" comment="libgd3-2.2.5-9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177199" comment="libgd3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679693" comment="libwmf-0_2-7-0.2.12-150000.4.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152632" comment="libwmf-0_2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679694" comment="libwmf-0_2-7-32bit-0.2.12-150000.4.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009682762" comment="libwmf-0_2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679695" comment="libwmf-devel-0.2.12-150000.4.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009682763" comment="libwmf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679696" comment="libwmf-gnome-0.2.12-150000.4.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009682764" comment="libwmf-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679697" comment="libwmf-gnome-32bit-0.2.12-150000.4.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009682765" comment="libwmf-gnome-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679698" comment="libwmf-tools-0.2.12-150000.4.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152633" comment="libwmf-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7146</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7146" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7146" ref_url="https://www.suse.com/security/cve/CVE-2019-7146" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
    <description>
    In elfutils 0.175, there is a buffer over-read in the ebl_object_note function in eblobjnote.c in libebl. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted elf file, as demonstrated by eu-readelf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-02"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-7146/">CVE-2019-7146</cve>
	<bugzilla href="https://bugzilla.suse.com/1123545">SUSE bug 1123545</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698533" comment="elfutils-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698534" comment="elfutils-lang-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698536" comment="libasm1-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698538" comment="libdw1-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698539" comment="libdw1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698545" comment="libebl-plugins-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698546" comment="libebl-plugins-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698548" comment="libelf1-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698549" comment="libelf1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7148</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7148" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7148" ref_url="https://www.suse.com/security/cve/CVE-2019-7148" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
    <description>
    An attempted excessive memory allocation was discovered in the function read_long_names in elf_begin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The maintainers believe this is not a real issue, but instead a "warning caused by ASAN because the allocation is big. By setting ASAN_OPTIONS=allocator_may_return_null=1 and running the reproducer, nothing happens."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-02"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-7148/">CVE-2019-7148</cve>
	<bugzilla href="https://bugzilla.suse.com/1123687">SUSE bug 1123687</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698533" comment="elfutils-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698534" comment="elfutils-lang-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698536" comment="libasm1-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698538" comment="libdw1-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698539" comment="libdw1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698545" comment="libebl-plugins-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698546" comment="libebl-plugins-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698548" comment="libelf1-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698549" comment="libelf1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197149" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7149</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7149" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7149" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7149" ref_url="https://www.suse.com/security/cve/CVE-2019-7149" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by eu-nm.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-02"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-7149/">CVE-2019-7149</cve>
	<bugzilla href="https://bugzilla.suse.com/1123559">SUSE bug 1123559</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698533" comment="elfutils-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698534" comment="elfutils-lang-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698536" comment="libasm1-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698538" comment="libdw1-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698539" comment="libdw1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698545" comment="libebl-plugins-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698546" comment="libebl-plugins-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698548" comment="libelf1-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698549" comment="libelf1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7150</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7150" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7150" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7150" ref_url="https://www.suse.com/security/cve/CVE-2019-7150" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in elfutils 0.175. A segmentation fault can occur in the function elf64_xlatetom in libelf/elf32_xlatetom.c, due to dwfl_segment_report_module not checking whether the dyn data read from a core file is truncated. A crafted input can cause a program crash, leading to denial-of-service, as demonstrated by eu-stack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7150/">CVE-2019-7150</cve>
	<bugzilla href="https://bugzilla.suse.com/1123685">SUSE bug 1123685</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490191" comment="elfutils-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490192" comment="elfutils-lang-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490194" comment="libasm1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490196" comment="libdw1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490197" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490199" comment="libebl-plugins-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490200" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490202" comment="libelf1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490203" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7175</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7175" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7175" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7175" ref_url="https://www.suse.com/security/cve/CVE-2019-7175" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0739-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13993-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13995-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005265.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html" source="SUSE-SU"/>
    <description>
    In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7175/">CVE-2019-7175</cve>
	<bugzilla href="https://bugzilla.suse.com/1128649">SUSE bug 1128649</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7285</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7285" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7285" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7285" ref_url="https://www.suse.com/security/cve/CVE-2019-7285" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005426.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html" source="SUSE-SU"/>
    <description>
    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7285/">CVE-2019-7285</cve>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197292" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7292</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7292" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7292" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7292" ref_url="https://www.suse.com/security/cve/CVE-2019-7292" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005426.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html" source="SUSE-SU"/>
    <description>
    A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may result in the disclosure of process memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-7292/">CVE-2019-7292</cve>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7310</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7310" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7310" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7310" ref_url="https://www.suse.com/security/cve/CVE-2019-7310" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-7310/">CVE-2019-7310</cve>
	<bugzilla href="https://bugzilla.suse.com/1124150">SUSE bug 1124150</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197314" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7314</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7314" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7314" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7314" ref_url="https://www.suse.com/security/cve/CVE-2019-7314" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1797-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1880-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0944-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00009.html" source="SUSE-SU"/>
    <description>
    liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-7314/">CVE-2019-7314</cve>
	<bugzilla href="https://bugzilla.suse.com/1124159">SUSE bug 1124159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694827" comment="libBasicUsageEnvironment1-2019.06.28-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260574" comment="libBasicUsageEnvironment1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694828" comment="libUsageEnvironment3-2019.06.28-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260576" comment="libUsageEnvironment3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694829" comment="libgroupsock8-2019.06.28-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260578" comment="libgroupsock8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694830" comment="libliveMedia66-2019.06.28-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260580" comment="libliveMedia66 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7317</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7317" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7317" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7317" ref_url="https://www.suse.com/security/cve/CVE-2019-7317" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1398-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005664.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14160-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2002-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192002-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005760.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2028-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005762.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2036-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005767.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2036-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2291-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192291-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005896.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2371-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192371-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3060-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006567.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1530-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1916-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html" source="SUSE-SU"/>
    <description>
    png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-7317/">CVE-2019-7317</cve>
	<bugzilla href="https://bugzilla.suse.com/1124211">SUSE bug 1124211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141780">SUSE bug 1141780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1147021">SUSE bug 1147021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165297">SUSE bug 1165297</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482352" comment="libpng16-16-1.6.34-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482353" comment="libpng16-16-32bit-1.6.34-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7395</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7395" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7395" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7395" ref_url="https://www.suse.com/security/cve/CVE-2019-7395" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0739-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005375.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html" source="SUSE-SU"/>
    <description>
    In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-7395/">CVE-2019-7395</cve>
	<bugzilla href="https://bugzilla.suse.com/1124368">SUSE bug 1124368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7396</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7396" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7396" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7396" ref_url="https://www.suse.com/security/cve/CVE-2019-7396" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0739-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005238.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html" source="SUSE-SU"/>
    <description>
    In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-7396/">CVE-2019-7396</cve>
	<bugzilla href="https://bugzilla.suse.com/1124367">SUSE bug 1124367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197397" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7397</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7397" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7397" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7397" ref_url="https://www.suse.com/security/cve/CVE-2019-7397" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0739-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13993-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13995-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005265.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html" source="SUSE-SU"/>
    <description>
    In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7397/">CVE-2019-7397</cve>
	<bugzilla href="https://bugzilla.suse.com/1124366">SUSE bug 1124366</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197398" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7398</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7398" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7398" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7398" ref_url="https://www.suse.com/security/cve/CVE-2019-7398" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0739-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13993-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13995-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005265.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html" source="SUSE-SU"/>
    <description>
    In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7398/">CVE-2019-7398</cve>
	<bugzilla href="https://bugzilla.suse.com/1124365">SUSE bug 1124365</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197443" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7443</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7443" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7443" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7443" ref_url="https://www.suse.com/security/cve/CVE-2019-7443" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:0242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00096.html" source="SUSE-SU"/>
    <description>
    KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. Certain types can cause crashes, and trigger the decoding of arbitrary images with dynamically loaded plugins. In other words, KAuth unintentionally causes this plugin code to run as root, which increases the severity of any possible exploitation of a plugin vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<cve href="https://www.suse.com/security/cve/CVE-2019-7443/">CVE-2019-7443</cve>
	<bugzilla href="https://bugzilla.suse.com/1124863">SUSE bug 1124863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170293">SUSE bug 1170293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694832" comment="libKF5Auth5-5.76.0-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155518" comment="libKF5Auth5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694833" comment="libKF5Auth5-lang-5.76.0-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009155522" comment="libKF5Auth5-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694834" comment="libKF5AuthCore5-5.76.0-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695550" comment="libKF5AuthCore5 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197572" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7572</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7572" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7572" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7572" ref_url="https://www.suse.com/security/cve/CVE-2019-7572" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005337.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005272.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00088.html" source="SUSE-SU"/>
    <description>
    SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-7572/">CVE-2019-7572</cve>
	<bugzilla href="https://bugzilla.suse.com/1124806">SUSE bug 1124806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629190" comment="libSDL-1_2-0-1.2.15-3.12.73 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251318" comment="libSDL-1_2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487325" comment="libSDL2-2_0-0-2.0.8-9.63 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7573</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7573" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7573" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7573" ref_url="https://www.suse.com/security/cve/CVE-2019-7573" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005337.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005272.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00088.html" source="SUSE-SU"/>
    <description>
    SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the wNumCoef loop).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7573/">CVE-2019-7573</cve>
	<bugzilla href="https://bugzilla.suse.com/1124805">SUSE bug 1124805</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629190" comment="libSDL-1_2-0-1.2.15-3.12.73 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251318" comment="libSDL-1_2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487325" comment="libSDL2-2_0-0-2.0.8-9.63 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7574</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7574" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7574" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7574" ref_url="https://www.suse.com/security/cve/CVE-2019-7574" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005337.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005272.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00088.html" source="SUSE-SU"/>
    <description>
    SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7574/">CVE-2019-7574</cve>
	<bugzilla href="https://bugzilla.suse.com/1124803">SUSE bug 1124803</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629190" comment="libSDL-1_2-0-1.2.15-3.12.73 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251318" comment="libSDL-1_2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487325" comment="libSDL2-2_0-0-2.0.8-9.63 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7575</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7575" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7575" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7575" ref_url="https://www.suse.com/security/cve/CVE-2019-7575" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005337.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005272.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00088.html" source="SUSE-SU"/>
    <description>
    SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-7575/">CVE-2019-7575</cve>
	<bugzilla href="https://bugzilla.suse.com/1124802">SUSE bug 1124802</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629190" comment="libSDL-1_2-0-1.2.15-3.12.73 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251318" comment="libSDL-1_2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487325" comment="libSDL2-2_0-0-2.0.8-9.63 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7576</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7576" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7576" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7576" ref_url="https://www.suse.com/security/cve/CVE-2019-7576" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005337.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005272.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00088.html" source="SUSE-SU"/>
    <description>
    SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7576/">CVE-2019-7576</cve>
	<bugzilla href="https://bugzilla.suse.com/1124799">SUSE bug 1124799</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629190" comment="libSDL-1_2-0-1.2.15-3.12.73 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251318" comment="libSDL-1_2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487325" comment="libSDL2-2_0-0-2.0.8-9.63 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7577</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7577" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7577" ref_url="https://www.suse.com/security/cve/CVE-2019-7577" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005337.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005272.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00088.html" source="SUSE-SU"/>
    <description>
    SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7577/">CVE-2019-7577</cve>
	<bugzilla href="https://bugzilla.suse.com/1124800">SUSE bug 1124800</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629190" comment="libSDL-1_2-0-1.2.15-3.12.73 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251318" comment="libSDL-1_2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487325" comment="libSDL2-2_0-0-2.0.8-9.63 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7578</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7578" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7578" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7578" ref_url="https://www.suse.com/security/cve/CVE-2019-7578" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005337.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005272.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00088.html" source="SUSE-SU"/>
    <description>
    SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7578/">CVE-2019-7578</cve>
	<bugzilla href="https://bugzilla.suse.com/1125099">SUSE bug 1125099</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629190" comment="libSDL-1_2-0-1.2.15-3.12.73 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251318" comment="libSDL-1_2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487325" comment="libSDL2-2_0-0-2.0.8-9.63 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7635</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7635" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7635" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7635" ref_url="https://www.suse.com/security/cve/CVE-2019-7635" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005337.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005272.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2071-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2109-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00030.html" source="SUSE-SU"/>
    <description>
    SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7635/">CVE-2019-7635</cve>
	<bugzilla href="https://bugzilla.suse.com/1124827">SUSE bug 1124827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629190" comment="libSDL-1_2-0-1.2.15-3.12.73 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251318" comment="libSDL-1_2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487325" comment="libSDL2-2_0-0-2.0.8-9.63 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7636</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7636" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7636" ref_url="https://www.suse.com/security/cve/CVE-2019-7636" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005337.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005272.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00088.html" source="SUSE-SU"/>
    <description>
    SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7636/">CVE-2019-7636</cve>
	<bugzilla href="https://bugzilla.suse.com/1124826">SUSE bug 1124826</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629190" comment="libSDL-1_2-0-1.2.15-3.12.73 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251318" comment="libSDL-1_2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487325" comment="libSDL2-2_0-0-2.0.8-9.63 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7637</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7637" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7637" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7637" ref_url="https://www.suse.com/security/cve/CVE-2019-7637" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005337.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005595.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14943-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010802.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1632-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00071.html" source="SUSE-SU"/>
    <description>
    SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-7637/">CVE-2019-7637</cve>
	<bugzilla href="https://bugzilla.suse.com/1124825">SUSE bug 1124825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134135">SUSE bug 1134135</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629190" comment="libSDL-1_2-0-1.2.15-3.12.73 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251318" comment="libSDL-1_2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487325" comment="libSDL2-2_0-0-2.0.8-9.63 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7638</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7638" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7638" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7638" ref_url="https://www.suse.com/security/cve/CVE-2019-7638" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005337.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005272.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00088.html" source="SUSE-SU"/>
    <description>
    SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7638/">CVE-2019-7638</cve>
	<bugzilla href="https://bugzilla.suse.com/1124824">SUSE bug 1124824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629190" comment="libSDL-1_2-0-1.2.15-3.12.73 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251318" comment="libSDL-1_2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487325" comment="libSDL2-2_0-0-2.0.8-9.63 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7663</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7663" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7663" ref_url="https://www.suse.com/security/cve/CVE-2019-7663" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006177.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00041.html" source="SUSE-SU"/>
    <description>
    An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted tiff file. This is different from CVE-2018-12900.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7663/">CVE-2019-7663</cve>
	<bugzilla href="https://bugzilla.suse.com/1125113">SUSE bug 1125113</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628893" comment="libtiff5-4.0.9-5.30.28 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7664</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7664" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7664" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7664" ref_url="https://www.suse.com/security/cve/CVE-2019-7664" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
    <description>
    In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial of service (program crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-02"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7664/">CVE-2019-7664</cve>
	<bugzilla href="https://bugzilla.suse.com/1125008">SUSE bug 1125008</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698533" comment="elfutils-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698534" comment="elfutils-lang-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698536" comment="libasm1-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698538" comment="libdw1-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698539" comment="libdw1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698545" comment="libebl-plugins-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698546" comment="libebl-plugins-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698548" comment="libelf1-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698549" comment="libelf1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20197665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-7665</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-7665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7665" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-7665" ref_url="https://www.suse.com/security/cve/CVE-2019-7665" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2614-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html" source="SUSE-SU"/>
    <description>
    In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of service (program crash) because ebl_core_note does not reject malformed core file notes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7665/">CVE-2019-7665</cve>
	<bugzilla href="https://bugzilla.suse.com/1125007">SUSE bug 1125007</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698532" comment="dwarves-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703508" comment="dwarves is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490191" comment="elfutils-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490192" comment="elfutils-lang-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177194" comment="elfutils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698535" comment="libasm-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257556" comment="libasm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490194" comment="libasm1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699893" comment="libasm1-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257559" comment="libasm1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698537" comment="libdw-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257561" comment="libdw-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490196" comment="libdw1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490197" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177195" comment="libdw1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698540" comment="libdwarves-devel-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703509" comment="libdwarves-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698541" comment="libdwarves-devel-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703510" comment="libdwarves-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698542" comment="libdwarves1-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703511" comment="libdwarves1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698543" comment="libdwarves1-32bit-1.22-150300.7.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009703512" comment="libdwarves1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698544" comment="libebl-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257565" comment="libebl-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490199" comment="libebl-plugins-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177196" comment="libebl-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490200" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177197" comment="libebl-plugins-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698547" comment="libelf-devel-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257569" comment="libelf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699894" comment="libelf-devel-32bit-0.177-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257571" comment="libelf-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490202" comment="libelf1-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009490203" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8075</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8075" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8075" ref_url="https://www.suse.com/security/cve/CVE-2019-8075" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8075/">CVE-2019-8075</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198320" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8320</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8320" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8320" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8320" ref_url="https://www.suse.com/security/cve/CVE-2019-8320" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    A Directory Traversal issue was discovered in RubyGems 2.7.6 and later through 3.0.2. Before making new directories or touching files (which now include path-checking code for symlinks), it would delete the target destination. If that destination was hidden behind a symlink, a malicious gem could delete arbitrary files on the user's machine, presuming the attacker could guess at paths. Given how frequently gem is run as sudo, and how predictable paths are on modern systems (/tmp, /usr, etc.), this could likely lead to data loss or an unusable system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8320/">CVE-2019-8320</cve>
	<bugzilla href="https://bugzilla.suse.com/1130627">SUSE bug 1130627</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198321" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8321</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8321" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8321" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8321" ref_url="https://www.suse.com/security/cve/CVE-2019-8321" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::UserInteraction#verbose calls say without escaping, escape sequence injection is possible.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-8321/">CVE-2019-8321</cve>
	<bugzilla href="https://bugzilla.suse.com/1130623">SUSE bug 1130623</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198322" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8322</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8322" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8322" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8322" ref_url="https://www.suse.com/security/cve/CVE-2019-8322" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in RubyGems 2.6 and later through 3.0.2. The gem owner command outputs the contents of the API response directly to stdout. Therefore, if the response is crafted, escape sequence injection may occur.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-8322/">CVE-2019-8322</cve>
	<bugzilla href="https://bugzilla.suse.com/1130622">SUSE bug 1130622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198323" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8323</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8323" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8323" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8323" ref_url="https://www.suse.com/security/cve/CVE-2019-8323" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in RubyGems 2.6 and later through 3.0.2. Gem::GemcutterUtilities#with_response may output the API response to stdout as it is. Therefore, if the API side modifies the response, escape sequence injection may occur.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-8323/">CVE-2019-8323</cve>
	<bugzilla href="https://bugzilla.suse.com/1130620">SUSE bug 1130620</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198324" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8324</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8324" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8324" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8324" ref_url="https://www.suse.com/security/cve/CVE-2019-8324" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in RubyGems 2.6 and later through 3.0.2. A crafted gem with a multi-line name is not handled correctly. Therefore, an attacker could inject arbitrary code to the stub line of gemspec, which is eval-ed by code in ensure_loadable_spec during the preinstall check.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8324/">CVE-2019-8324</cve>
	<bugzilla href="https://bugzilla.suse.com/1130617">SUSE bug 1130617</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198325" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8325</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8325" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8325" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8325" ref_url="https://www.suse.com/security/cve/CVE-2019-8325" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManager#run calls alert_error without escaping, escape sequence injection is possible. (There are many ways to cause an error.)
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-8325/">CVE-2019-8325</cve>
	<bugzilla href="https://bugzilla.suse.com/1130611">SUSE bug 1130611</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8375</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8375" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8375" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8375" ref_url="https://www.suse.com/security/cve/CVE-2019-8375" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005306.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005360.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00005.html" source="SUSE-SU"/>
    <description>
    The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp, UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-8375/">CVE-2019-8375</cve>
	<bugzilla href="https://bugzilla.suse.com/1126768">SUSE bug 1126768</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8396</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8396" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8396" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8396" ref_url="https://www.suse.com/security/cve/CVE-2019-8396" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012784.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012789.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012793.html" source="SUSE-SU"/>
    <description>
    A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-02"/>
	<updated date="2022-11-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8396/">CVE-2019-8396</cve>
	<bugzilla href="https://bugzilla.suse.com/1125882">SUSE bug 1125882</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720110" comment="hdf5-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720111" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720112" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720113" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720114" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720115" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720116" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720117" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720118" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720119" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720120" comment="hdf5-hpc-examples-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721709" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721710" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721711" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721712" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721713" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721714" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721715" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721716" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721717" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721718" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721719" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721720" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721721" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721722" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721723" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721724" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721725" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721726" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721727" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721728" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721729" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721730" comment="libhdf5-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721731" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721732" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721733" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721734" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721735" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721736" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721737" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721738" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721739" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721740" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721741" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721742" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721743" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721744" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721745" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721746" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721747" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721748" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721749" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721750" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721751" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721752" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721753" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721754" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721755" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721756" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721757" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721758" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721759" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721760" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721761" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721762" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721763" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721764" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721765" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721766" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721767" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721768" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721769" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721770" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721771" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721772" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721773" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721774" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721775" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721776" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721777" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721778" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721779" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721780" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721781" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721782" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721783" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721784" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721785" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721786" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721787" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721788" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721789" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8503</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8503" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8503" ref_url="https://www.suse.com/security/cve/CVE-2019-8503" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005426.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious website may be able to execute scripts in the context of another website.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-8503/">CVE-2019-8503</cve>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8506</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8506" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8506" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8506" ref_url="https://www.suse.com/security/cve/CVE-2019-8506" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005426.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html" source="SUSE-SU"/>
    <description>
    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8506/">CVE-2019-8506</cve>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8515</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8515" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8515" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8515" ref_url="https://www.suse.com/security/cve/CVE-2019-8515" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005426.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html" source="SUSE-SU"/>
    <description>
    A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8515/">CVE-2019-8515</cve>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8518</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8518" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8518" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8518" ref_url="https://www.suse.com/security/cve/CVE-2019-8518" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8518/">CVE-2019-8518</cve>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8523</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8523" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8523" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8523" ref_url="https://www.suse.com/security/cve/CVE-2019-8523" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8523/">CVE-2019-8523</cve>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8524</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8524" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8524" ref_url="https://www.suse.com/security/cve/CVE-2019-8524" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005426.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8524/">CVE-2019-8524</cve>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198535" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8535</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8535" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8535" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8535" ref_url="https://www.suse.com/security/cve/CVE-2019-8535" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005426.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8535/">CVE-2019-8535</cve>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198536" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8536</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8536" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8536" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8536" ref_url="https://www.suse.com/security/cve/CVE-2019-8536" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005426.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8536/">CVE-2019-8536</cve>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8544</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8544" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8544" ref_url="https://www.suse.com/security/cve/CVE-2019-8544" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005426.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8544/">CVE-2019-8544</cve>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8551</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8551" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8551" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8551" ref_url="https://www.suse.com/security/cve/CVE-2019-8551" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005426.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to universal cross site scripting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8551/">CVE-2019-8551</cve>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8558</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8558" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8558" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8558" ref_url="https://www.suse.com/security/cve/CVE-2019-8558" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005426.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8558/">CVE-2019-8558</cve>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8559</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8559" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8559" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8559" ref_url="https://www.suse.com/security/cve/CVE-2019-8559" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005426.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8559/">CVE-2019-8559</cve>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8563</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8563" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8563" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8563" ref_url="https://www.suse.com/security/cve/CVE-2019-8563" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005426.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8563/">CVE-2019-8563</cve>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198595" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8595</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8595" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8595" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8595" ref_url="https://www.suse.com/security/cve/CVE-2019-8595" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1766-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8595/">CVE-2019-8595</cve>
	<bugzilla href="https://bugzilla.suse.com/1135715">SUSE bug 1135715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8607</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8607" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8607" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8607" ref_url="https://www.suse.com/security/cve/CVE-2019-8607" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1766-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of process memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8607/">CVE-2019-8607</cve>
	<bugzilla href="https://bugzilla.suse.com/1135715">SUSE bug 1135715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8615</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8615" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8615" ref_url="https://www.suse.com/security/cve/CVE-2019-8615" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1766-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8615/">CVE-2019-8615</cve>
	<bugzilla href="https://bugzilla.suse.com/1135715">SUSE bug 1135715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8625</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8625" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8625" ref_url="https://www.suse.com/security/cve/CVE-2019-8625" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8625/">CVE-2019-8625</cve>
	<bugzilla href="https://bugzilla.suse.com/1155321">SUSE bug 1155321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198644" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8644</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8644" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8644" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8644" ref_url="https://www.suse.com/security/cve/CVE-2019-8644" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8644/">CVE-2019-8644</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198649" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8649</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8649" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8649" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8649" ref_url="https://www.suse.com/security/cve/CVE-2019-8649" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8649/">CVE-2019-8649</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8658</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8658" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8658" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8658" ref_url="https://www.suse.com/security/cve/CVE-2019-8658" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8658/">CVE-2019-8658</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198666" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8666</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8666" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8666" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8666" ref_url="https://www.suse.com/security/cve/CVE-2019-8666" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8666/">CVE-2019-8666</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8669</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8669" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8669" ref_url="https://www.suse.com/security/cve/CVE-2019-8669" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8669/">CVE-2019-8669</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8671</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8671" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8671" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8671" ref_url="https://www.suse.com/security/cve/CVE-2019-8671" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8671/">CVE-2019-8671</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8672</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8672" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8672" ref_url="https://www.suse.com/security/cve/CVE-2019-8672" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8672/">CVE-2019-8672</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8673</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8673" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8673" ref_url="https://www.suse.com/security/cve/CVE-2019-8673" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8673/">CVE-2019-8673</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8674</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8674" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8674" ref_url="https://www.suse.com/security/cve/CVE-2019-8674" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved state management. This issue is fixed in iOS 13, Safari 13. Processing maliciously crafted web content may lead to universal cross site scripting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8674/">CVE-2019-8674</cve>
	<bugzilla href="https://bugzilla.suse.com/1155321">SUSE bug 1155321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8675</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8675" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8675" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8675" ref_url="https://www.suse.com/security/cve/CVE-2019-8675" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14229-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006159.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3057-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006170.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2575-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00070.html" source="SUSE-SU"/>
    <description>
    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8675/">CVE-2019-8675</cve>
	<bugzilla href="https://bugzilla.suse.com/1146358">SUSE bug 1146358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168422">SUSE bug 1168422</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8676</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8676" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8676" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8676" ref_url="https://www.suse.com/security/cve/CVE-2019-8676" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8676/">CVE-2019-8676</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198677" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8677</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8677" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8677" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8677" ref_url="https://www.suse.com/security/cve/CVE-2019-8677" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8677/">CVE-2019-8677</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8678</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8678" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8678" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8678" ref_url="https://www.suse.com/security/cve/CVE-2019-8678" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8678/">CVE-2019-8678</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198679" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8679</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8679" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8679" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8679" ref_url="https://www.suse.com/security/cve/CVE-2019-8679" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8679/">CVE-2019-8679</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198680" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8680</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8680" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8680" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8680" ref_url="https://www.suse.com/security/cve/CVE-2019-8680" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8680/">CVE-2019-8680</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198681" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8681</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8681" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8681" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8681" ref_url="https://www.suse.com/security/cve/CVE-2019-8681" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8681/">CVE-2019-8681</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8683</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8683" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8683" ref_url="https://www.suse.com/security/cve/CVE-2019-8683" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8683/">CVE-2019-8683</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198684" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8684</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8684" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8684" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8684" ref_url="https://www.suse.com/security/cve/CVE-2019-8684" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8684/">CVE-2019-8684</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8686</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8686" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8686" ref_url="https://www.suse.com/security/cve/CVE-2019-8686" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8686/">CVE-2019-8686</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8687</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8687" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8687" ref_url="https://www.suse.com/security/cve/CVE-2019-8687" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8687/">CVE-2019-8687</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8688</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8688" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8688" ref_url="https://www.suse.com/security/cve/CVE-2019-8688" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8688/">CVE-2019-8688</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8689</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8689" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8689" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8689" ref_url="https://www.suse.com/security/cve/CVE-2019-8689" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8689/">CVE-2019-8689</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8690</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8690" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8690" ref_url="https://www.suse.com/security/cve/CVE-2019-8690" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2345-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8690/">CVE-2019-8690</cve>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8696</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8696" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8696" ref_url="https://www.suse.com/security/cve/CVE-2019-8696" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14229-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006159.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3057-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006170.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2575-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00070.html" source="SUSE-SU"/>
    <description>
    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8696/">CVE-2019-8696</cve>
	<bugzilla href="https://bugzilla.suse.com/1146358">SUSE bug 1146358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146359">SUSE bug 1146359</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8707</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8707" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8707" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8707" ref_url="https://www.suse.com/security/cve/CVE-2019-8707" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8707/">CVE-2019-8707</cve>
	<bugzilla href="https://bugzilla.suse.com/1155321">SUSE bug 1155321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8710</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8710" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8710" ref_url="https://www.suse.com/security/cve/CVE-2019-8710" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8710/">CVE-2019-8710</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198719" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8719</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8719" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8719" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8719" ref_url="https://www.suse.com/security/cve/CVE-2019-8719" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8719/">CVE-2019-8719</cve>
	<bugzilla href="https://bugzilla.suse.com/1155321">SUSE bug 1155321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8720</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8720" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8720" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8720" ref_url="https://www.suse.com/security/cve/CVE-2019-8720" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8720/">CVE-2019-8720</cve>
	<bugzilla href="https://bugzilla.suse.com/1155321">SUSE bug 1155321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198726" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8726</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8726" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8726" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8726" ref_url="https://www.suse.com/security/cve/CVE-2019-8726" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8726/">CVE-2019-8726</cve>
	<bugzilla href="https://bugzilla.suse.com/1155321">SUSE bug 1155321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8733</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8733" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8733" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8733" ref_url="https://www.suse.com/security/cve/CVE-2019-8733" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8733/">CVE-2019-8733</cve>
	<bugzilla href="https://bugzilla.suse.com/1155321">SUSE bug 1155321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8735</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8735" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8735" ref_url="https://www.suse.com/security/cve/CVE-2019-8735" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8735/">CVE-2019-8735</cve>
	<bugzilla href="https://bugzilla.suse.com/1155321">SUSE bug 1155321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8743</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8743" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8743" ref_url="https://www.suse.com/security/cve/CVE-2019-8743" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8743/">CVE-2019-8743</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8763</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8763" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8763" ref_url="https://www.suse.com/security/cve/CVE-2019-8763" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.1 and iPadOS 13.1, tvOS 13, Safari 13.0.1, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8763/">CVE-2019-8763</cve>
	<bugzilla href="https://bugzilla.suse.com/1155321">SUSE bug 1155321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8764</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8764" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8764" ref_url="https://www.suse.com/security/cve/CVE-2019-8764" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to universal cross site scripting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8764/">CVE-2019-8764</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8765</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8765" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8765" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8765" ref_url="https://www.suse.com/security/cve/CVE-2019-8765" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8765/">CVE-2019-8765</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8766</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8766" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8766" ref_url="https://www.suse.com/security/cve/CVE-2019-8766" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8766/">CVE-2019-8766</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8768</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8768" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8768" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8768" ref_url="https://www.suse.com/security/cve/CVE-2019-8768" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    "Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Catalina 10.15. A user may be unable to delete browsing history items.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8768/">CVE-2019-8768</cve>
	<bugzilla href="https://bugzilla.suse.com/1155321">SUSE bug 1155321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8769</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8769" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8769" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8769" ref_url="https://www.suse.com/security/cve/CVE-2019-8769" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8769/">CVE-2019-8769</cve>
	<bugzilla href="https://bugzilla.suse.com/1155321">SUSE bug 1155321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8771</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8771" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8771" ref_url="https://www.suse.com/security/cve/CVE-2019-8771" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8771/">CVE-2019-8771</cve>
	<bugzilla href="https://bugzilla.suse.com/1155321">SUSE bug 1155321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8782</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8782" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8782" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8782" ref_url="https://www.suse.com/security/cve/CVE-2019-8782" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8782/">CVE-2019-8782</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8783</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8783" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8783" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8783" ref_url="https://www.suse.com/security/cve/CVE-2019-8783" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8783/">CVE-2019-8783</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8808</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8808" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8808" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8808" ref_url="https://www.suse.com/security/cve/CVE-2019-8808" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8808/">CVE-2019-8808</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8811</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8811" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8811" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8811" ref_url="https://www.suse.com/security/cve/CVE-2019-8811" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8811/">CVE-2019-8811</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8812</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8812" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8812" ref_url="https://www.suse.com/security/cve/CVE-2019-8812" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8812/">CVE-2019-8812</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8813</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8813" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8813" ref_url="https://www.suse.com/security/cve/CVE-2019-8813" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to universal cross site scripting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8813/">CVE-2019-8813</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8814</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8814" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8814" ref_url="https://www.suse.com/security/cve/CVE-2019-8814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8814/">CVE-2019-8814</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8815</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8815" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8815" ref_url="https://www.suse.com/security/cve/CVE-2019-8815" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8815/">CVE-2019-8815</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8816</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8816" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8816" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8816" ref_url="https://www.suse.com/security/cve/CVE-2019-8816" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8816/">CVE-2019-8816</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8819</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8819" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8819" ref_url="https://www.suse.com/security/cve/CVE-2019-8819" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8819/">CVE-2019-8819</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8820</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8820" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8820" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8820" ref_url="https://www.suse.com/security/cve/CVE-2019-8820" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8820/">CVE-2019-8820</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8821</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8821" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8821" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8821" ref_url="https://www.suse.com/security/cve/CVE-2019-8821" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8821/">CVE-2019-8821</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8822</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8822" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8822" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8822" ref_url="https://www.suse.com/security/cve/CVE-2019-8822" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8822/">CVE-2019-8822</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8823</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8823" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8823" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8823" ref_url="https://www.suse.com/security/cve/CVE-2019-8823" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2587-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00074.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8823/">CVE-2019-8823</cve>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8835</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8835" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8835" ref_url="https://www.suse.com/security/cve/CVE-2019-8835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8835/">CVE-2019-8835</cve>
	<bugzilla href="https://bugzilla.suse.com/1161719">SUSE bug 1161719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8842</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8842" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8842" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8842" ref_url="https://www.suse.com/security/cve/CVE-2019-8842" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:414-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008468.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0285-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0286-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008268.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0253-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EYJFJX2GGKH4VAMYMTSR5TZZO2F2HPHC/" source="SUSE-SU"/>
    <description>
    A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain configurations, a remote attacker may be able to submit arbitrary print jobs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.6/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8842/">CVE-2019-8842</cve>
	<bugzilla href="https://bugzilla.suse.com/1170671">SUSE bug 1170671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8844</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8844" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8844" ref_url="https://www.suse.com/security/cve/CVE-2019-8844" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, watchOS 6.1.1, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8844/">CVE-2019-8844</cve>
	<bugzilla href="https://bugzilla.suse.com/1161719">SUSE bug 1161719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8846</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8846" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8846" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8846" ref_url="https://www.suse.com/security/cve/CVE-2019-8846" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html" source="SUSE-SU"/>
    <description>
    A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8846/">CVE-2019-8846</cve>
	<bugzilla href="https://bugzilla.suse.com/1161719">SUSE bug 1161719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8905</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8905" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8905" ref_url="https://www.suse.com/security/cve/CVE-2019-8905" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0571-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190571-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005284.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1197-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html" source="SUSE-SU"/>
    <description>
    do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8905/">CVE-2019-8905</cve>
	<bugzilla href="https://bugzilla.suse.com/1126117">SUSE bug 1126117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126118">SUSE bug 1126118</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628435" comment="file-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151700" comment="file is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628437" comment="file-magic-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151702" comment="file-magic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628438" comment="libmagic1-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151703" comment="libmagic1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628439" comment="libmagic1-32bit-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151704" comment="libmagic1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198906" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8906</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8906" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8906" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8906" ref_url="https://www.suse.com/security/cve/CVE-2019-8906" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0571-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190571-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005284.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1197-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html" source="SUSE-SU"/>
    <description>
    do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8906/">CVE-2019-8906</cve>
	<bugzilla href="https://bugzilla.suse.com/1126119">SUSE bug 1126119</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628435" comment="file-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151700" comment="file is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628437" comment="file-magic-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151702" comment="file-magic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628438" comment="libmagic1-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151703" comment="libmagic1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628439" comment="libmagic1-32bit-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151704" comment="libmagic1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8907</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8907" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8907" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8907" ref_url="https://www.suse.com/security/cve/CVE-2019-8907" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0571-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190571-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005284.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1197-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html" source="SUSE-SU"/>
    <description>
    do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8907/">CVE-2019-8907</cve>
	<bugzilla href="https://bugzilla.suse.com/1126117">SUSE bug 1126117</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628435" comment="file-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151700" comment="file is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628437" comment="file-magic-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151702" comment="file-magic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628438" comment="libmagic1-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151703" comment="libmagic1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628439" comment="libmagic1-32bit-5.32-7.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151704" comment="libmagic1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198912" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8912</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8912" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8912" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8912" ref_url="https://www.suse.com/security/cve/CVE-2019-8912" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0726-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0745-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0767-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0784-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190784-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0785-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190785-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005285.html" source="SUSE-SU"/>
		<reference ref_id="TID000019417" ref_url="https://www.suse.com/support/kb/doc/?id=000019417" source="SUSE-SU"/>
		<reference ref_id="TID7023740" ref_url="https://www.suse.com/support/kb/doc/?id=7023740" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1193-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8912/">CVE-2019-8912</cve>
	<bugzilla href="https://bugzilla.suse.com/1125907">SUSE bug 1125907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126284">SUSE bug 1126284</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20198934" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-8934</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-8934" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8934" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-8934" ref_url="https://www.suse.com/security/cve/CVE-2019-8934" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1239-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008910.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00040.html" source="SUSE-SU"/>
    <description>
    hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a guest.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8934/">CVE-2019-8934</cve>
	<bugzilla href="https://bugzilla.suse.com/1118900">SUSE bug 1118900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126455">SUSE bug 1126455</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9020</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9020" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9020" ref_url="https://www.suse.com/security/cve/CVE-2019-9020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0985-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9020/">CVE-2019-9020</cve>
	<bugzilla href="https://bugzilla.suse.com/1126711">SUSE bug 1126711</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9021</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9021" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9021" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9021" ref_url="https://www.suse.com/security/cve/CVE-2019-9021" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0985-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the file name, a different vulnerability than CVE-2018-20783. This is related to phar_detect_phar_fname_ext in ext/phar/phar.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9021/">CVE-2019-9021</cve>
	<bugzilla href="https://bugzilla.suse.com/1126713">SUSE bug 1126713</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9022</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9022" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9022" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9022" ref_url="https://www.suse.com/security/cve/CVE-2019-9022" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects php_parserr in ext/standard/dns.c for DNS_CAA and DNS_ANY queries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9022/">CVE-2019-9022</cve>
	<bugzilla href="https://bugzilla.suse.com/1126827">SUSE bug 1126827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199023" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9023</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9023" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9023" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9023" ref_url="https://www.suse.com/security/cve/CVE-2019-9023" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0985-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in ext/mbstring/oniguruma/regcomp.c, ext/mbstring/oniguruma/regexec.c, ext/mbstring/oniguruma/regparse.c, ext/mbstring/oniguruma/enc/unicode.c, and ext/mbstring/oniguruma/src/utf32_be.c when a multibyte regular expression pattern contains invalid multibyte sequences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9023/">CVE-2019-9023</cve>
	<bugzilla href="https://bugzilla.suse.com/1126823">SUSE bug 1126823</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9024</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9024" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9024" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9024" ref_url="https://www.suse.com/security/cve/CVE-2019-9024" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0985-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated areas in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9024/">CVE-2019-9024</cve>
	<bugzilla href="https://bugzilla.suse.com/1126821">SUSE bug 1126821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9074</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9074" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9074" ref_url="https://www.suse.com/security/cve/CVE-2019-9074" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007888.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1790-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1804-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c, when called from pex64_get_runtime_function in pei-x86_64.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9074/">CVE-2019-9074</cve>
	<bugzilla href="https://bugzilla.suse.com/1126831">SUSE bug 1126831</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9075</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9075" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9075" ref_url="https://www.suse.com/security/cve/CVE-2019-9075" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007888.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1790-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1804-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9075/">CVE-2019-9075</cve>
	<bugzilla href="https://bugzilla.suse.com/1071544">SUSE bug 1071544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126829">SUSE bug 1126829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193110">SUSE bug 1193110</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9077</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9077" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9077" ref_url="https://www.suse.com/security/cve/CVE-2019-9077" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007888.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1790-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1804-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9077/">CVE-2019-9077</cve>
	<bugzilla href="https://bugzilla.suse.com/1126826">SUSE bug 1126826</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628323" comment="binutils-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628325" comment="libctf-nobfd0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628326" comment="libctf0-2.35.1-7.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9169</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9169" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9169" ref_url="https://www.suse.com/security/cve/CVE-2019-9169" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006343.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1877-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005729.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1958-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1958-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005821.html" source="SUSE-SU"/>
    <description>
    In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9169/">CVE-2019-9169</cve>
	<bugzilla href="https://bugzilla.suse.com/1127308">SUSE bug 1127308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146392">SUSE bug 1146392</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9200</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9200" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9200" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9200" ref_url="https://www.suse.com/security/cve/CVE-2019-9200" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9200/">CVE-2019-9200</cve>
	<bugzilla href="https://bugzilla.suse.com/1127329">SUSE bug 1127329</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9215</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9215" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9215" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9215" ref_url="https://www.suse.com/security/cve/CVE-2019-9215" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2019:1797-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1880-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0944-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00009.html" source="SUSE-SU"/>
    <description>
    In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9215/">CVE-2019-9215</cve>
	<bugzilla href="https://bugzilla.suse.com/1127341">SUSE bug 1127341</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694827" comment="libBasicUsageEnvironment1-2019.06.28-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260574" comment="libBasicUsageEnvironment1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694828" comment="libUsageEnvironment3-2019.06.28-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260576" comment="libUsageEnvironment3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694829" comment="libgroupsock8-2019.06.28-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260578" comment="libgroupsock8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694830" comment="libliveMedia66-2019.06.28-bp153.1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260580" comment="libliveMedia66 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9232</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9232" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9232" ref_url="https://www.suse.com/security/cve/CVE-2019-9232" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006387.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0459-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006524.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html" source="SUSE-SU"/>
    <description>
    In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9232/">CVE-2019-9232</cve>
	<bugzilla href="https://bugzilla.suse.com/1160613">SUSE bug 1160613</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482448" comment="libvpx4-1.6.1-6.6.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177224" comment="libvpx4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199278" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9278</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9278" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9278" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9278" ref_url="https://www.suse.com/security/cve/CVE-2019-9278" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0457-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006538.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007105.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0264-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html" source="SUSE-SU"/>
    <description>
    In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112537774
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9278/">CVE-2019-9278</cve>
	<bugzilla href="https://bugzilla.suse.com/1160770">SUSE bug 1160770</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629201" comment="libexif12-0.6.22-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199325" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9325</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9325" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9325" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9325" ref_url="https://www.suse.com/security/cve/CVE-2019-9325" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006387.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html" source="SUSE-SU"/>
    <description>
    In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112001302
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-16"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9325/">CVE-2019-9325</cve>
	<bugzilla href="https://bugzilla.suse.com/1160612">SUSE bug 1160612</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482448" comment="libvpx4-1.6.1-6.6.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177224" comment="libvpx4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9371</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9371" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9371" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9371" ref_url="https://www.suse.com/security/cve/CVE-2019-9371" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006387.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html" source="SUSE-SU"/>
    <description>
    In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-132783254
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9371/">CVE-2019-9371</cve>
	<bugzilla href="https://bugzilla.suse.com/1160615">SUSE bug 1160615</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482448" comment="libvpx4-1.6.1-6.6.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177224" comment="libvpx4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9433</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9433" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9433" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9433" ref_url="https://www.suse.com/security/cve/CVE-2019-9433" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006387.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0459-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006524.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html" source="SUSE-SU"/>
    <description>
    In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9433/">CVE-2019-9433</cve>
	<bugzilla href="https://bugzilla.suse.com/1160614">SUSE bug 1160614</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482448" comment="libvpx4-1.6.1-6.6.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177224" comment="libvpx4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9494</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9494" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9494" ref_url="https://www.suse.com/security/cve/CVE-2019-9494" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID000019433" ref_url="https://www.suse.com/support/kb/doc/?id=000019433" source="SUSE-SU"/>
		<reference ref_id="TID7023818" ref_url="https://www.suse.com/support/kb/doc/?id=7023818" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9494/">CVE-2019-9494</cve>
	<bugzilla href="https://bugzilla.suse.com/1131291">SUSE bug 1131291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131868">SUSE bug 1131868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194732">SUSE bug 1194732</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9495</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9495" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9495" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9495" ref_url="https://www.suse.com/security/cve/CVE-2019-9495" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID000019433" ref_url="https://www.suse.com/support/kb/doc/?id=000019433" source="SUSE-SU"/>
		<reference ref_id="TID7023818" ref_url="https://www.suse.com/support/kb/doc/?id=7023818" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful attack. Memory access patterns are visible in a shared cache. Weak passwords may be cracked. Versions of hostapd/wpa_supplicant 2.7 and newer, are not vulnerable to the timing attack described in CVE-2019-9494. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9495/">CVE-2019-9495</cve>
	<bugzilla href="https://bugzilla.suse.com/1131291">SUSE bug 1131291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131870">SUSE bug 1131870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194733">SUSE bug 1194733</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9497</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9497" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9497" ref_url="https://www.suse.com/security/cve/CVE-2019-9497" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID000019433" ref_url="https://www.suse.com/support/kb/doc/?id=000019433" source="SUSE-SU"/>
		<reference ref_id="TID7023818" ref_url="https://www.suse.com/support/kb/doc/?id=7023818" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9497/">CVE-2019-9497</cve>
	<bugzilla href="https://bugzilla.suse.com/1131871">SUSE bug 1131871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131872">SUSE bug 1131872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131874">SUSE bug 1131874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9498</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9498" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9498" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9498" ref_url="https://www.suse.com/security/cve/CVE-2019-9498" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID000019433" ref_url="https://www.suse.com/support/kb/doc/?id=000019433" source="SUSE-SU"/>
		<reference ref_id="TID7023818" ref_url="https://www.suse.com/support/kb/doc/?id=7023818" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar/element values to complete authentication, gaining session key and network access without needing or learning the password. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.8/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-9498/">CVE-2019-9498</cve>
	<bugzilla href="https://bugzilla.suse.com/1131871">SUSE bug 1131871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131872">SUSE bug 1131872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131874">SUSE bug 1131874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199499" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9499</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9499" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9499" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9499" ref_url="https://www.suse.com/security/cve/CVE-2019-9499" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID000019433" ref_url="https://www.suse.com/support/kb/doc/?id=000019433" source="SUSE-SU"/>
		<reference ref_id="TID7023818" ref_url="https://www.suse.com/support/kb/doc/?id=7023818" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may complete authentication, session key and control of the data connection with a client. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.8/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-9499/">CVE-2019-9499</cve>
	<bugzilla href="https://bugzilla.suse.com/1131871">SUSE bug 1131871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131872">SUSE bug 1131872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131874">SUSE bug 1131874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9511</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9511" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9511" ref_url="https://www.suse.com/security/cve/CVE-2019-9511" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2254-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006320.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008541.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2114-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2120-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2232-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2264-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html" source="SUSE-SU"/>
    <description>
    Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9511/">CVE-2019-9511</cve>
	<bugzilla href="https://bugzilla.suse.com/1145579">SUSE bug 1145579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146091">SUSE bug 1146091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146182">SUSE bug 1146182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193427">SUSE bug 1193427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202787">SUSE bug 1202787</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628805" comment="libnghttp2-14-1.40.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153583" comment="libnghttp2-14 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628806" comment="libnghttp2-14-32bit-1.40.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177223" comment="libnghttp2-14-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9513</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9513" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9513" ref_url="https://www.suse.com/security/cve/CVE-2019-9513" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2254-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006320.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008541.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2114-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2120-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2232-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2264-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html" source="SUSE-SU"/>
    <description>
    Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9513/">CVE-2019-9513</cve>
	<bugzilla href="https://bugzilla.suse.com/1145580">SUSE bug 1145580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146094">SUSE bug 1146094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146184">SUSE bug 1146184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193427">SUSE bug 1193427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202787">SUSE bug 1202787</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628805" comment="libnghttp2-14-1.40.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153583" comment="libnghttp2-14 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628806" comment="libnghttp2-14-32bit-1.40.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177223" comment="libnghttp2-14-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9517</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9517" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9517" ref_url="https://www.suse.com/security/cve/CVE-2019-9517" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005849.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2254-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2329-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005889.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006320.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2114-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html" source="SUSE-SU"/>
    <description>
    Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without constraint; however, they leave the TCP window closed so the peer cannot actually write (many of) the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the servers queue the responses, this can consume excess memory, CPU, or both.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9517/">CVE-2019-9517</cve>
	<bugzilla href="https://bugzilla.suse.com/1145575">SUSE bug 1145575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146097">SUSE bug 1146097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9578</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9578" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9578" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9578" ref_url="https://www.suse.com/security/cve/CVE-2019-9578" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005663.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1750-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005662.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1755-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008817.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1708-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0799-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QRDOETNQVM5LVLJRZMNGQEBNRFW4ZWEV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1755-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W6NOI7O3I53SFL6DVLZH5VWF6EO4AISA/" source="SUSE-SU"/>
    <description>
    In devs.c in Yubico libu2f-host before 1.1.8, the response to init is misparsed, leaking uninitialized stack memory back to the device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.1/CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9578/">CVE-2019-9578</cve>
	<bugzilla href="https://bugzilla.suse.com/1128140">SUSE bug 1128140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493942" comment="libu2f-host-devel-1.1.10-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244552" comment="libu2f-host-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625260" comment="libu2f-host-doc-1.1.10-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244553" comment="libu2f-host-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493943" comment="libu2f-host0-1.1.10-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244554" comment="libu2f-host0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493944" comment="u2f-host-1.1.10-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244555" comment="u2f-host is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199631" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9631</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9631" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9631" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9631" ref_url="https://www.suse.com/security/cve/CVE-2019-9631" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9631/">CVE-2019-9631</cve>
	<bugzilla href="https://bugzilla.suse.com/1129202">SUSE bug 1129202</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9636</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9636" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9636" ref_url="https://www.suse.com/security/cve/CVE-2019-9636" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0961-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005348.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005347.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005534.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0302-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006445.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1282-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1371-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9636/">CVE-2019-9636</cve>
	<bugzilla href="https://bugzilla.suse.com/1129346">SUSE bug 1129346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135433">SUSE bug 1135433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138459">SUSE bug 1138459</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9637</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9637" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9637" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9637" ref_url="https://www.suse.com/security/cve/CVE-2019-9637" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005351.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005489.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9637/">CVE-2019-9637</cve>
	<bugzilla href="https://bugzilla.suse.com/1128892">SUSE bug 1128892</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9638</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9638" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9638" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9638" ref_url="https://www.suse.com/security/cve/CVE-2019-9638" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005351.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005489.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note-&gt;offset relationship to value_len.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9638/">CVE-2019-9638</cve>
	<bugzilla href="https://bugzilla.suse.com/1128889">SUSE bug 1128889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9639</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9639" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9639" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9639" ref_url="https://www.suse.com/security/cve/CVE-2019-9639" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005351.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005489.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005548.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9639/">CVE-2019-9639</cve>
	<bugzilla href="https://bugzilla.suse.com/1128887">SUSE bug 1128887</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9640</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9640" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9640" ref_url="https://www.suse.com/security/cve/CVE-2019-9640" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005351.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005489.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9640/">CVE-2019-9640</cve>
	<bugzilla href="https://bugzilla.suse.com/1128883">SUSE bug 1128883</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9641</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9641" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9641" ref_url="https://www.suse.com/security/cve/CVE-2019-9641" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0985-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9641/">CVE-2019-9641</cve>
	<bugzilla href="https://bugzilla.suse.com/1128722">SUSE bug 1128722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9674</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9674" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9674" ref_url="https://www.suse.com/security/cve/CVE-2019-9674" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0467-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006520.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006545.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006666.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006878.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00041.html" source="SUSE-SU"/>
    <description>
    Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9674/">CVE-2019-9674</cve>
	<bugzilla href="https://bugzilla.suse.com/1162825">SUSE bug 1162825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9675</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9675" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9675" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9675" ref_url="https://www.suse.com/security/cve/CVE-2019-9675" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005351.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005489.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue allows theoretical compromise of security, but a practical attack is usually impossible."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9675/">CVE-2019-9675</cve>
	<bugzilla href="https://bugzilla.suse.com/1128886">SUSE bug 1128886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9704</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9704" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9704" ref_url="https://www.suse.com/security/cve/CVE-2019-9704" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005520.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1389-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005655.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005754.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1520-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00019.html" source="SUSE-SU"/>
    <description>
    Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9704/">CVE-2019-9704</cve>
	<bugzilla href="https://bugzilla.suse.com/1128937">SUSE bug 1128937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187508">SUSE bug 1187508</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481890" comment="cron-4.2-6.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151016" comment="cron is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481891" comment="cronie-1.5.1-6.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151017" comment="cronie is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9705</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9705" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9705" ref_url="https://www.suse.com/security/cve/CVE-2019-9705" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005520.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1389-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005655.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005754.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1520-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00019.html" source="SUSE-SU"/>
    <description>
    Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (memory consumption) via a large crontab file because an unlimited number of lines is accepted.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9705/">CVE-2019-9705</cve>
	<bugzilla href="https://bugzilla.suse.com/1128935">SUSE bug 1128935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187508">SUSE bug 1187508</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481890" comment="cron-4.2-6.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151016" comment="cron is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481891" comment="cronie-1.5.1-6.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151017" comment="cronie is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9718</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9718" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9718" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9718" ref_url="https://www.suse.com/security/cve/CVE-2019-9718" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3184-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007084.html" source="SUSE-SU"/>
    <description>
    In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ff_htmlmarkup_to_ass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9718/">CVE-2019-9718</cve>
	<bugzilla href="https://bugzilla.suse.com/1129715">SUSE bug 1129715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487328" comment="libavcodec57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487329" comment="libavformat57-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487331" comment="libavutil55-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487335" comment="libswresample2-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487337" comment="libswscale4-3.4.2-9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9721</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9721" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9721" ref_url="https://www.suse.com/security/cve/CVE-2019-9721" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009387.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2919-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHYNSW2TAJSSTZPOYXQXGZDI6LYBWIT4/" source="SUSE-SU"/>
    <description>
    A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handle_open_brace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9721/">CVE-2019-9721</cve>
	<bugzilla href="https://bugzilla.suse.com/1129714">SUSE bug 1129714</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631148" comment="ffmpeg-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631287" comment="ffmpeg-private-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631288" comment="libavcodec-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631132" comment="libavcodec57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631289" comment="libavcodec57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631290" comment="libavdevice-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631149" comment="libavdevice57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631291" comment="libavdevice57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631292" comment="libavfilter-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631150" comment="libavfilter6-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631293" comment="libavfilter6-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631294" comment="libavformat-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631133" comment="libavformat57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631295" comment="libavformat57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631145" comment="libavresample-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631146" comment="libavresample3-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631136" comment="libavresample3-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631137" comment="libavutil-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631138" comment="libavutil55-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631296" comment="libavutil55-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631139" comment="libpostproc-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631140" comment="libpostproc54-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631297" comment="libpostproc54-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631141" comment="libswresample-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631142" comment="libswresample2-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631298" comment="libswresample2-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631143" comment="libswscale-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631144" comment="libswscale4-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631299" comment="libswscale4-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9740</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9740" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9740" ref_url="https://www.suse.com/security/cve/CVE-2019-9740" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005880.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005892.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2370-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192370-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2399-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007916.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3897-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2133-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the query string after a ? character) followed by an HTTP header or a Redis command. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9740/">CVE-2019-9740</cve>
	<bugzilla href="https://bugzilla.suse.com/1129071">SUSE bug 1129071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130840">SUSE bug 1130840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132663">SUSE bug 1132663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629005" comment="python3-urllib3-1.25.10-2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177231" comment="python3-urllib3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9755</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9755" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9755" ref_url="https://www.suse.com/security/cve/CVE-2019-9755" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005357.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2965-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009419.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009416.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1244-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6I22R7EMWP6WBQIXDCKB4KJMMB67TMZK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2971-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APJMFOEFTZSFEAKDMRWUM25JNERJUHUT/" source="SUSE-SU"/>
    <description>
    An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9755/">CVE-2019-9755</cve>
	<bugzilla href="https://bugzilla.suse.com/1130165">SUSE bug 1130165</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632558" comment="libntfs-3g-devel-2021.8.22-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239068" comment="libntfs-3g-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695696" comment="libntfs-3g87-2016.2.22-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252843" comment="libntfs-3g87 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695697" comment="ntfs-3g-2016.2.22-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239070" comment="ntfs-3g is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695698" comment="ntfsprogs-2016.2.22-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239072" comment="ntfsprogs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632562" comment="ntfsprogs-extra-2021.8.22-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252844" comment="ntfsprogs-extra is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9788</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9788" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9788" ref_url="https://www.suse.com/security/cve/CVE-2019-9788" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 60.6, Firefox ESR &lt; 60.6, and Firefox &lt; 66.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9788/">CVE-2019-9788</cve>
	<bugzilla href="https://bugzilla.suse.com/1129821">SUSE bug 1129821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9790</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9790" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9790" ref_url="https://www.suse.com/security/cve/CVE-2019-9790" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60.6, Firefox ESR &lt; 60.6, and Firefox &lt; 66.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9790/">CVE-2019-9790</cve>
	<bugzilla href="https://bugzilla.suse.com/1129821">SUSE bug 1129821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9791</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9791" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9791" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9791" ref_url="https://www.suse.com/security/cve/CVE-2019-9791" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html" source="SUSE-SU"/>
    <description>
    The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time (JIT) compiler and when the constructor function is entered through on-stack replacement (OSR). This allows for possible arbitrary reading and writing of objects during an exploitable crash. This vulnerability affects Thunderbird &lt; 60.6, Firefox ESR &lt; 60.6, and Firefox &lt; 66.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9791/">CVE-2019-9791</cve>
	<bugzilla href="https://bugzilla.suse.com/1129821">SUSE bug 1129821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9792</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9792" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9792" ref_url="https://www.suse.com/security/cve/CVE-2019-9792" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html" source="SUSE-SU"/>
    <description>
    The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during a bailout. This magic value can then be used by JavaScript to achieve memory corruption, which results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60.6, Firefox ESR &lt; 60.6, and Firefox &lt; 66.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9792/">CVE-2019-9792</cve>
	<bugzilla href="https://bugzilla.suse.com/1129821">SUSE bug 1129821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9793</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9793" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9793" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9793" ref_url="https://www.suse.com/security/cve/CVE-2019-9793" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html" source="SUSE-SU"/>
    <description>
    A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre mitigations have been disabled. This vulnerability could allow an attacker to create an arbitrary value in compiled JavaScript, for which the range analysis will infer a fully controlled, incorrect range in circumstances where users have explicitly disabled Spectre mitigations. *Note: Spectre mitigations are currently enabled for all users by default settings.*. This vulnerability affects Thunderbird &lt; 60.6, Firefox ESR &lt; 60.6, and Firefox &lt; 66.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9793/">CVE-2019-9793</cve>
	<bugzilla href="https://bugzilla.suse.com/1129821">SUSE bug 1129821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9794</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9794" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9794" ref_url="https://www.suse.com/security/cve/CVE-2019-9794" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html" source="SUSE-SU"/>
    <description>
    A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files whose location is supplied through these command line arguments if Firefox is configured as the default URI handler for a given URI scheme in third party applications and these applications insufficiently sanitize URL data. *Note: This issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird &lt; 60.6, Firefox ESR &lt; 60.6, and Firefox &lt; 66.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9794/">CVE-2019-9794</cve>
	<bugzilla href="https://bugzilla.suse.com/1129821">SUSE bug 1129821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199795" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9795</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9795" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9795" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9795" ref_url="https://www.suse.com/security/cve/CVE-2019-9795" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html" source="SUSE-SU"/>
    <description>
    A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could potentially be used by malicious JavaScript to trigger a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60.6, Firefox ESR &lt; 60.6, and Firefox &lt; 66.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9795/">CVE-2019-9795</cve>
	<bugzilla href="https://bugzilla.suse.com/1129821">SUSE bug 1129821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199796" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9796</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9796" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9796" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9796" ref_url="https://www.suse.com/security/cve/CVE-2019-9796" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration is expected. When a registration is later freed with the removal of the animation controller element, the refresh driver incorrectly leaves a dangling pointer to the driver's observer array. This vulnerability affects Thunderbird &lt; 60.6, Firefox ESR &lt; 60.6, and Firefox &lt; 66.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9796/">CVE-2019-9796</cve>
	<bugzilla href="https://bugzilla.suse.com/1129821">SUSE bug 1129821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9797</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9797" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9797" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9797" ref_url="https://www.suse.com/security/cve/CVE-2019-9797" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox &lt; 66.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9797/">CVE-2019-9797</cve>
	<bugzilla href="https://bugzilla.suse.com/1129821">SUSE bug 1129821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9800</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9800" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9800" ref_url="https://www.suse.com/security/cve/CVE-2019-9800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 60.7, Firefox &lt; 67, and Firefox ESR &lt; 60.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9800/">CVE-2019-9800</cve>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9801</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9801" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9801" ref_url="https://www.suse.com/security/cve/CVE-2019-9801" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html" source="SUSE-SU"/>
    <description>
    Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on Windows operating systems. This should only happen if the program has specifically registered itself as a "URL Handler" in the Windows registry. *Note: This issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird &lt; 60.6, Firefox ESR &lt; 60.6, and Firefox &lt; 66.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9801/">CVE-2019-9801</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9810</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9810" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9810" ref_url="https://www.suse.com/security/cve/CVE-2019-9810" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html" source="SUSE-SU"/>
    <description>
    Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerability affects Firefox &lt; 66.0.1, Firefox ESR &lt; 60.6.1, and Thunderbird &lt; 60.6.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9810/">CVE-2019-9810</cve>
	<bugzilla href="https://bugzilla.suse.com/1129821">SUSE bug 1129821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130262">SUSE bug 1130262</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9811</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9811" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9811" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9811" ref_url="https://www.suse.com/security/cve/CVE-2019-9811" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1861-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1960-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1782-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-07/msg00107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vulnerability affects Firefox ESR &lt; 60.8, Firefox &lt; 68, and Thunderbird &lt; 60.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9811/">CVE-2019-9811</cve>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9812</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9812" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9812" ref_url="https://www.suse.com/security/cve/CVE-2019-9812" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2436-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005999.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html" source="SUSE-SU"/>
    <description>
    Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts.firefox.com in that process and forcing a log-in to a malicious Firefox Sync account. Preference settings that disable the sandbox are then synchronized to the local machine and the compromised browser would restart without the sandbox if a crash is triggered. This vulnerability affects Firefox ESR &lt; 60.9, Firefox ESR &lt; 68.1, and Firefox &lt; 69.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9812/">CVE-2019-9812</cve>
	<bugzilla href="https://bugzilla.suse.com/1149294">SUSE bug 1149294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149324">SUSE bug 1149324</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9813</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9813" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9813" ref_url="https://www.suse.com/security/cve/CVE-2019-9813" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html" source="SUSE-SU"/>
    <description>
    Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulnerability affects Firefox &lt; 66.0.1, Firefox ESR &lt; 60.6.1, and Thunderbird &lt; 60.6.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9813/">CVE-2019-9813</cve>
	<bugzilla href="https://bugzilla.suse.com/1129821">SUSE bug 1129821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130262">SUSE bug 1130262</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9815</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9815" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9815" ref_url="https://www.suse.com/security/cve/CVE-2019-9815" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main thread and any worker threads. *Note: users need to update to macOS 10.14.5 in order to take advantage of this change.*. This vulnerability affects Thunderbird &lt; 60.7, Firefox &lt; 67, and Firefox ESR &lt; 60.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9815/">CVE-2019-9815</cve>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9816</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9816" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9816" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9816" ref_url="https://www.suse.com/security/cve/CVE-2019-9816" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird &lt; 60.7, Firefox &lt; 67, and Firefox ESR &lt; 60.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9816/">CVE-2019-9816</cve>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9817</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9817" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9817" ref_url="https://www.suse.com/security/cve/CVE-2019-9817" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird &lt; 60.7, Firefox &lt; 67, and Firefox ESR &lt; 60.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9817/">CVE-2019-9817</cve>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9818</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9818" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9818" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9818" ref_url="https://www.suse.com/security/cve/CVE-2019-9818" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. *Note: this vulnerability only affects Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird &lt; 60.7, Firefox &lt; 67, and Firefox ESR &lt; 60.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9818/">CVE-2019-9818</cve>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9819</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9819" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9819" ref_url="https://www.suse.com/security/cve/CVE-2019-9819" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60.7, Firefox &lt; 67, and Firefox ESR &lt; 60.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9819/">CVE-2019-9819</cve>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9820</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9820" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9820" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9820" ref_url="https://www.suse.com/security/cve/CVE-2019-9820" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 60.7, Firefox &lt; 67, and Firefox ESR &lt; 60.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9820/">CVE-2019-9820</cve>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9824</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9824" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9824" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9824" ref_url="https://www.suse.com/security/cve/CVE-2019-9824" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005305.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005320.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1239-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005472.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14011-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005473.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005480.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00040.html" source="SUSE-SU"/>
    <description>
    tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9824/">CVE-2019-9824</cve>
	<bugzilla href="https://bugzilla.suse.com/1118900">SUSE bug 1118900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129622">SUSE bug 1129622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129623">SUSE bug 1129623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9836</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9836" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9836" ref_url="https://www.suse.com/security/cve/CVE-2019-9836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005683.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9836/">CVE-2019-9836</cve>
	<bugzilla href="https://bugzilla.suse.com/1139383">SUSE bug 1139383</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694782" comment="kernel-firmware-all-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694783" comment="kernel-firmware-amdgpu-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694784" comment="kernel-firmware-ath10k-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694785" comment="kernel-firmware-ath11k-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694786" comment="kernel-firmware-atheros-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694787" comment="kernel-firmware-bluetooth-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694788" comment="kernel-firmware-bnx2-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628538" comment="kernel-firmware-brcm-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694789" comment="kernel-firmware-chelsio-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694790" comment="kernel-firmware-dpaa2-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694791" comment="kernel-firmware-i915-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694792" comment="kernel-firmware-intel-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694793" comment="kernel-firmware-iwlwifi-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694794" comment="kernel-firmware-liquidio-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694795" comment="kernel-firmware-marvell-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694796" comment="kernel-firmware-media-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694797" comment="kernel-firmware-mediatek-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694798" comment="kernel-firmware-mellanox-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694799" comment="kernel-firmware-mwifiex-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694800" comment="kernel-firmware-network-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694801" comment="kernel-firmware-nfp-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694802" comment="kernel-firmware-nvidia-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694803" comment="kernel-firmware-platform-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694804" comment="kernel-firmware-prestera-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694805" comment="kernel-firmware-qlogic-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694806" comment="kernel-firmware-radeon-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694807" comment="kernel-firmware-realtek-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694808" comment="kernel-firmware-serial-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694809" comment="kernel-firmware-sound-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694810" comment="kernel-firmware-ti-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694811" comment="kernel-firmware-ueagle-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694812" comment="kernel-firmware-usb-network-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628539" comment="ucode-amd-20210208-2.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9848</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9848" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9848" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9848" ref_url="https://www.suse.com/security/cve/CVE-2019-9848" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005848.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005933.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html" source="SUSE-SU"/>
    <description>
    LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. LibreOffice is typically also bundled with LibreLogo, a programmable turtle vector graphics script, which can be manipulated into executing arbitrary python commands. By using the document event feature to trigger LibreLogo to execute python contained within a document a malicious document could be constructed which would execute arbitrary python commands silently without warning. In the fixed versions, LibreLogo cannot be called from a document event handler. This issue affects: Document Foundation LibreOffice versions prior to 6.2.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9848/">CVE-2019-9848</cve>
	<bugzilla href="https://bugzilla.suse.com/1141862">SUSE bug 1141862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146098">SUSE bug 1146098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146105">SUSE bug 1146105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199849" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9849</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9849" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9849" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9849" ref_url="https://www.suse.com/security/cve/CVE-2019-9849" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005848.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005933.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html" source="SUSE-SU"/>
    <description>
    LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where bullet graphics were omitted from this protection prior to version 6.2.5. This issue affects: Document Foundation LibreOffice versions prior to 6.2.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9849/">CVE-2019-9849</cve>
	<bugzilla href="https://bugzilla.suse.com/1141861">SUSE bug 1141861</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199850" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9850</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9850" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9850" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9850" ref_url="https://www.suse.com/security/cve/CVE-2019-9850" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005848.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005933.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html" source="SUSE-SU"/>
    <description>
    LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from script event handers. However an insufficient url validation vulnerability in LibreOffice allowed malicious to bypass that protection and again trigger calling LibreLogo from script event handlers. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9850/">CVE-2019-9850</cve>
	<bugzilla href="https://bugzilla.suse.com/1146098">SUSE bug 1146098</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199851" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9851</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9851" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9851" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9851" ref_url="https://www.suse.com/security/cve/CVE-2019-9851" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005848.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005933.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html" source="SUSE-SU"/>
    <description>
    LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from document event script handers, e.g. mouse over. However LibreOffice also has a separate feature where documents can specify that pre-installed scripts can be executed on various global script events such as document-open, etc. In the fixed versions, global script event handlers are validated equivalently to document script event handlers. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9851/">CVE-2019-9851</cve>
	<bugzilla href="https://bugzilla.suse.com/1146105">SUSE bug 1146105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9852</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9852" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9852" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9852" ref_url="https://www.suse.com/security/cve/CVE-2019-9852" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005848.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005933.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html" source="SUSE-SU"/>
    <description>
    LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice install. Protection was added, to address CVE-2018-16858, to avoid a directory traversal attack where scripts in arbitrary locations on the file system could be executed. However this new protection could be bypassed by a URL encoding attack. In the fixed versions, the parsed url describing the script location is correctly encoded before further processing. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9852/">CVE-2019-9852</cve>
	<bugzilla href="https://bugzilla.suse.com/1146107">SUSE bug 1146107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149944">SUSE bug 1149944</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199853" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9853</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9853" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9853" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9853" ref_url="https://www.suse.com/security/cve/CVE-2019-9853" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006380.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006474.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2709-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00040.html" source="SUSE-SU"/>
    <description>
    LibreOffice documents can contain macros. The execution of those macros is controlled by the document security settings, typically execution of macros are blocked by default. A URL decoding flaw existed in how the urls to the macros within the document were processed and categorized, resulting in the possibility to construct a document where macro execution bypassed the security settings. The documents were correctly detected as containing macros, and prompted the user to their existence within the documents, but macros within the document were subsequently not controlled by the security settings allowing arbitrary macro execution This issue affects: LibreOffice 6.2 series versions prior to 6.2.7; LibreOffice 6.3 series versions prior to 6.3.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9853/">CVE-2019-9853</cve>
	<bugzilla href="https://bugzilla.suse.com/1152684">SUSE bug 1152684</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199854" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9854</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9854" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9854" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9854" ref_url="https://www.suse.com/security/cve/CVE-2019-9854" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005933.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00055.html" source="SUSE-SU"/>
    <description>
    LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice install. Protection was added, to address CVE-2019-9852, to avoid a directory traversal attack where scripts in arbitrary locations on the file system could be executed by employing a URL encoding attack to defeat the path verification step. However this protection could be bypassed by taking advantage of a flaw in how LibreOffice assembled the final script URL location directly from components of the passed in path as opposed to solely from the sanitized output of the path verification step. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9854/">CVE-2019-9854</cve>
	<bugzilla href="https://bugzilla.suse.com/1149944">SUSE bug 1149944</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9855</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9855" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9855" ref_url="https://www.suse.com/security/cve/CVE-2019-9855" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005933.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00055.html" source="SUSE-SU"/>
    <description>
    LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9855/">CVE-2019-9855</cve>
	<bugzilla href="https://bugzilla.suse.com/1149943">SUSE bug 1149943</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694878" comment="libreoffice-gtk2-6.2.7.1-8.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176159" comment="libreoffice-gtk2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199893" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9893</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9893" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9893" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9893" ref_url="https://www.suse.com/security/cve/CVE-2019-9893" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006426.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:762-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006440.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2517-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005978.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2941-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2283-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html" source="SUSE-SU"/>
    <description>
    libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9893/">CVE-2019-9893</cve>
	<bugzilla href="https://bugzilla.suse.com/1128828">SUSE bug 1128828</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482393" comment="libseccomp2-2.4.1-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267596" comment="libseccomp2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199903" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9903</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9903" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9903" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9903" ref_url="https://www.suse.com/security/cve/CVE-2019-9903" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find() located at Dict.cc, which can (for example) be triggered by passing a crafted pdf file to the pdfunite binary.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9903/">CVE-2019-9903</cve>
	<bugzilla href="https://bugzilla.suse.com/1130229">SUSE bug 1130229</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199923" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9923</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9923" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9923" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9923" ref_url="https://www.suse.com/security/cve/CVE-2019-9923" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:632-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:633-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0926-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005322.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006107.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007506.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010950.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1237-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00077.html" source="SUSE-SU"/>
    <description>
    pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-07"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9923/">CVE-2019-9923</cve>
	<bugzilla href="https://bugzilla.suse.com/1130496">SUSE bug 1130496</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494279" comment="tar-1.30-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151391" comment="tar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679584" comment="tar-backup-scripts-1.34-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153774" comment="tar-backup-scripts is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679585" comment="tar-doc-1.34-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251575" comment="tar-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494280" comment="tar-lang-1.30-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151392" comment="tar-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494281" comment="tar-rmt-1.30-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177166" comment="tar-rmt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679586" comment="tar-tests-1.34-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153775" comment="tar-tests is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9928</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9928" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9928" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9928" ref_url="https://www.suse.com/security/cve/CVE-2019-9928" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005542.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005559.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005560.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1300-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1639-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-06/msg00171.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0678-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-05/msg00129.html" source="SUSE-SU"/>
    <description>
    GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9928/">CVE-2019-9928</cve>
	<bugzilla href="https://bugzilla.suse.com/1133375">SUSE bug 1133375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482020" comment="gstreamer-plugins-base-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153927" comment="gstreamer-plugins-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482021" comment="gstreamer-plugins-base-lang-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153931" comment="gstreamer-plugins-base-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482022" comment="libgstallocators-1_0-0-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153932" comment="libgstallocators-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482023" comment="libgstapp-1_0-0-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153936" comment="libgstapp-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482024" comment="libgstaudio-1_0-0-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153938" comment="libgstaudio-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482025" comment="libgstfft-1_0-0-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153940" comment="libgstfft-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482026" comment="libgstgl-1_0-0-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153892" comment="libgstgl-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482027" comment="libgstpbutils-1_0-0-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153944" comment="libgstpbutils-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482028" comment="libgstriff-1_0-0-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153946" comment="libgstriff-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482029" comment="libgstrtp-1_0-0-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153948" comment="libgstrtp-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482030" comment="libgstrtsp-1_0-0-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153950" comment="libgstrtsp-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482031" comment="libgstsdp-1_0-0-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153952" comment="libgstsdp-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482032" comment="libgsttag-1_0-0-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153954" comment="libgsttag-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482033" comment="libgstvideo-1_0-0-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153956" comment="libgstvideo-1_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487286" comment="typelib-1_0-GstAudio-1_0-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153961" comment="typelib-1_0-GstAudio-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487288" comment="typelib-1_0-GstPbutils-1_0-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153964" comment="typelib-1_0-GstPbutils-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487292" comment="typelib-1_0-GstTag-1_0-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153969" comment="typelib-1_0-GstTag-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487293" comment="typelib-1_0-GstVideo-1_0-1.16.2-2.12 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153970" comment="typelib-1_0-GstVideo-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199936" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9936</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9936" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9936" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9936" ref_url="https://www.suse.com/security/cve/CVE-2019-9936" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1127-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005419.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1372-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00026.html" source="SUSE-SU"/>
    <description>
    In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5_hash.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9936/">CVE-2019-9936</cve>
	<bugzilla href="https://bugzilla.suse.com/1130326">SUSE bug 1130326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154162">SUSE bug 1154162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482404" comment="libsqlite3-0-3.28.0-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482406" comment="sqlite3-3.28.0-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199937" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9937</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9937" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9937" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9937" ref_url="https://www.suse.com/security/cve/CVE-2019-9937" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1127-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005419.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1372-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00026.html" source="SUSE-SU"/>
    <description>
    In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9937/">CVE-2019-9937</cve>
	<bugzilla href="https://bugzilla.suse.com/1130325">SUSE bug 1130325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154162">SUSE bug 1154162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482404" comment="libsqlite3-0-3.28.0-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482406" comment="sqlite3-3.28.0-3.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9947</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9947" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9947" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9947" ref_url="https://www.suse.com/security/cve/CVE-2019-9947" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1352-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0302-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006445.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007449.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the path component of a URL that lacks a ? character) followed by an HTTP header or a Redis command. This is similar to the CVE-2019-9740 query string issue. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9947/">CVE-2019-9947</cve>
	<bugzilla href="https://bugzilla.suse.com/1130840">SUSE bug 1130840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136184">SUSE bug 1136184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155094">SUSE bug 1155094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201559">SUSE bug 1201559</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199948" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9948</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9948" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9948" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9948" ref_url="https://www.suse.com/security/cve/CVE-2019-9948" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005347.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005534.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.html" source="SUSE-SU"/>
    <description>
    urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9948/">CVE-2019-9948</cve>
	<bugzilla href="https://bugzilla.suse.com/1130847">SUSE bug 1130847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135433">SUSE bug 1135433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9956</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9956" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9956" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9956" ref_url="https://www.suse.com/security/cve/CVE-2019-9956" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1019-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1033-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005441.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00010.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which allows an attacker to cause a denial of service or code execution via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9956/">CVE-2019-9956</cve>
	<bugzilla href="https://bugzilla.suse.com/1130330">SUSE bug 1130330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20199959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2019-9959</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2019-9959" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9959" source="CVE"/>
    <reference ref_id="SUSE CVE-2019-9959" ref_url="https://www.suse.com/security/cve/CVE-2019-9959" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9959/">CVE-2019-9959</cve>
	<bugzilla href="https://bugzilla.suse.com/1142465">SUSE bug 1142465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200034" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0034</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0034" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0034" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0034" ref_url="https://www.suse.com/security/cve/CVE-2020-0034" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1297-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1297-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009936.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0680-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-05/msg00126.html" source="SUSE-SU"/>
    <description>
    In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-0034/">CVE-2020-0034</cve>
	<bugzilla href="https://bugzilla.suse.com/1166066">SUSE bug 1166066</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482448" comment="libvpx4-1.6.1-6.6.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177224" comment="libvpx4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0093</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0093" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0093" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0093" ref_url="https://www.suse.com/security/cve/CVE-2020-0093" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007105.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html" source="SUSE-SU"/>
    <description>
    In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-148705132
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0093/">CVE-2020-0093</cve>
	<bugzilla href="https://bugzilla.suse.com/1171847">SUSE bug 1171847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172116">SUSE bug 1172116</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629201" comment="libexif12-0.6.22-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0110</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0110" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0110" ref_url="https://www.suse.com/security/cve/CVE-2020-0110" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    In psi_write of psi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-148159562References: Upstream kernel
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0110/">CVE-2020-0110</cve>
	<bugzilla href="https://bugzilla.suse.com/1171374">SUSE bug 1171374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174874">SUSE bug 1174874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0181</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0181" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0181" ref_url="https://www.suse.com/security/cve/CVE-2020-0181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010691.html" source="SUSE-SU"/>
    <description>
    In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145075076
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-0181/">CVE-2020-0181</cve>
	<bugzilla href="https://bugzilla.suse.com/1172802">SUSE bug 1172802</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677226" comment="libexif-devel-0.6.22-150000.5.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151729" comment="libexif-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678951" comment="libexif-devel-32bit-0.6.22-150000.5.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009279253" comment="libexif-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677227" comment="libexif12-0.6.22-150000.5.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678642" comment="libexif12-32bit-0.6.22-150000.5.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151731" comment="libexif12-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0198</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0198" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0198" ref_url="https://www.suse.com/security/cve/CVE-2020-0198" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010691.html" source="SUSE-SU"/>
    <description>
    In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146428941
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-0198/">CVE-2020-0198</cve>
	<bugzilla href="https://bugzilla.suse.com/1172768">SUSE bug 1172768</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677226" comment="libexif-devel-0.6.22-150000.5.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151729" comment="libexif-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678951" comment="libexif-devel-32bit-0.6.22-150000.5.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009279253" comment="libexif-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677227" comment="libexif12-0.6.22-150000.5.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678642" comment="libexif12-32bit-0.6.22-150000.5.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151731" comment="libexif12-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200305" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0305</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0305" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0305" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0305" ref_url="https://www.suse.com/security/cve/CVE-2020-0305" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2152-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007405.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153467744
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0305/">CVE-2020-0305</cve>
	<bugzilla href="https://bugzilla.suse.com/1174462">SUSE bug 1174462</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200404" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0404</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0404" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0404" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0404" ref_url="https://www.suse.com/security/cve/CVE-2020-0404" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007544.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007545.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2908-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1586-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-0404/">CVE-2020-0404</cve>
	<bugzilla href="https://bugzilla.suse.com/1176423">SUSE bug 1176423</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0427</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0427" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0427" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0427" ref_url="https://www.suse.com/security/cve/CVE-2020-0427" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007544.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007545.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2908-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1586-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-140550171
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0427/">CVE-2020-0427</cve>
	<bugzilla href="https://bugzilla.suse.com/1176725">SUSE bug 1176725</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0429</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0429" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0429" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0429" ref_url="https://www.suse.com/security/cve/CVE-2020-0429" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007728.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3225-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-November/016787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007924.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007925.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008495.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008612.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2026-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009279.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2644-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009281.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3929-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/020993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009872.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3876-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JOIHHN3KQX7O34NG25NJOF7PFEZF2TVP/" source="SUSE-SU"/>
    <description>
    In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-152735806
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0429/">CVE-2020-0429</cve>
	<bugzilla href="https://bugzilla.suse.com/1176724">SUSE bug 1176724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176931">SUSE bug 1176931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188026">SUSE bug 1188026</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658245" comment="kernel-debug-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658155" comment="kernel-default-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658246" comment="kernel-kvmsmall-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658247" comment="kernel-vanilla-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658248" comment="kernel-vanilla-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658249" comment="kernel-vanilla-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658250" comment="kernel-vanilla-livepatch-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658251" comment="kernel-zfcpdump-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200431" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0431</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0431" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0431" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0431" ref_url="https://www.suse.com/security/cve/CVE-2020-0431" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007544.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007545.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2908-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007706.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007712.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007728.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3225-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-November/016787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1586-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-144161459
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0431/">CVE-2020-0431</cve>
	<bugzilla href="https://bugzilla.suse.com/1176722">SUSE bug 1176722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176896">SUSE bug 1176896</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200432" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0432</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0432" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0432" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0432" ref_url="https://www.suse.com/security/cve/CVE-2020-0432" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007544.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007545.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2908-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1586-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143560807
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0432/">CVE-2020-0432</cve>
	<bugzilla href="https://bugzilla.suse.com/1176721">SUSE bug 1176721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177165">SUSE bug 1177165</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0444</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0444" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0444" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0444" ref_url="https://www.suse.com/security/cve/CVE-2020-0444" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008187.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7EJISS2OPKUSJFJ2BG5ZWHA2Z6H3VQB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150693166References: Upstream kernel
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0444/">CVE-2020-0444</cve>
	<bugzilla href="https://bugzilla.suse.com/1180027">SUSE bug 1180027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180028">SUSE bug 1180028</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200452" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0452</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0452" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0452" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0452" ref_url="https://www.suse.com/security/cve/CVE-2020-0452" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010691.html" source="SUSE-SU"/>
    <description>
    In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-159625731
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0452/">CVE-2020-0452</cve>
	<bugzilla href="https://bugzilla.suse.com/1178479">SUSE bug 1178479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677226" comment="libexif-devel-0.6.22-150000.5.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151729" comment="libexif-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678951" comment="libexif-devel-32bit-0.6.22-150000.5.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009279253" comment="libexif-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677227" comment="libexif12-0.6.22-150000.5.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678642" comment="libexif12-32bit-0.6.22-150000.5.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151731" comment="libexif12-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200465" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0465</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0465" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0465" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008187.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008296.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7EJISS2OPKUSJFJ2BG5ZWHA2Z6H3VQB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-162844689References: Upstream kernel
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<bugzilla href="https://bugzilla.suse.com/1180029">SUSE bug 1180029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180030">SUSE bug 1180030</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0466</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0466" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0466" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008187.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008296.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7EJISS2OPKUSJFJ2BG5ZWHA2Z6H3VQB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147802478References: Upstream kernel
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<bugzilla href="https://bugzilla.suse.com/1180031">SUSE bug 1180031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180032">SUSE bug 1180032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199255">SUSE bug 1199255</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200084">SUSE bug 1200084</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200487" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0487</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0487" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0487" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0487" ref_url="https://www.suse.com/security/cve/CVE-2020-0487" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2348-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TWY2EXAD52MSG6ZRFPI2CF3APYF7OZ7F/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2350-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3IU5K7DTVB7RH7VVIUTMX4XFQDWSHYUS/" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-0487/">CVE-2020-0487</cve>
	<bugzilla href="https://bugzilla.suse.com/1180112">SUSE bug 1180112</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628446" comment="libFLAC8-1.3.2-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152524" comment="libFLAC8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630148" comment="libFLAC8-32bit-1.3.2-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152525" comment="libFLAC8-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200499" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0499</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0499" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0499" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0499" ref_url="https://www.suse.com/security/cve/CVE-2020-0499" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0017-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008132.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2348-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TWY2EXAD52MSG6ZRFPI2CF3APYF7OZ7F/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2350-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3IU5K7DTVB7RH7VVIUTMX4XFQDWSHYUS/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10252-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YI4EVQJJHK52U3OVX236TQ775IVEFDQS/" source="SUSE-SU"/>
    <description>
    In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156076070
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0499/">CVE-2020-0499</cve>
	<bugzilla href="https://bugzilla.suse.com/1180099">SUSE bug 1180099</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628446" comment="libFLAC8-1.3.2-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152524" comment="libFLAC8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630148" comment="libFLAC8-32bit-1.3.2-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152525" comment="libFLAC8-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730671" comment="libvlc5-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730672" comment="libvlccore9-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730673" comment="vlc-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730674" comment="vlc-codec-gstreamer-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730675" comment="vlc-devel-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153024" comment="vlc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730676" comment="vlc-jack-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261717" comment="vlc-jack is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730677" comment="vlc-lang-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730678" comment="vlc-noX-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730679" comment="vlc-opencv-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281885" comment="vlc-opencv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730680" comment="vlc-qt-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730681" comment="vlc-vdpau-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0543</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0543" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0543" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0543" ref_url="https://www.suse.com/security/cve/CVE-2020-0543" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14393-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006913.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1589-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006917.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006918.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006922.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006925.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006935.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1632-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1633-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006958.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1634-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1902-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007126.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007511.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008731.html" source="SUSE-SU"/>
		<reference ref_id="TID000019439" ref_url="https://www.suse.com/support/kb/doc/?id=000019439" source="SUSE-SU"/>
		<reference ref_id="TID000019643" ref_url="https://www.suse.com/support/kb/doc/?id=000019643" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0791-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0818-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0965-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0543/">CVE-2020-0543</cve>
	<bugzilla href="https://bugzilla.suse.com/1154824">SUSE bug 1154824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172205">SUSE bug 1172205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172206">SUSE bug 1172206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172207">SUSE bug 1172207</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172770">SUSE bug 1172770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201877">SUSE bug 1201877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729187" comment="sca-patterns-base-1.5.0-150300.10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729422" comment="sca-patterns-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729188" comment="sca-patterns-hae-1.5.1-150300.10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729423" comment="sca-patterns-hae is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729189" comment="sca-patterns-sle11-1.5.1-150300.18.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623504" comment="sca-patterns-sle11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729190" comment="sca-patterns-sle12-1.5.1-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729424" comment="sca-patterns-sle12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729191" comment="sca-patterns-sle15-1.5.1-150300.14.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729425" comment="sca-patterns-sle15 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729192" comment="sca-patterns-suma-1.5.0-150300.9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729426" comment="sca-patterns-suma is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729193" comment="sca-server-report-1.5.1-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729427" comment="sca-server-report is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629040" comment="ucode-intel-20210216-2.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0548</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0548" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0548" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0548" ref_url="https://www.suse.com/security/cve/CVE-2020-0548" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1589-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006917.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006918.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006922.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006925.html" source="SUSE-SU"/>
		<reference ref_id="TID000019635" ref_url="https://www.suse.com/support/kb/doc/?id=000019635" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0791-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0548/">CVE-2020-0548</cve>
	<bugzilla href="https://bugzilla.suse.com/1156353">SUSE bug 1156353</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729187" comment="sca-patterns-base-1.5.0-150300.10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729422" comment="sca-patterns-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729188" comment="sca-patterns-hae-1.5.1-150300.10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729423" comment="sca-patterns-hae is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729189" comment="sca-patterns-sle11-1.5.1-150300.18.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623504" comment="sca-patterns-sle11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729190" comment="sca-patterns-sle12-1.5.1-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729424" comment="sca-patterns-sle12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729191" comment="sca-patterns-sle15-1.5.1-150300.14.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729425" comment="sca-patterns-sle15 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729192" comment="sca-patterns-suma-1.5.0-150300.9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729426" comment="sca-patterns-suma is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729193" comment="sca-server-report-1.5.1-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729427" comment="sca-server-report is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629040" comment="ucode-intel-20210216-2.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0549</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0549" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0549" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0549" ref_url="https://www.suse.com/security/cve/CVE-2020-0549" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1589-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006917.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006918.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006922.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006925.html" source="SUSE-SU"/>
		<reference ref_id="TID000019635" ref_url="https://www.suse.com/support/kb/doc/?id=000019635" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0791-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0549/">CVE-2020-0549</cve>
	<bugzilla href="https://bugzilla.suse.com/1156353">SUSE bug 1156353</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729187" comment="sca-patterns-base-1.5.0-150300.10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729422" comment="sca-patterns-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729188" comment="sca-patterns-hae-1.5.1-150300.10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729423" comment="sca-patterns-hae is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729189" comment="sca-patterns-sle11-1.5.1-150300.18.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623504" comment="sca-patterns-sle11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729190" comment="sca-patterns-sle12-1.5.1-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729424" comment="sca-patterns-sle12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729191" comment="sca-patterns-sle15-1.5.1-150300.14.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729425" comment="sca-patterns-sle15 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729192" comment="sca-patterns-suma-1.5.0-150300.9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729426" comment="sca-patterns-suma is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729193" comment="sca-server-report-1.5.1-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729427" comment="sca-server-report is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629040" comment="ucode-intel-20210216-2.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200561" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0561</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0561" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0561" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0561" ref_url="https://www.suse.com/security/cve/CVE-2020-0561" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00014.html" source="SUSE-SU"/>
    <description>
    Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0561/">CVE-2020-0561</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0569</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0569" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0569" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0569" ref_url="https://www.suse.com/security/cve/CVE-2020-0569" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006459.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00012.html" source="SUSE-SU"/>
    <description>
    Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0569/">CVE-2020-0569</cve>
	<bugzilla href="https://bugzilla.suse.com/1161167">SUSE bug 1161167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162191">SUSE bug 1162191</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628554" comment="libQt5Concurrent5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152276" comment="libQt5Concurrent5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628557" comment="libQt5Core5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152281" comment="libQt5Core5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628560" comment="libQt5DBus5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152286" comment="libQt5DBus5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628563" comment="libQt5Gui5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152297" comment="libQt5Gui5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628568" comment="libQt5Network5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152308" comment="libQt5Network5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628571" comment="libQt5OpenGL5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152316" comment="libQt5OpenGL5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628577" comment="libQt5PrintSupport5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152329" comment="libQt5PrintSupport5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628580" comment="libQt5Sql5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152341" comment="libQt5Sql5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629186" comment="libQt5Sql5-mysql-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152343" comment="libQt5Sql5-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628581" comment="libQt5Sql5-sqlite-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152347" comment="libQt5Sql5-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628584" comment="libQt5Test5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152356" comment="libQt5Test5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628587" comment="libQt5Widgets5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152380" comment="libQt5Widgets5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628589" comment="libQt5Xml5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152386" comment="libQt5Xml5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629189" comment="libqt5-qtbase-platformtheme-gtk3-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177209" comment="libqt5-qtbase-platformtheme-gtk3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20200570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-0570</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-0570" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0570" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-0570" ref_url="https://www.suse.com/security/cve/CVE-2020-0570" source="SUSE CVE"/>
    <description>
    Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0570/">CVE-2020-0570</cve>
	<bugzilla href="https://bugzilla.suse.com/1161167">SUSE bug 1161167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162191">SUSE bug 1162191</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628554" comment="libQt5Concurrent5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152276" comment="libQt5Concurrent5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628557" comment="libQt5Core5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152281" comment="libQt5Core5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628560" comment="libQt5DBus5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152286" comment="libQt5DBus5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628563" comment="libQt5Gui5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152297" comment="libQt5Gui5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628568" comment="libQt5Network5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152308" comment="libQt5Network5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628571" comment="libQt5OpenGL5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152316" comment="libQt5OpenGL5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628577" comment="libQt5PrintSupport5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152329" comment="libQt5PrintSupport5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628580" comment="libQt5Sql5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152341" comment="libQt5Sql5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629186" comment="libQt5Sql5-mysql-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152343" comment="libQt5Sql5-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628581" comment="libQt5Sql5-sqlite-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152347" comment="libQt5Sql5-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628584" comment="libQt5Test5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152356" comment="libQt5Test5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628587" comment="libQt5Widgets5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152380" comment="libQt5Widgets5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628589" comment="libQt5Xml5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152386" comment="libQt5Xml5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629189" comment="libqt5-qtbase-platformtheme-gtk3-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177209" comment="libqt5-qtbase-platformtheme-gtk3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10001</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10001" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10001" ref_url="https://www.suse.com/security/cve/CVE-2020-10001" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:414-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008468.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0285-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0286-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008268.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0253-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EYJFJX2GGKH4VAMYMTSR5TZZO2F2HPHC/" source="SUSE-SU"/>
    <description>
    An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to read restricted memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10001/">CVE-2020-10001</cve>
	<bugzilla href="https://bugzilla.suse.com/1170671">SUSE bug 1170671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180520">SUSE bug 1180520</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010018" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10018</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10018" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10018" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10018" ref_url="https://www.suse.com/security/cve/CVE-2020-10018" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00008.html" source="SUSE-SU"/>
    <description>
    WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-after-free) that may lead to arbitrary code execution. This issue has been fixed in 2.28.0 with improved memory handling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10018/">CVE-2020-10018</cve>
	<bugzilla href="https://bugzilla.suse.com/1165528">SUSE bug 1165528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10029</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10029" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10029" ref_url="https://www.suse.com/security/cve/CVE-2020-10029" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006614.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0668-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006655.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007618.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0381-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00033.html" source="SUSE-SU"/>
    <description>
    The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10029/">CVE-2020-10029</cve>
	<bugzilla href="https://bugzilla.suse.com/1165784">SUSE bug 1165784</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10109</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10109" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10109" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10109" ref_url="https://www.suse.com/security/cve/CVE-2020-10109" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:2811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011915.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011921.html" source="SUSE-SU"/>
    <description>
    In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted as a pipelined request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-17"/>
	<updated date="2022-08-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-10109/">CVE-2020-10109</cve>
	<bugzilla href="https://bugzilla.suse.com/1166458">SUSE bug 1166458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704489" comment="python-Twisted-doc-19.10.0-150200.3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153552" comment="python-Twisted-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704490" comment="python2-Twisted-19.10.0-150200.3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260377" comment="python2-Twisted is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704356" comment="python3-Twisted-19.10.0-150200.3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260379" comment="python3-Twisted is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10135</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10135" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10135" ref_url="https://www.suse.com/security/cve/CVE-2020-10135" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2152-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007374.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007405.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2610-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007408.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007419.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-10135/">CVE-2020-10135</cve>
	<bugzilla href="https://bugzilla.suse.com/1171988">SUSE bug 1171988</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10531</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10531" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10531" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10531" ref_url="https://www.suse.com/security/cve/CVE-2020-10531" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0819-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006779.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1568-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006909.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00004.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10531/">CVE-2020-10531</cve>
	<bugzilla href="https://bugzilla.suse.com/1166844">SUSE bug 1166844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175778">SUSE bug 1175778</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488530" comment="libicu60_2-60.2-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281166" comment="libicu60_2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009488532" comment="libicu60_2-ledata-60.2-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281169" comment="libicu60_2-ledata is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10543</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10543" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10543" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10543" ref_url="https://www.suse.com/security/cve/CVE-2020-10543" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:314-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1682-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0850-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html" source="SUSE-SU"/>
    <description>
    Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-10543/">CVE-2020-10543</cve>
	<bugzilla href="https://bugzilla.suse.com/1171863">SUSE bug 1171863</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628966" comment="perl-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628967" comment="perl-base-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628968" comment="perl-base-32bit-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153231" comment="perl-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628969" comment="perl-core-DB_File-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695544" comment="perl-core-DB_File is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10648</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10648" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10648" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10648" ref_url="https://www.suse.com/security/cve/CVE-2020-10648" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3256-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007758.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007760.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3474-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007831.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1930-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HY7PFRXKSIEBEZBSKFM57JGCIQJEJZL6/" source="SUSE-SU"/>
    <description>
    Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-10648/">CVE-2020-10648</cve>
	<bugzilla href="https://bugzilla.suse.com/1167209">SUSE bug 1167209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629037" comment="u-boot-rpiarm64-2021.01-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623523" comment="u-boot-rpiarm64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629038" comment="u-boot-rpiarm64-doc-2021.01-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623524" comment="u-boot-rpiarm64-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10663</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10663" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10663" ref_url="https://www.suse.com/security/cve/CVE-2020-10663" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0995-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006711.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007124.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0586-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00004.html" source="SUSE-SU"/>
    <description>
    The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, but does not rely on poor garbage-collection behavior within Ruby. Specifically, use of JSON parsing methods can lead to creation of a malicious object within the interpreter, with adverse effects that are application-dependent.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10663/">CVE-2020-10663</cve>
	<bugzilla href="https://bugzilla.suse.com/1167244">SUSE bug 1167244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171517">SUSE bug 1171517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010684" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10684</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10684" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10684" ref_url="https://www.suse.com/security/cve/CVE-2020-10684" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, 2.8.9 and 2.9.6 respectively, when using ansible_facts as a subkey of itself and promoting it to a variable when inject is enabled, overwriting the ansible_facts after the clean. An attacker could take advantage of this by altering the ansible_facts, such as ansible_hosts, users and any other key data which would lead into privilege escalation or code injection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10684/">CVE-2020-10684</cve>
	<bugzilla href="https://bugzilla.suse.com/1167532">SUSE bug 1167532</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10685</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10685" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10685" ref_url="https://www.suse.com/security/cve/CVE-2020-10685" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault files such as assemble, script, unarchive, win_copy, aws_s3 or copy modules. The temporary directory is created in /tmp leaves the s ts unencrypted. On Operating Systems which /tmp is not a tmpfs but part of the root partition, the directory is only cleared on boot and the decryp emains when the host is switched off. The system will be vulnerable when the system is not running. So decrypted data must be cleared as soon as possible and the data which normally is encrypted ble.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10685/">CVE-2020-10685</cve>
	<bugzilla href="https://bugzilla.suse.com/1167440">SUSE bug 1167440</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10690</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10690" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10690" ref_url="https://www.suse.com/security/cve/CVE-2020-10690" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14393-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006913.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
    <description>
    There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed, it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10690/">CVE-2020-10690</cve>
	<bugzilla href="https://bugzilla.suse.com/1170056">SUSE bug 1170056</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10691</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10691" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10691" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10691" ref_url="https://www.suse.com/security/cve/CVE-2020-10691" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file within the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-10691/">CVE-2020-10691</cve>
	<bugzilla href="https://bugzilla.suse.com/1167873">SUSE bug 1167873</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10696</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10696" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10696" ref_url="https://www.suse.com/security/cve/CVE-2020-10696" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:2741-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-October/025850.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012798.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012818.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1130-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3423-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010404.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012578.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013200.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013201.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2106-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q7YYGMTZ4T4RLHDVCMQD3K6CDIAXO3O3/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0310-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/P4DQSPUPKAZCPS5MQYTAYGS7YM76UIHZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0770-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WFIDXN6UAK2I4PPVFPBE4STNQH2FZQ4A/" source="SUSE-SU"/>
    <description>
    A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write files to the user's system anywhere that the user has permissions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10696/">CVE-2020-10696</cve>
	<bugzilla href="https://bugzilla.suse.com/1167864">SUSE bug 1167864</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009727588" comment="buildah-1.28.2-150300.8.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266828" comment="buildah is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717534" comment="libgpg-error-devel-1.42-150300.9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009721855" comment="libgpg-error-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717624" comment="libgpg-error-devel-32bit-1.42-150300.9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009721856" comment="libgpg-error-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717535" comment="libgpg-error0-1.42-150300.9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009721857" comment="libgpg-error0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717536" comment="libgpg-error0-32bit-1.42-150300.9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009721858" comment="libgpg-error0-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010700" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10700</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10700" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10700" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10700" ref_url="https://www.suse.com/security/cve/CVE-2020-10700" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007440.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html" source="SUSE-SU"/>
    <description>
    A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with the 'ASQ' control. A malicious user in a samba AD could use this flaw to cause denial of service. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10700/">CVE-2020-10700</cve>
	<bugzilla href="https://bugzilla.suse.com/1169850">SUSE bug 1169850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173159">SUSE bug 1173159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628548" comment="libldb2-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291435" comment="libldb2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628549" comment="libldb2-32bit-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291436" comment="libldb2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628550" comment="python3-ldb-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247520" comment="python3-ldb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10701</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10701" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10701" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10701" ref_url="https://www.suse.com/security/cve/CVE-2020-10701" source="SUSE CVE"/>
    <description>
    A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent response timeout. This flaw allows read-only connections to adjust the time that libvirt waits for the QEMU guest agent to respond to agent commands. Depending on the timeout value that is set, this flaw can make guest agent commands fail because the agent cannot respond in time. Unprivileged users with a read-only connection could abuse this flaw to set the response timeout for all guest agent messages to zero, potentially leading to a denial of service. This flaw affects libvirt versions before 6.2.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10701/">CVE-2020-10701</cve>
	<bugzilla href="https://bugzilla.suse.com/1168680">SUSE bug 1168680</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10702</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10702" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10702" ref_url="https://www.suse.com/security/cve/CVE-2020-10702" source="SUSE CVE"/>
    <description>
    A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in version 5.0.0. A general failure of the signature generation process caused every PAuth-enforced pointer to be signed with the same signature. A local attacker could obtain the signature of a protected pointer and abuse this flaw to bypass PAuth protection for all programs running on QEMU.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10702/">CVE-2020-10702</cve>
	<bugzilla href="https://bugzilla.suse.com/1168681">SUSE bug 1168681</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10704</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10704" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10704" ref_url="https://www.suse.com/security/cve/CVE-2020-10704" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1132-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006750.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007440.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0601-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html" source="SUSE-SU"/>
    <description>
    A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10704/">CVE-2020-10704</cve>
	<bugzilla href="https://bugzilla.suse.com/1169851">SUSE bug 1169851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170771">SUSE bug 1170771</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10711</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10711" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10711" ref_url="https://www.suse.com/security/cve/CVE-2020-10711" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2152-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine. While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, it sets the security attribute to indicate that the category bitmap is present, even if it has not been allocated. This issue leads to a NULL pointer dereference issue while importing the same category bitmap into SELinux. This flaw allows a remote network user to crash the system kernel, resulting in a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10711/">CVE-2020-10711</cve>
	<bugzilla href="https://bugzilla.suse.com/1171191">SUSE bug 1171191</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10713</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10713" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10713" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10713" ref_url="https://www.suse.com/security/cve/CVE-2020-10713" source="SUSE CVE"/>
		<reference ref_id="BOOTHOLE-BLOG" ref_url="https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:29-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007199.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007200.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007198.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2626-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007423.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2627-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007421.html" source="SUSE-SU"/>
		<reference ref_id="TID000019673" ref_url="https://www.suse.com/support/kb/doc/?id=000019673" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1169-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html" source="SUSE-SU"/>
    <description>
    A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB verification process. This flaw also allows the bypass of Secure Boot protections. In order to load an untrusted or modified kernel, an attacker would first need to establish access to the system such as gaining physical access, obtain the ability to alter a pxe-boot network, or have remote access to a networked system with root access. With this access, an attacker could then craft a string to cause a buffer overflow by injecting a malicious payload that leads to arbitrary code execution within GRUB. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10713/">CVE-2020-10713</cve>
	<bugzilla href="https://bugzilla.suse.com/1168994">SUSE bug 1168994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173456">SUSE bug 1173456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173812">SUSE bug 1173812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199353">SUSE bug 1199353</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628504" comment="grub2-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628505" comment="grub2-arm64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623763" comment="grub2-arm64-efi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628506" comment="grub2-i386-pc-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628507" comment="grub2-powerpc-ieee1275-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623765" comment="grub2-powerpc-ieee1275 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628509" comment="grub2-snapper-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628510" comment="grub2-systemd-sleep-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628511" comment="grub2-x86_64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010717" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10717</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10717" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10717" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10717" ref_url="https://www.suse.com/security/cve/CVE-2020-10717" source="SUSE CVE"/>
    <description>
    A potential DoS flaw was found in the virtio-fs shared file system daemon (virtiofsd) implementation of the QEMU version &gt;= v5.0. Virtio-fs is meant to share a host file system directory with a guest via virtio-fs device. If the guest opens the maximum number of file descriptors under the shared directory, a denial of service may occur. This flaw allows a guest user/process to cause this denial of service on the host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-04"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10717/">CVE-2020-10717</cve>
	<bugzilla href="https://bugzilla.suse.com/1171110">SUSE bug 1171110</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10729</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10729" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10729" ref_url="https://www.suse.com/security/cve/CVE-2020-10729" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulnerability would be that all passwords are exposed at once for the file. This flaw affects Ansible Engine versions before 2.9.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10729/">CVE-2020-10729</cve>
	<bugzilla href="https://bugzilla.suse.com/1171162">SUSE bug 1171162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10730</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10730" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10730" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10730" ref_url="https://www.suse.com/security/cve/CVE-2020-10730" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007193.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007440.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0984-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1121-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10730/">CVE-2020-10730</cve>
	<bugzilla href="https://bugzilla.suse.com/1173159">SUSE bug 1173159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628548" comment="libldb2-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291435" comment="libldb2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628549" comment="libldb2-32bit-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291436" comment="libldb2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628550" comment="python3-ldb-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247520" comment="python3-ldb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10732</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10732" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10732" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10732" ref_url="https://www.suse.com/security/cve/CVE-2020-10732" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2152-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux kernel’s implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10732/">CVE-2020-10732</cve>
	<bugzilla href="https://bugzilla.suse.com/1171220">SUSE bug 1171220</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10735</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10735" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10735" ref_url="https://www.suse.com/security/cve/CVE-2020-10735" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:2464-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012514.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2467-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012516.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3228-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013165.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013169.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3262-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3378-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1144-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1145-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013286.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3485-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CCKKVK6RUGD7FMGWHAMOVXOTAX4JRA2I/" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3924-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013149.html" source="SUSE-SU"/>
    <description>
    A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-02"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10735/">CVE-2020-10735</cve>
	<bugzilla href="https://bugzilla.suse.com/1203125">SUSE bug 1203125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204077">SUSE bug 1204077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204096">SUSE bug 1204096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204097">SUSE bug 1204097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205075">SUSE bug 1205075</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726417" comment="libpython3_6m1_0-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726418" comment="libpython3_6m1_0-32bit-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244052" comment="libpython3_6m1_0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714388" comment="libpython3_9-1_0-3.9.14-150300.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662642" comment="libpython3_9-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714750" comment="libpython3_9-1_0-32bit-3.9.14-150300.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662643" comment="libpython3_9-1_0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726419" comment="python3-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726420" comment="python3-base-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726421" comment="python3-curses-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726422" comment="python3-dbm-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726423" comment="python3-devel-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152173" comment="python3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726424" comment="python3-doc-3.6.15-150300.10.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152174" comment="python3-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726425" comment="python3-doc-devhelp-3.6.15-150300.10.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009340456" comment="python3-doc-devhelp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726426" comment="python3-idle-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152176" comment="python3-idle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726427" comment="python3-testsuite-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152177" comment="python3-testsuite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726428" comment="python3-tk-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151919" comment="python3-tk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726429" comment="python3-tools-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152178" comment="python3-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714389" comment="python39-3.9.14-150300.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632499" comment="python39 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714751" comment="python39-32bit-3.9.14-150300.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632500" comment="python39-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714390" comment="python39-base-3.9.14-150300.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662644" comment="python39-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714752" comment="python39-base-32bit-3.9.14-150300.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662645" comment="python39-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714391" comment="python39-curses-3.9.14-150300.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632501" comment="python39-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714392" comment="python39-dbm-3.9.14-150300.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632502" comment="python39-dbm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714393" comment="python39-devel-3.9.14-150300.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662646" comment="python39-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714753" comment="python39-doc-3.9.14-150300.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662647" comment="python39-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714754" comment="python39-doc-devhelp-3.9.14-150300.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662648" comment="python39-doc-devhelp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714394" comment="python39-idle-3.9.14-150300.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632503" comment="python39-idle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714755" comment="python39-testsuite-3.9.14-150300.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662649" comment="python39-testsuite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714395" comment="python39-tk-3.9.14-150300.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632504" comment="python39-tk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009714396" comment="python39-tools-3.9.14-150300.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009662650" comment="python39-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10736</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10736" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10736" ref_url="https://www.suse.com/security/cve/CVE-2020-10736" source="SUSE CVE"/>
    <description>
    An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10736/">CVE-2020-10736</cve>
	<bugzilla href="https://bugzilla.suse.com/1170021">SUSE bug 1170021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694875" comment="librados2-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694876" comment="librbd1-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10745</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10745" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10745" ref_url="https://www.suse.com/security/cve/CVE-2020-10745" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2036-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007192.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007296.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007440.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0984-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html" source="SUSE-SU"/>
    <description>
    A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10745/">CVE-2020-10745</cve>
	<bugzilla href="https://bugzilla.suse.com/1173160">SUSE bug 1173160</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10751</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10751" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10751" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10751" ref_url="https://www.suse.com/security/cve/CVE-2020-10751" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2152-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux kernel’s SELinux LSM hook implementation, where it anticipated the skb would only contain a single Netlink message. The hook incorrectly validated the first Netlink message in the skb only, to allow or deny the rest of the messages within the skb with the granted permissions and without further processing. At this time, there is no known ability for an attacker to abuse this flaw.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-10751/">CVE-2020-10751</cve>
	<bugzilla href="https://bugzilla.suse.com/1171189">SUSE bug 1171189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174963">SUSE bug 1174963</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10756</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10756" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10756" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10756" ref_url="https://www.suse.com/security/cve/CVE-2020-10756" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008910.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008916.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1894-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1895-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008990.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0987-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1043-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/" source="SUSE-SU"/>
    <description>
    An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory, resulting in possible information disclosure. This flaw affects versions of libslirp before 4.3.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10756/">CVE-2020-10756</cve>
	<bugzilla href="https://bugzilla.suse.com/1172380">SUSE bug 1172380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184743">SUSE bug 1184743</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629864" comment="libslirp0-4.3.1-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680725" comment="libslirp0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010757" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10757</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10757" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10757" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1646-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1754-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1758-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1767-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007368.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<bugzilla href="https://bugzilla.suse.com/1172317">SUSE bug 1172317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172437">SUSE bug 1172437</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010759" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10759</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10759" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10759" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10759" ref_url="https://www.suse.com/security/cve/CVE-2020-10759" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1681-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008596.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0849-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0522-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PR4WC2OGLKRFBB7HJ3YCZ6PTJUJK67B4/" source="SUSE-SU"/>
    <description>
    A PGP signature bypass flaw was found in fwupd, which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service (LVFS) is either not implemented or enabled in versions of fwupd shipped with Red Hat Enterprise Linux 7 and 8. The highest threat from this vulnerability is to confidentiality and integrity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-10759/">CVE-2020-10759</cve>
	<bugzilla href="https://bugzilla.suse.com/1172643">SUSE bug 1172643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629109" comment="fwupd-1.5.8-1.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286265" comment="fwupd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629111" comment="fwupd-lang-1.5.8-1.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286267" comment="fwupd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629114" comment="libfwupd2-1.5.8-1.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286268" comment="libfwupd2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629115" comment="libfwupdplugin1-1.5.8-1.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695699" comment="libfwupdplugin1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629117" comment="libjcat1-0.1.3-1.38 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695700" comment="libjcat1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629118" comment="typelib-1_0-Fwupd-2_0-1.5.8-1.13 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286269" comment="typelib-1_0-Fwupd-2_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10760</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10760" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10760" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10760" ref_url="https://www.suse.com/security/cve/CVE-2020-10760" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007440.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0984-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html" source="SUSE-SU"/>
    <description>
    A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC configuration. A Samba LDAP user could use this flaw to crash samba.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10760/">CVE-2020-10760</cve>
	<bugzilla href="https://bugzilla.suse.com/1173161">SUSE bug 1173161</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10761</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10761" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10761" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10761" ref_url="https://www.suse.com/security/cve/CVE-2020-10761" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007171.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html" source="SUSE-SU"/>
    <description>
    An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the qemu-nbd server resulting in a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10761/">CVE-2020-10761</cve>
	<bugzilla href="https://bugzilla.suse.com/1172710">SUSE bug 1172710</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10766</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10766" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10766" ref_url="https://www.suse.com/security/cve/CVE-2020-10766" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10766/">CVE-2020-10766</cve>
	<bugzilla href="https://bugzilla.suse.com/1172781">SUSE bug 1172781</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10767</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10767" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10767" ref_url="https://www.suse.com/security/cve/CVE-2020-10767" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier). The IBPB mitigation will be disabled when STIBP is not available or when the Enhanced Indirect Branch Restricted Speculation (IBRS) is available. This flaw allows a local attacker to perform a Spectre V2 style attack when this configuration is active. The highest threat from this vulnerability is to confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10767/">CVE-2020-10767</cve>
	<bugzilla href="https://bugzilla.suse.com/1172782">SUSE bug 1172782</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10768</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10768" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10768" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10768" ref_url="https://www.suse.com/security/cve/CVE-2020-10768" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being 'force disabled' when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10768/">CVE-2020-10768</cve>
	<bugzilla href="https://bugzilla.suse.com/1172783">SUSE bug 1172783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10773</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10773" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10773" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10773" ref_url="https://www.suse.com/security/cve/CVE-2020-10773" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2152-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmm_timeout file. This flaw allows a local user to see the kernel data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10773/">CVE-2020-10773</cve>
	<bugzilla href="https://bugzilla.suse.com/1172999">SUSE bug 1172999</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10781</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10781" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10781" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10781" ref_url="https://www.suse.com/security/cve/CVE-2020-10781" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10781/">CVE-2020-10781</cve>
	<bugzilla href="https://bugzilla.suse.com/1173074">SUSE bug 1173074</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010809" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10809</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10809" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10809" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10809" ref_url="https://www.suse.com/security/cve/CVE-2020-10809" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-03"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10809/">CVE-2020-10809</cve>
	<bugzilla href="https://bugzilla.suse.com/1167404">SUSE bug 1167404</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684443" comment="hdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684444" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684445" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684446" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684447" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684448" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684449" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684450" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684451" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684452" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684453" comment="hdf5-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695078" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695079" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695080" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695081" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695082" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695083" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695084" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695085" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695086" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695087" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695088" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695089" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695090" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695091" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695092" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695093" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695094" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695095" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695096" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695097" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695098" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695099" comment="libhdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695100" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695101" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695102" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695103" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695104" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695105" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695106" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695107" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695108" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695109" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695110" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695111" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695112" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695113" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695114" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695115" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695116" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695117" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695118" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695119" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695120" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695121" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695122" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695123" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695124" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695125" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695126" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695127" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695128" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695129" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695130" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695131" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695132" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695133" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695134" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695135" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695136" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695137" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695138" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695139" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695140" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695141" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695142" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695143" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695144" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695145" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695146" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695147" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695148" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695149" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695150" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695151" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695152" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695153" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695154" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695155" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695156" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695157" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695158" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10810</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10810" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10810" ref_url="https://www.suse.com/security/cve/CVE-2020-10810" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5AC_unpin_entry() located in H5AC.c. It allows an attacker to cause Denial of Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-03"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10810/">CVE-2020-10810</cve>
	<bugzilla href="https://bugzilla.suse.com/1167401">SUSE bug 1167401</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684443" comment="hdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684444" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684445" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684446" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684447" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684448" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684449" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684450" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684451" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684452" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684453" comment="hdf5-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695078" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695079" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695080" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695081" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695082" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695083" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695084" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695085" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695086" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695087" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695088" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695089" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695090" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695091" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695092" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695093" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695094" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695095" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695096" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695097" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695098" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695099" comment="libhdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695100" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695101" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695102" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695103" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695104" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695105" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695106" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695107" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695108" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695109" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695110" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695111" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695112" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695113" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695114" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695115" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695116" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695117" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695118" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695119" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695120" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695121" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695122" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695123" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695124" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695125" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695126" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695127" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695128" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695129" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695130" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695131" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695132" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695133" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695134" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695135" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695136" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695137" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695138" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695139" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695140" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695141" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695142" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695143" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695144" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695145" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695146" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695147" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695148" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695149" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695150" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695151" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695152" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695153" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695154" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695155" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695156" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695157" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695158" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10811</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10811" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10811" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10811" ref_url="https://www.suse.com/security/cve/CVE-2020-10811" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode() located in H5Olayout.c. It allows an attacker to cause Denial of Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-03"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10811/">CVE-2020-10811</cve>
	<bugzilla href="https://bugzilla.suse.com/1167405">SUSE bug 1167405</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684443" comment="hdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684444" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684445" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684446" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684447" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684448" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684449" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684450" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684451" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684452" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684453" comment="hdf5-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695078" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695079" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695080" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695081" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695082" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695083" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695084" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695085" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695086" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695087" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695088" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695089" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695090" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695091" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695092" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695093" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695094" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695095" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695096" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695097" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695098" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695099" comment="libhdf5-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695100" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695101" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695102" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695103" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695104" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695105" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695106" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695107" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695108" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695109" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695110" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695111" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695112" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695113" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695114" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695115" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695116" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695117" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695118" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695119" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695120" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695121" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695122" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695123" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695124" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695125" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695126" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695127" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695128" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695129" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695130" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695131" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695132" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695133" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695134" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695135" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695136" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695137" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695138" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695139" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695140" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695141" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695142" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695143" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695144" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695145" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695146" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695147" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695148" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695149" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695150" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695151" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695152" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695153" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695154" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695155" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695156" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695157" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695158" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10812</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10812" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10812" ref_url="https://www.suse.com/security/cve/CVE-2020-10812" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012784.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012789.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012793.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5F_get_nrefs() located in H5Fquery.c. It allows an attacker to cause Denial of Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-02"/>
	<updated date="2022-11-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10812/">CVE-2020-10812</cve>
	<bugzilla href="https://bugzilla.suse.com/1167400">SUSE bug 1167400</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720110" comment="hdf5-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695561" comment="hdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720111" comment="hdf5-gnu-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695562" comment="hdf5-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720112" comment="hdf5-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695563" comment="hdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720113" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695564" comment="hdf5-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720114" comment="hdf5-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695565" comment="hdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720115" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695566" comment="hdf5-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720116" comment="hdf5-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695567" comment="hdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720117" comment="hdf5-gnu-openmpi3-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695568" comment="hdf5-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720118" comment="hdf5-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695569" comment="hdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720119" comment="hdf5-gnu-openmpi4-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695570" comment="hdf5-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009720120" comment="hdf5-hpc-examples-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695571" comment="hdf5-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721709" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695572" comment="hdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721710" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695573" comment="hdf5_1_10_8-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721711" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695574" comment="hdf5_1_10_8-gnu-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721712" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695575" comment="hdf5_1_10_8-gnu-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721713" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695576" comment="hdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721714" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695577" comment="hdf5_1_10_8-gnu-mpich-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721715" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695578" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721716" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695579" comment="hdf5_1_10_8-gnu-mpich-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721717" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695580" comment="hdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721718" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695581" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721719" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695582" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721720" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695583" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721721" comment="hdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695584" comment="hdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721722" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695585" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721723" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695586" comment="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721724" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695587" comment="hdf5_1_10_8-gnu-openmpi3-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721725" comment="hdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695588" comment="hdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721726" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695589" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721727" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695590" comment="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721728" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695591" comment="hdf5_1_10_8-gnu-openmpi4-hpc-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721729" comment="hdf5_1_10_8-hpc-examples-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695592" comment="hdf5_1_10_8-hpc-examples is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721730" comment="libhdf5-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695593" comment="libhdf5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721731" comment="libhdf5-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695594" comment="libhdf5-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721732" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695595" comment="libhdf5-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721733" comment="libhdf5-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695596" comment="libhdf5-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721734" comment="libhdf5-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695597" comment="libhdf5-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721735" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695598" comment="libhdf5_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721736" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695599" comment="libhdf5_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721737" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695600" comment="libhdf5_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721738" comment="libhdf5_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695601" comment="libhdf5_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721739" comment="libhdf5_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695602" comment="libhdf5_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721740" comment="libhdf5_cpp-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695603" comment="libhdf5_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721741" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695604" comment="libhdf5_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721742" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695605" comment="libhdf5_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721743" comment="libhdf5_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695606" comment="libhdf5_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721744" comment="libhdf5_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695607" comment="libhdf5_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721745" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695608" comment="libhdf5_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721746" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695609" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721747" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695610" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721748" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695611" comment="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721749" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695612" comment="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721750" comment="libhdf5_fortran-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695613" comment="libhdf5_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721751" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695614" comment="libhdf5_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721752" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695615" comment="libhdf5_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721753" comment="libhdf5_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695616" comment="libhdf5_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721754" comment="libhdf5_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695617" comment="libhdf5_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721755" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695618" comment="libhdf5_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721756" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695619" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721757" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695620" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721758" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695621" comment="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721759" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695622" comment="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721760" comment="libhdf5_hl-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695623" comment="libhdf5_hl-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721761" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695624" comment="libhdf5_hl-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721762" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695625" comment="libhdf5_hl-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721763" comment="libhdf5_hl-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695626" comment="libhdf5_hl-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721764" comment="libhdf5_hl-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695627" comment="libhdf5_hl-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721765" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695628" comment="libhdf5_hl_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721766" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695629" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721767" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695630" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721768" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695631" comment="libhdf5_hl_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721769" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695632" comment="libhdf5_hl_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721770" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695633" comment="libhdf5_hl_cpp-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721771" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695634" comment="libhdf5_hl_cpp-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721772" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695635" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721773" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695636" comment="libhdf5_hl_cpp-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721774" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695637" comment="libhdf5_hl_cpp-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721775" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695638" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721776" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695639" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721777" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695640" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721778" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695641" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721779" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695642" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721780" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695643" comment="libhdf5_hl_fortran-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721781" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695644" comment="libhdf5_hl_fortran-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721782" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695645" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721783" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695646" comment="libhdf5_hl_fortran-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721784" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695647" comment="libhdf5_hl_fortran-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721785" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695648" comment="libhdf5hl_fortran_1_10_8-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721786" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695649" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721787" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695650" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721788" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695651" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721789" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc-1.10.8-150300.4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695652" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010878" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10878</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10878" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10878" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10878" ref_url="https://www.suse.com/security/cve/CVE-2020-10878" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:314-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1682-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0850-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html" source="SUSE-SU"/>
    <description>
    Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-10878/">CVE-2020-10878</cve>
	<bugzilla href="https://bugzilla.suse.com/1171864">SUSE bug 1171864</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628966" comment="perl-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628967" comment="perl-base-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628968" comment="perl-base-32bit-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153231" comment="perl-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628969" comment="perl-core-DB_File-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695544" comment="perl-core-DB_File is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010933" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10933</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10933" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10933" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10933" ref_url="https://www.suse.com/security/cve/CVE-2020-10933" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0995-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006711.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0586-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00004.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10933/">CVE-2020-10933</cve>
	<bugzilla href="https://bugzilla.suse.com/1168938">SUSE bug 1168938</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202010942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-10942</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-10942" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10942" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-10942" ref_url="https://www.suse.com/security/cve/CVE-2020-10942" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1085-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006753.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006760.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0543-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00035.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10942/">CVE-2020-10942</cve>
	<bugzilla href="https://bugzilla.suse.com/1167629">SUSE bug 1167629</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011017" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11017</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11017" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11017" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11017" ref_url="https://www.suse.com/security/cve/CVE-2020-11017" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11017/">CVE-2020-11017</cve>
	<bugzilla href="https://bugzilla.suse.com/1171441">SUSE bug 1171441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011018" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11018</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11018" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11018" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11018" ref_url="https://www.suse.com/security/cve/CVE-2020-11018" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11018/">CVE-2020-11018</cve>
	<bugzilla href="https://bugzilla.suse.com/1171441">SUSE bug 1171441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11019</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11019" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11019" ref_url="https://www.suse.com/security/cve/CVE-2020-11019" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11019/">CVE-2020-11019</cve>
	<bugzilla href="https://bugzilla.suse.com/1171441">SUSE bug 1171441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11038</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11038" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11038" ref_url="https://www.suse.com/security/cve/CVE-2020-11038" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the server can manipulate the client to write data out of bound to the previously allocated buffer. This has been patched in 2.1.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-11038/">CVE-2020-11038</cve>
	<bugzilla href="https://bugzilla.suse.com/1171441">SUSE bug 1171441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11039</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11039" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11039" ref_url="https://www.suse.com/security/cve/CVE-2020-11039" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2020-11039/">CVE-2020-11039</cve>
	<bugzilla href="https://bugzilla.suse.com/1171441">SUSE bug 1171441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11040</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11040" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11040" ref_url="https://www.suse.com/security/cve/CVE-2020-11040" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in clear_decompress_subcode_rlex, visualized on screen as color. This has been patched in 2.1.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="2.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11040/">CVE-2020-11040</cve>
	<bugzilla href="https://bugzilla.suse.com/1171441">SUSE bug 1171441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11041</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11041" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11041" ref_url="https://www.suse.com/security/cve/CVE-2020-11041" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend (alsa, oss, pulse, ...). The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot upgrade to the patched version, a workaround is to disable sound for the session. This has been patched in 2.1.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="2.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11041/">CVE-2020-11041</cve>
	<bugzilla href="https://bugzilla.suse.com/1171441">SUSE bug 1171441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011043" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11043</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11043" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11043" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11043" ref_url="https://www.suse.com/security/cve/CVE-2020-11043" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfx_process_message_tileset. Invalid data fed to RFX decoder results in garbage on screen (as colors). This has been patched in 2.1.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="2.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11043/">CVE-2020-11043</cve>
	<bugzilla href="https://bugzilla.suse.com/1171441">SUSE bug 1171441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11078</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11078" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11078" ref_url="https://www.suse.com/security/cve/CVE-2020-11078" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:239-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008922.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008924.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008868.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008895.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1808-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/019148.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0772-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ANZIEBB4AJVGYC2KYDE7RDSTFBBTL5ID/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0796-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BX6XMG6VSE6RQ4LZXDDXUYZZZ2FYOQM7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1806-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DTGWJY2VML3YAAFAOOYJAQP5SZ4X6XWG/" source="SUSE-SU"/>
    <description>
    In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with uri constructed by string concatenation, as opposed to proper urllib building with escaping. This has been fixed in 0.18.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-11078/">CVE-2020-11078</cve>
	<bugzilla href="https://bugzilla.suse.com/1171998">SUSE bug 1171998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497902" comment="python2-httplib2-0.19.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009475569" comment="python2-httplib2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493961" comment="python3-httplib2-0.19.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009475570" comment="python3-httplib2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11080</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11080" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11080" ref_url="https://www.suse.com/security/cve/CVE-2020-11080" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008603.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:99-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1568-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006909.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1576-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006908.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006933.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008538.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008539.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008541.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0468-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3FQEUDKQEBT4RUZ2JLDQBWSAYUJ4SCTW/" source="SUSE-SU"/>
    <description>
    In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14,400 bytes (2400 individual settings entries) over and over again. The attack causes the CPU to spike at 100%. nghttp2 v1.41.0 fixes this vulnerability. There is a workaround to this vulnerability. Implement nghttp2_on_frame_recv_callback callback, and if received frame is SETTINGS frame and the number of settings entries are large (e.g., &gt; 32), then drop the connection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11080/">CVE-2020-11080</cve>
	<bugzilla href="https://bugzilla.suse.com/1172441">SUSE bug 1172441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172442">SUSE bug 1172442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181358">SUSE bug 1181358</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628805" comment="libnghttp2-14-1.40.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153583" comment="libnghttp2-14 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628806" comment="libnghttp2-14-32bit-1.40.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177223" comment="libnghttp2-14-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11095</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11095" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11095" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11095" ref_url="https://www.suse.com/security/cve/CVE-2020-11095" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11095/">CVE-2020-11095</cve>
	<bugzilla href="https://bugzilla.suse.com/1173247">SUSE bug 1173247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011096" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11096</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11096" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11096" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11096" ref_url="https://www.suse.com/security/cve/CVE-2020-11096" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP before version 2.1.2, there is a global OOB read in update_read_cache_bitmap_v3_order. As a workaround, one can disable bitmap cache with -bitmap-cache (default). This is fixed in version 2.1.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11096/">CVE-2020-11096</cve>
	<bugzilla href="https://bugzilla.suse.com/1173247">SUSE bug 1173247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11097</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11097" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11097" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11097" ref_url="https://www.suse.com/security/cve/CVE-2020-11097" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11097/">CVE-2020-11097</cve>
	<bugzilla href="https://bugzilla.suse.com/1173247">SUSE bug 1173247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11098</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11098" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11098" ref_url="https://www.suse.com/security/cve/CVE-2020-11098" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with `+glyph-cache` option enabled This is fixed in version 2.1.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11098/">CVE-2020-11098</cve>
	<bugzilla href="https://bugzilla.suse.com/1173247">SUSE bug 1173247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11099</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11099" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11099" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11099" ref_url="https://www.suse.com/security/cve/CVE-2020-11099" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11099/">CVE-2020-11099</cve>
	<bugzilla href="https://bugzilla.suse.com/1173247">SUSE bug 1173247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011102" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11102</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11102" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11102" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11102" ref_url="https://www.suse.com/security/cve/CVE-2020-11102" source="SUSE CVE"/>
    <description>
    hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11102/">CVE-2020-11102</cve>
	<bugzilla href="https://bugzilla.suse.com/1168713">SUSE bug 1168713</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11494</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11494" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11494" ref_url="https://www.suse.com/security/cve/CVE-2020-11494" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1085-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006753.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006760.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0543-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00035.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL, aka CID-b9258a2cece4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-11494/">CVE-2020-11494</cve>
	<bugzilla href="https://bugzilla.suse.com/1168424">SUSE bug 1168424</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11501</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11501" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11501" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11501" ref_url="https://www.suse.com/security/cve/CVE-2020-11501" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006699.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006700.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0948-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011542.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00015.html" source="SUSE-SU"/>
    <description>
    GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks the security guarantees of the DTLS protocol.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-11501/">CVE-2020-11501</cve>
	<bugzilla href="https://bugzilla.suse.com/1168345">SUSE bug 1168345</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628489" comment="gnutls-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628491" comment="libgnutls30-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177128" comment="libgnutls30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628492" comment="libgnutls30-32bit-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009235745" comment="libgnutls30-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11521</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11521" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11521" ref_url="https://www.suse.com/security/cve/CVE-2020-11521" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    libfreerdp/codec/planar.c in FreeRDP version &gt; 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11521/">CVE-2020-11521</cve>
	<bugzilla href="https://bugzilla.suse.com/1169413">SUSE bug 1169413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171443">SUSE bug 1171443</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11522</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11522" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11522" ref_url="https://www.suse.com/security/cve/CVE-2020-11522" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    libfreerdp/gdi/gdi.c in FreeRDP &gt; 1.0 through 2.0.0-rc4 has an Out-of-bounds Read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11522/">CVE-2020-11522</cve>
	<bugzilla href="https://bugzilla.suse.com/1169413">SUSE bug 1169413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171444">SUSE bug 1171444</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11523</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11523" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11523" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11523" ref_url="https://www.suse.com/security/cve/CVE-2020-11523" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    libfreerdp/gdi/region.c in FreeRDP versions &gt; 1.0 through 2.0.0-rc4 has an Integer Overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11523/">CVE-2020-11523</cve>
	<bugzilla href="https://bugzilla.suse.com/1169413">SUSE bug 1169413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171445">SUSE bug 1171445</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11524</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11524" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11524" ref_url="https://www.suse.com/security/cve/CVE-2020-11524" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    libfreerdp/codec/interleaved.c in FreeRDP versions &gt; 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11524/">CVE-2020-11524</cve>
	<bugzilla href="https://bugzilla.suse.com/1169413">SUSE bug 1169413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171446">SUSE bug 1171446</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11525</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11525" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11525" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11525" ref_url="https://www.suse.com/security/cve/CVE-2020-11525" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    libfreerdp/cache/bitmap.c in FreeRDP versions &gt; 1.0 through 2.0.0-rc4 has an Out of bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.2/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11525/">CVE-2020-11525</cve>
	<bugzilla href="https://bugzilla.suse.com/1169413">SUSE bug 1169413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171447">SUSE bug 1171447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11526</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11526" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11526" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11526" ref_url="https://www.suse.com/security/cve/CVE-2020-11526" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    libfreerdp/core/update.c in FreeRDP versions &gt; 1.1 through 2.0.0-rc4 has an Out-of-bounds Read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.2/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11526/">CVE-2020-11526</cve>
	<bugzilla href="https://bugzilla.suse.com/1169413">SUSE bug 1169413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171674">SUSE bug 1171674</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011608" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11608</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11608" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11608" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11608" ref_url="https://www.suse.com/security/cve/CVE-2020-11608" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs when there are zero endpoints, aka CID-998912346c0d.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11608/">CVE-2020-11608</cve>
	<bugzilla href="https://bugzilla.suse.com/1168829">SUSE bug 1168829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11651</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11651" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11651" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11651" ref_url="https://www.suse.com/security/cve/CVE-2020-11651" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006766.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006762.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006763.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006765.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14403-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14404-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14431-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1973-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008281.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009063.html" source="SUSE-SU"/>
		<reference ref_id="TID000019619" ref_url="https://www.suse.com/support/kb/doc/?id=000019619" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0564-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0899-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6E3YAO2VV3WBUS7PMAT26ZYDS3AXW5VL/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2106-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MU6P3NIODW6ZMC4HZLBROO6ZEOD5KAUX/" source="SUSE-SU"/>
    <description>
    An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11651/">CVE-2020-11651</cve>
	<bugzilla href="https://bugzilla.suse.com/1170595">SUSE bug 1170595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498301" comment="python2-distro-1.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623274" comment="python2-distro is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494057" comment="python3-distro-1.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623275" comment="python3-distro is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11652</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11652" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11652" ref_url="https://www.suse.com/security/cve/CVE-2020-11652" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006766.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006762.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006763.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006765.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14403-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14404-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14431-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1973-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008281.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009063.html" source="SUSE-SU"/>
		<reference ref_id="TID000019619" ref_url="https://www.suse.com/support/kb/doc/?id=000019619" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0564-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0899-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6E3YAO2VV3WBUS7PMAT26ZYDS3AXW5VL/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2106-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MU6P3NIODW6ZMC4HZLBROO6ZEOD5KAUX/" source="SUSE-SU"/>
    <description>
    An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11652/">CVE-2020-11652</cve>
	<bugzilla href="https://bugzilla.suse.com/1170595">SUSE bug 1170595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498301" comment="python2-distro-1.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623274" comment="python2-distro is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494057" comment="python3-distro-1.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623275" comment="python3-distro is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11668</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11668" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11668" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11668" ref_url="https://www.suse.com/security/cve/CVE-2020-11668" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007357.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007706.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007728.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007924.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007925.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3705-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008187.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7EJISS2OPKUSJFJ2BG5ZWHA2Z6H3VQB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors, aka CID-a246b4d54770.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11668/">CVE-2020-11668</cve>
	<bugzilla href="https://bugzilla.suse.com/1168952">SUSE bug 1168952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173942">SUSE bug 1173942</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11736</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11736" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11736" ref_url="https://www.suse.com/security/cve/CVE-2020-11736" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006898.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00035.html" source="SUSE-SU"/>
    <description>
    fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.9/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-11736/">CVE-2020-11736</cve>
	<bugzilla href="https://bugzilla.suse.com/1169428">SUSE bug 1169428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189131">SUSE bug 1189131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487218" comment="file-roller-3.32.5-1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153800" comment="file-roller is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487219" comment="file-roller-lang-3.32.5-1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153801" comment="file-roller-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11739</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11739" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11739" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11739" ref_url="https://www.suse.com/security/cve/CVE-2020-11739" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1138-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006757.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1634-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007264.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0599-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00006.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service or possibly gain privileges because of missing memory barriers in read-write unlock paths. The read-write unlock paths don't contain a memory barrier. On Arm, this means a processor is allowed to re-order the memory access with the preceding ones. In other words, the unlock may be seen by another processor before all the memory accesses within the "critical" section. As a consequence, it may be possible to have a writer executing a critical section at the same time as readers or another writer. In other words, many of the assumptions (e.g., a variable cannot be modified after a check) in the critical sections are not safe anymore. The read-write locks are used in hypercalls (such as grant-table ones), so a malicious guest could exploit the race. For instance, there is a small window where Xen can leak memory if XENMAPSPACE_grant_table is used concurrently. A malicious guest may be able to leak memory, or cause a hypervisor crash resulting in a Denial of Service (DoS). Information leak and privilege escalation cannot be excluded.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11739/">CVE-2020-11739</cve>
	<bugzilla href="https://bugzilla.suse.com/1168142">SUSE bug 1168142</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11740</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11740" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11740" ref_url="https://www.suse.com/security/cve/CVE-2020-11740" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1138-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006757.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14448-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1634-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007264.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0599-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00006.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other guests. Unprivileged guests can request to map xenoprof buffers, even if profiling has not been enabled for those guests. These buffers were not scrubbed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-11740/">CVE-2020-11740</cve>
	<bugzilla href="https://bugzilla.suse.com/1168140">SUSE bug 1168140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11741</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11741" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11741" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11741" ref_url="https://www.suse.com/security/cve/CVE-2020-11741" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1138-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006757.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14448-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1634-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007264.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0599-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00006.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (with active profiling) to obtain sensitive information about other guests, cause a denial of service, or possibly gain privileges. For guests for which "active" profiling was enabled by the administrator, the xenoprof code uses the standard Xen shared ring structure. Unfortunately, this code did not treat the guest as a potential adversary: it trusts the guest not to modify buffer size information or modify head / tail pointers in unexpected ways. This can crash the host (DoS). Privilege escalation cannot be ruled out.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11741/">CVE-2020-11741</cve>
	<bugzilla href="https://bugzilla.suse.com/1168140">SUSE bug 1168140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11742</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11742" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11742" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11742" ref_url="https://www.suse.com/security/cve/CVE-2020-11742" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1138-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006757.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14448-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1634-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007264.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0599-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00006.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of bad continuation handling in GNTTABOP_copy. Grant table operations are expected to return 0 for success, and a negative number for errors. The fix for CVE-2017-12135 introduced a path through grant copy handling where success may be returned to the caller without any action taken. In particular, the status fields of individual operations are left uninitialised, and may result in errant behaviour in the caller of GNTTABOP_copy. A buggy or malicious guest can construct its grant table in such a way that, when a backend domain tries to copy a grant, it hits the incorrect exit path. This returns success to the caller without doing anything, which may cause crashes or other incorrect behaviour.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11742/">CVE-2020-11742</cve>
	<bugzilla href="https://bugzilla.suse.com/1169392">SUSE bug 1169392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11743</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11743" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11743" ref_url="https://www.suse.com/security/cve/CVE-2020-11743" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1138-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006757.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1634-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006957.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0599-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00006.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOP_map_grant. Grant table operations are expected to return 0 for success, and a negative number for errors. Some misplaced brackets cause one error path to return 1 instead of a negative value. The grant table code in Linux treats this condition as success, and proceeds with incorrectly initialised state. A buggy or malicious guest can construct its grant table in such a way that, when a backend domain tries to map a grant, it hits the incorrect error path. This will crash a Linux based dom0 or backend domain.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11743/">CVE-2020-11743</cve>
	<bugzilla href="https://bugzilla.suse.com/1168143">SUSE bug 1168143</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11758</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11758" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11758" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11758" ref_url="https://www.suse.com/security/cve/CVE-2020-11758" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0682-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11758/">CVE-2020-11758</cve>
	<bugzilla href="https://bugzilla.suse.com/1169549">SUSE bug 1169549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169573">SUSE bug 1169573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169574">SUSE bug 1169574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11760</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11760" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11760" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11760" ref_url="https://www.suse.com/security/cve/CVE-2020-11760" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0682-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11760/">CVE-2020-11760</cve>
	<bugzilla href="https://bugzilla.suse.com/1169580">SUSE bug 1169580</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11761</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11761" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11761" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11761" ref_url="https://www.suse.com/security/cve/CVE-2020-11761" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0682-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11761/">CVE-2020-11761</cve>
	<bugzilla href="https://bugzilla.suse.com/1169578">SUSE bug 1169578</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11762</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11762" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11762" ref_url="https://www.suse.com/security/cve/CVE-2020-11762" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0682-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-11762/">CVE-2020-11762</cve>
	<bugzilla href="https://bugzilla.suse.com/1169549">SUSE bug 1169549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169573">SUSE bug 1169573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169574">SUSE bug 1169574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169575">SUSE bug 1169575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169576">SUSE bug 1169576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169578">SUSE bug 1169578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169579">SUSE bug 1169579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169580">SUSE bug 1169580</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11763</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11763" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11763" ref_url="https://www.suse.com/security/cve/CVE-2020-11763" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0682-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11763/">CVE-2020-11763</cve>
	<bugzilla href="https://bugzilla.suse.com/1169576">SUSE bug 1169576</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11764</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11764" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11764" ref_url="https://www.suse.com/security/cve/CVE-2020-11764" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0682-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11764/">CVE-2020-11764</cve>
	<bugzilla href="https://bugzilla.suse.com/1169574">SUSE bug 1169574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11765</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11765" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11765" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11765" ref_url="https://www.suse.com/security/cve/CVE-2020-11765" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0682-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11765/">CVE-2020-11765</cve>
	<bugzilla href="https://bugzilla.suse.com/1169575">SUSE bug 1169575</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11793</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11793" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11793" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11793" ref_url="https://www.suse.com/security/cve/CVE-2020-11793" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00008.html" source="SUSE-SU"/>
    <description>
    A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11793/">CVE-2020-11793</cve>
	<bugzilla href="https://bugzilla.suse.com/1169658">SUSE bug 1169658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11810</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11810" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11810" ref_url="https://www.suse.com/security/cve/CVE-2020-11810" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008762.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0734-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C5VK3H4AGK4ZRCLIB2D3IB7SS5RI4AZK/" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 (P_DATA_V2) packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be dropped. This requires careful timing due to the small time window (usually within a few seconds) between the victim client connection starting and the server PUSH_REPLY response back to the client. This attack will only work if Negotiable Cipher Parameters (NCP) is in use.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11810/">CVE-2020-11810</cve>
	<bugzilla href="https://bugzilla.suse.com/1169925">SUSE bug 1169925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694906" comment="openvpn-2.4.3-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152221" comment="openvpn is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011869" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11869</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11869" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11869" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11869" ref_url="https://www.suse.com/security/cve/CVE-2020-11869" source="SUSE CVE"/>
    <description>
    An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati-2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11869/">CVE-2020-11869</cve>
	<bugzilla href="https://bugzilla.suse.com/1170537">SUSE bug 1170537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188609">SUSE bug 1188609</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11884</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11884" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11884" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11884" ref_url="https://www.suse.com/security/cve/CVE-2020-11884" source="SUSE CVE"/>
    <description>
    In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11884/">CVE-2020-11884</cve>
	<bugzilla href="https://bugzilla.suse.com/1170030">SUSE bug 1170030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173947">SUSE bug 1173947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11984</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11984" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11984" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11984" ref_url="https://www.suse.com/security/cve/CVE-2020-11984" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007291.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007308.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00071.html" source="SUSE-SU"/>
    <description>
    Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11984/">CVE-2020-11984</cve>
	<bugzilla href="https://bugzilla.suse.com/1175074">SUSE bug 1175074</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202011993" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-11993</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-11993" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11993" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-11993" ref_url="https://www.suse.com/security/cve/CVE-2020-11993" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007291.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2450-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007655.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1792-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00081.html" source="SUSE-SU"/>
    <description>
    Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" will mitigate this vulnerability for unpatched servers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11993/">CVE-2020-11993</cve>
	<bugzilla href="https://bugzilla.suse.com/1175070">SUSE bug 1175070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178074">SUSE bug 1178074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180830">SUSE bug 1180830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12049</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12049" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12049" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12049" ref_url="https://www.suse.com/security/cve/CVE-2020-12049" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009269.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009377.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:621-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:659-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009437.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:660-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-September/020142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009192.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2470-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009214.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009330.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1204-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LPUICUYAOLJREPLAWO5JOKCXD4HSH4KT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2810-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ILND7MBTQAFIRZBI5CMERWHRUVEAKAOD/" source="SUSE-SU"/>
    <description>
    An issue was discovered in dbus &gt;= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12049/">CVE-2020-12049</cve>
	<bugzilla href="https://bugzilla.suse.com/1172505">SUSE bug 1172505</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626210" comment="dbus-1-1.12.2-8.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626211" comment="dbus-1-devel-1.12.2-8.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151536" comment="dbus-1-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626348" comment="dbus-1-devel-32bit-1.12.2-8.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009258222" comment="dbus-1-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626349" comment="dbus-1-devel-doc-1.12.2-8.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009258223" comment="dbus-1-devel-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626212" comment="dbus-1-x11-1.12.2-8.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626213" comment="libdbus-1-3-1.12.2-8.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626214" comment="libdbus-1-3-32bit-1.12.2-8.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12105</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12105" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12105" ref_url="https://www.suse.com/security/cve/CVE-2020-12105" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006813.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006836.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00039.html" source="SUSE-SU"/>
    <description>
    OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-in-the-middle attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12105/">CVE-2020-12105</cve>
	<bugzilla href="https://bugzilla.suse.com/1170452">SUSE bug 1170452</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630322" comment="openconnect-7.08-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151736" comment="openconnect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630325" comment="openconnect-lang-7.08-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177178" comment="openconnect-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12243</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12243" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12243" ref_url="https://www.suse.com/security/cve/CVE-2020-12243" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:160-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006789.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006790.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:169-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006807.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1210-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006805.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006801.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00016.html" source="SUSE-SU"/>
    <description>
    In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12243/">CVE-2020-12243</cve>
	<bugzilla href="https://bugzilla.suse.com/1170771">SUSE bug 1170771</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12268</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12268" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12268" ref_url="https://www.suse.com/security/cve/CVE-2020-12268" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006798.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006802.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0653-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00034.html" source="SUSE-SU"/>
    <description>
    jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-12268/">CVE-2020-12268</cve>
	<bugzilla href="https://bugzilla.suse.com/1170603">SUSE bug 1170603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12351</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12351" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12351" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2980-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2981-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007601.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007798.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3400-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007803.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3449-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007816.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007842.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="TID000019735" ref_url="https://www.suse.com/support/kb/doc/?id=000019735" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1682-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2112-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<bugzilla href="https://bugzilla.suse.com/1177724">SUSE bug 1177724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177729">SUSE bug 1177729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178397">SUSE bug 1178397</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729187" comment="sca-patterns-base-1.5.0-150300.10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729422" comment="sca-patterns-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729188" comment="sca-patterns-hae-1.5.1-150300.10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729423" comment="sca-patterns-hae is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729189" comment="sca-patterns-sle11-1.5.1-150300.18.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623504" comment="sca-patterns-sle11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729190" comment="sca-patterns-sle12-1.5.1-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729424" comment="sca-patterns-sle12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729191" comment="sca-patterns-sle15-1.5.1-150300.14.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729425" comment="sca-patterns-sle15 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729192" comment="sca-patterns-suma-1.5.0-150300.9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729426" comment="sca-patterns-suma is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729193" comment="sca-server-report-1.5.1-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729427" comment="sca-server-report is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12352</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12352" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12352" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12352" ref_url="https://www.suse.com/security/cve/CVE-2020-12352" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2980-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2981-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007601.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007842.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="TID000019735" ref_url="https://www.suse.com/support/kb/doc/?id=000019735" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1682-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2112-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12352/">CVE-2020-12352</cve>
	<bugzilla href="https://bugzilla.suse.com/1177725">SUSE bug 1177725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178398">SUSE bug 1178398</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729187" comment="sca-patterns-base-1.5.0-150300.10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729422" comment="sca-patterns-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729188" comment="sca-patterns-hae-1.5.1-150300.10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729423" comment="sca-patterns-hae is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729189" comment="sca-patterns-sle11-1.5.1-150300.18.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623504" comment="sca-patterns-sle11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729190" comment="sca-patterns-sle12-1.5.1-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729424" comment="sca-patterns-sle12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729191" comment="sca-patterns-sle15-1.5.1-150300.14.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729425" comment="sca-patterns-sle15 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729192" comment="sca-patterns-suma-1.5.0-150300.9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729426" comment="sca-patterns-suma is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729193" comment="sca-server-report-1.5.1-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729427" comment="sca-server-report is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12362</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12362" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12362" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12362" ref_url="https://www.suse.com/security/cve/CVE-2020-12362" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008450.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008445.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008452.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0393-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/R5J7TLH5AZYERG7B3PW3ALPYSBMFCGV5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0407-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KH2XS5MRKRSCX3I5AS4LGZH576PO6KUD/" source="SUSE-SU"/>
    <description>
    Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable an escalation of privilege via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12362/">CVE-2020-12362</cve>
	<bugzilla href="https://bugzilla.suse.com/1181720">SUSE bug 1181720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182033">SUSE bug 1182033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190859">SUSE bug 1190859</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12363</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12363" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12363" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12363" ref_url="https://www.suse.com/security/cve/CVE-2020-12363" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008450.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008445.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008452.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0393-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/R5J7TLH5AZYERG7B3PW3ALPYSBMFCGV5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0407-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KH2XS5MRKRSCX3I5AS4LGZH576PO6KUD/" source="SUSE-SU"/>
    <description>
    Improper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable a denial of service via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="1.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12363/">CVE-2020-12363</cve>
	<bugzilla href="https://bugzilla.suse.com/1181720">SUSE bug 1181720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181735">SUSE bug 1181735</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12364</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12364" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12364" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12364" ref_url="https://www.suse.com/security/cve/CVE-2020-12364" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008450.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008445.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008452.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0393-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/R5J7TLH5AZYERG7B3PW3ALPYSBMFCGV5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0407-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KH2XS5MRKRSCX3I5AS4LGZH576PO6KUD/" source="SUSE-SU"/>
    <description>
    Null pointer reference in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before version Linux kernel version 5.5 may allow a privileged user to potentially enable a denial of service via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="1.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12364/">CVE-2020-12364</cve>
	<bugzilla href="https://bugzilla.suse.com/1181720">SUSE bug 1181720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181736">SUSE bug 1181736</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12373</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12373" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12373" ref_url="https://www.suse.com/security/cve/CVE-2020-12373" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008450.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008445.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008452.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0393-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/R5J7TLH5AZYERG7B3PW3ALPYSBMFCGV5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0407-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KH2XS5MRKRSCX3I5AS4LGZH576PO6KUD/" source="SUSE-SU"/>
    <description>
    Expired pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="1.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12373/">CVE-2020-12373</cve>
	<bugzilla href="https://bugzilla.suse.com/1181720">SUSE bug 1181720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181738">SUSE bug 1181738</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12387</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12387" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12387" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12387" ref_url="https://www.suse.com/security/cve/CVE-2020-12387" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006803.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1225-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006809.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0643-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00024.html" source="SUSE-SU"/>
    <description>
    A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This vulnerability affects Firefox ESR &lt; 68.8, Firefox &lt; 76, and Thunderbird &lt; 68.8.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12387/">CVE-2020-12387</cve>
	<bugzilla href="https://bugzilla.suse.com/1171186">SUSE bug 1171186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12388</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12388" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12388" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12388" ref_url="https://www.suse.com/security/cve/CVE-2020-12388" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006803.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006809.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00021.html" source="SUSE-SU"/>
    <description>
    The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only affects Firefox on Windows operating systems.*. This vulnerability affects Firefox ESR &lt; 68.8 and Firefox &lt; 76.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12388/">CVE-2020-12388</cve>
	<bugzilla href="https://bugzilla.suse.com/1171186">SUSE bug 1171186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12389</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12389" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12389" ref_url="https://www.suse.com/security/cve/CVE-2020-12389" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006803.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006809.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00021.html" source="SUSE-SU"/>
    <description>
    The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only affects Firefox on Windows operating systems.*. This vulnerability affects Firefox ESR &lt; 68.8 and Firefox &lt; 76.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12389/">CVE-2020-12389</cve>
	<bugzilla href="https://bugzilla.suse.com/1171186">SUSE bug 1171186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12392</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12392" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12392" ref_url="https://www.suse.com/security/cve/CVE-2020-12392" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006803.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1225-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006809.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0643-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00024.html" source="SUSE-SU"/>
    <description>
    The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, it could have resulted in the disclosure of local files. This vulnerability affects Firefox ESR &lt; 68.8, Firefox &lt; 76, and Thunderbird &lt; 68.8.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12392/">CVE-2020-12392</cve>
	<bugzilla href="https://bugzilla.suse.com/1171186">SUSE bug 1171186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12393</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12393" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12393" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12393" ref_url="https://www.suse.com/security/cve/CVE-2020-12393" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006803.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1225-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006809.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0643-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00024.html" source="SUSE-SU"/>
    <description>
    The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, it could have resulted in command injection and arbitrary command execution. *Note: this issue only affects Firefox on Windows operating systems.*. This vulnerability affects Firefox ESR &lt; 68.8, Firefox &lt; 76, and Thunderbird &lt; 68.8.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12393/">CVE-2020-12393</cve>
	<bugzilla href="https://bugzilla.suse.com/1171186">SUSE bug 1171186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12395</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12395" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12395" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12395" ref_url="https://www.suse.com/security/cve/CVE-2020-12395" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006803.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1225-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006809.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0643-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00024.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR &lt; 68.8, Firefox &lt; 76, and Thunderbird &lt; 68.8.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12395/">CVE-2020-12395</cve>
	<bugzilla href="https://bugzilla.suse.com/1171186">SUSE bug 1171186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012397" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12397</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12397" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12397" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12397" ref_url="https://www.suse.com/security/cve/CVE-2020-12397" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1225-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006810.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0643-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00024.html" source="SUSE-SU"/>
    <description>
    By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address that Thunderbird displays. This vulnerability affects Thunderbird &lt; 68.8.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-12397/">CVE-2020-12397</cve>
	<bugzilla href="https://bugzilla.suse.com/1171186">SUSE bug 1171186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012398" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12398</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12398" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12398" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12398" ref_url="https://www.suse.com/security/cve/CVE-2020-12398" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1591-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00019.html" source="SUSE-SU"/>
    <description>
    If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sent without protection. This vulnerability affects Thunderbird &lt; 68.9.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12398/">CVE-2020-12398</cve>
	<bugzilla href="https://bugzilla.suse.com/1172402">SUSE bug 1172402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12399</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12399" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12399" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12399" ref_url="https://www.suse.com/security/cve/CVE-2020-12399" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14418-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1677-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0854-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00047.html" source="SUSE-SU"/>
    <description>
    NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird &lt; 68.9.0, Firefox &lt; 77, and Firefox ESR &lt; 68.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12399/">CVE-2020-12399</cve>
	<bugzilla href="https://bugzilla.suse.com/1171978">SUSE bug 1171978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172402">SUSE bug 1172402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012400" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12400</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12400" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12400" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12400" ref_url="https://www.suse.com/security/cve/CVE-2020-12400" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009654.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009674.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
    <description>
    When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox &lt; 80 and Firefox for Android &lt; 80.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12400/">CVE-2020-12400</cve>
	<bugzilla href="https://bugzilla.suse.com/1174763">SUSE bug 1174763</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175686">SUSE bug 1175686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632974" comment="libfreebl3-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632957" comment="libfreebl3-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632975" comment="libfreebl3-hmac-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632959" comment="libfreebl3-hmac-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244409" comment="libfreebl3-hmac-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632976" comment="libsoftokn3-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632961" comment="libsoftokn3-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632977" comment="libsoftokn3-hmac-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632963" comment="libsoftokn3-hmac-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244411" comment="libsoftokn3-hmac-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632978" comment="mozilla-nspr-4.32-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152084" comment="mozilla-nspr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632965" comment="mozilla-nspr-32bit-4.32-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152812" comment="mozilla-nspr-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632979" comment="mozilla-nspr-devel-4.32-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152085" comment="mozilla-nspr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632980" comment="mozilla-nss-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632968" comment="mozilla-nss-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632981" comment="mozilla-nss-certs-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632970" comment="mozilla-nss-certs-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632982" comment="mozilla-nss-devel-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632983" comment="mozilla-nss-sysinit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633200" comment="mozilla-nss-sysinit-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632984" comment="mozilla-nss-tools-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12401</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12401" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12401" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12401" ref_url="https://www.suse.com/security/cve/CVE-2020-12401" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009654.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009674.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
    <description>
    During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox &lt; 80 and Firefox for Android &lt; 80.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12401/">CVE-2020-12401</cve>
	<bugzilla href="https://bugzilla.suse.com/1174763">SUSE bug 1174763</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175686">SUSE bug 1175686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632974" comment="libfreebl3-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632957" comment="libfreebl3-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632975" comment="libfreebl3-hmac-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632959" comment="libfreebl3-hmac-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244409" comment="libfreebl3-hmac-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632976" comment="libsoftokn3-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632961" comment="libsoftokn3-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632977" comment="libsoftokn3-hmac-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632963" comment="libsoftokn3-hmac-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244411" comment="libsoftokn3-hmac-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632978" comment="mozilla-nspr-4.32-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152084" comment="mozilla-nspr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632965" comment="mozilla-nspr-32bit-4.32-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152812" comment="mozilla-nspr-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632979" comment="mozilla-nspr-devel-4.32-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152085" comment="mozilla-nspr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632980" comment="mozilla-nss-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632968" comment="mozilla-nss-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632981" comment="mozilla-nss-certs-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632970" comment="mozilla-nss-certs-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632982" comment="mozilla-nss-devel-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632983" comment="mozilla-nss-sysinit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633200" comment="mozilla-nss-sysinit-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632984" comment="mozilla-nss-tools-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12402</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12402" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12402" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12402" ref_url="https://www.suse.com/security/cve/CVE-2020-12402" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14418-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0953-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1017-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html" source="SUSE-SU"/>
    <description>
    During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform electromagnetic-based side channel attacks to record traces leading to the recovery of the secret primes. *Note:* An unmodified Firefox browser does not generate RSA keys in normal operation and is not affected, but products built on top of it might. This vulnerability affects Firefox &lt; 78.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12402/">CVE-2020-12402</cve>
	<bugzilla href="https://bugzilla.suse.com/1173032">SUSE bug 1173032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173576">SUSE bug 1173576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174230">SUSE bug 1174230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628729" comment="libfreebl3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629829" comment="libfreebl3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628731" comment="libsoftokn3-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629830" comment="libsoftokn3-hmac-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628733" comment="mozilla-nss-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628735" comment="mozilla-nss-certs-3.53.1-3.51.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012403" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12403</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12403" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12403" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12403" ref_url="https://www.suse.com/security/cve/CVE-2020-12403" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009654.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009674.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12403/">CVE-2020-12403</cve>
	<bugzilla href="https://bugzilla.suse.com/1174763">SUSE bug 1174763</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632974" comment="libfreebl3-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632957" comment="libfreebl3-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632975" comment="libfreebl3-hmac-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632959" comment="libfreebl3-hmac-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244409" comment="libfreebl3-hmac-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632976" comment="libsoftokn3-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632961" comment="libsoftokn3-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632977" comment="libsoftokn3-hmac-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632963" comment="libsoftokn3-hmac-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244411" comment="libsoftokn3-hmac-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632978" comment="mozilla-nspr-4.32-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152084" comment="mozilla-nspr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632965" comment="mozilla-nspr-32bit-4.32-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152812" comment="mozilla-nspr-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632979" comment="mozilla-nspr-devel-4.32-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152085" comment="mozilla-nspr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632980" comment="mozilla-nss-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632968" comment="mozilla-nss-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632981" comment="mozilla-nss-certs-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632970" comment="mozilla-nss-certs-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632982" comment="mozilla-nss-devel-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632983" comment="mozilla-nss-sysinit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633200" comment="mozilla-nss-sysinit-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632984" comment="mozilla-nss-tools-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12405</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12405" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12405" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12405" ref_url="https://www.suse.com/security/cve/CVE-2020-12405" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006897.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1591-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0789-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00019.html" source="SUSE-SU"/>
    <description>
    When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 68.9.0, Firefox &lt; 77, and Firefox ESR &lt; 68.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12405/">CVE-2020-12405</cve>
	<bugzilla href="https://bugzilla.suse.com/1172402">SUSE bug 1172402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012406" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12406</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12406" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12406" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12406" ref_url="https://www.suse.com/security/cve/CVE-2020-12406" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006897.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1591-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0789-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00019.html" source="SUSE-SU"/>
    <description>
    Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 68.9.0, Firefox &lt; 77, and Firefox ESR &lt; 68.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12406/">CVE-2020-12406</cve>
	<bugzilla href="https://bugzilla.suse.com/1172402">SUSE bug 1172402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12410</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12410" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12410" ref_url="https://www.suse.com/security/cve/CVE-2020-12410" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006897.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1591-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0789-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00019.html" source="SUSE-SU"/>
    <description>
    Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 68.9.0, Firefox &lt; 77, and Firefox ESR &lt; 68.9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12410/">CVE-2020-12410</cve>
	<bugzilla href="https://bugzilla.suse.com/1172402">SUSE bug 1172402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12415</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12415" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12415" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12415" ref_url="https://www.suse.com/security/cve/CVE-2020-12415" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1017-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html" source="SUSE-SU"/>
    <description>
    When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox &lt; 78.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-12415/">CVE-2020-12415</cve>
	<bugzilla href="https://bugzilla.suse.com/1173576">SUSE bug 1173576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174230">SUSE bug 1174230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12416</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12416" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12416" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12416" ref_url="https://www.suse.com/security/cve/CVE-2020-12416" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1017-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html" source="SUSE-SU"/>
    <description>
    A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox &lt; 78.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12416/">CVE-2020-12416</cve>
	<bugzilla href="https://bugzilla.suse.com/1173576">SUSE bug 1173576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174230">SUSE bug 1174230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12417</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12417" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12417" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12417" ref_url="https://www.suse.com/security/cve/CVE-2020-12417" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007122.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0967-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0982-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1017-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html" source="SUSE-SU"/>
    <description>
    Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitable crash. *Note: this issue only affects Firefox on ARM64 platforms.* This vulnerability affects Firefox ESR &lt; 68.10, Firefox &lt; 78, and Thunderbird &lt; 68.10.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12417/">CVE-2020-12417</cve>
	<bugzilla href="https://bugzilla.suse.com/1173576">SUSE bug 1173576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174230">SUSE bug 1174230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12418</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12418" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12418" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12418" ref_url="https://www.suse.com/security/cve/CVE-2020-12418" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007122.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0967-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0982-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1017-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html" source="SUSE-SU"/>
    <description>
    Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript. This vulnerability affects Firefox ESR &lt; 68.10, Firefox &lt; 78, and Thunderbird &lt; 68.10.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12418/">CVE-2020-12418</cve>
	<bugzilla href="https://bugzilla.suse.com/1173576">SUSE bug 1173576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174230">SUSE bug 1174230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12419</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12419" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12419" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12419" ref_url="https://www.suse.com/security/cve/CVE-2020-12419" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007122.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0967-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0982-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1017-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html" source="SUSE-SU"/>
    <description>
    When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR &lt; 68.10, Firefox &lt; 78, and Thunderbird &lt; 68.10.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12419/">CVE-2020-12419</cve>
	<bugzilla href="https://bugzilla.suse.com/1173576">SUSE bug 1173576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174230">SUSE bug 1174230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12420</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12420" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12420" ref_url="https://www.suse.com/security/cve/CVE-2020-12420" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007122.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0967-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0982-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1017-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html" source="SUSE-SU"/>
    <description>
    When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR &lt; 68.10, Firefox &lt; 78, and Thunderbird &lt; 68.10.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12420/">CVE-2020-12420</cve>
	<bugzilla href="https://bugzilla.suse.com/1173576">SUSE bug 1173576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174230">SUSE bug 1174230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12421</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12421" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12421" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12421" ref_url="https://www.suse.com/security/cve/CVE-2020-12421" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007122.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0967-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0982-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1017-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html" source="SUSE-SU"/>
    <description>
    When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator.) This could have caused add-ons to become out-of-date silently without notification to the user. This vulnerability affects Firefox ESR &lt; 68.10, Firefox &lt; 78, and Thunderbird &lt; 68.10.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-12421/">CVE-2020-12421</cve>
	<bugzilla href="https://bugzilla.suse.com/1173576">SUSE bug 1173576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174230">SUSE bug 1174230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12422</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12422" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12422" ref_url="https://www.suse.com/security/cve/CVE-2020-12422" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1017-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html" source="SUSE-SU"/>
    <description>
    In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox &lt; 78.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12422/">CVE-2020-12422</cve>
	<bugzilla href="https://bugzilla.suse.com/1173576">SUSE bug 1173576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174230">SUSE bug 1174230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12423</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12423" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12423" ref_url="https://www.suse.com/security/cve/CVE-2020-12423" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1017-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html" source="SUSE-SU"/>
    <description>
    When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox may have loaded the DLL, leading to arbitrary code execution. *Note: This issue only affects the Windows operating system; other operating systems are unaffected.* This vulnerability affects Firefox &lt; 78.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12423/">CVE-2020-12423</cve>
	<bugzilla href="https://bugzilla.suse.com/1173576">SUSE bug 1173576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174230">SUSE bug 1174230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12424</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12424" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12424" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12424" ref_url="https://www.suse.com/security/cve/CVE-2020-12424" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1017-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html" source="SUSE-SU"/>
    <description>
    When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox &lt; 78.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-12424/">CVE-2020-12424</cve>
	<bugzilla href="https://bugzilla.suse.com/1173576">SUSE bug 1173576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174230">SUSE bug 1174230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12425</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12425" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12425" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12425" ref_url="https://www.suse.com/security/cve/CVE-2020-12425" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1017-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html" source="SUSE-SU"/>
    <description>
    Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leading to potential information disclosure. This vulnerability affects Firefox &lt; 78.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12425/">CVE-2020-12425</cve>
	<bugzilla href="https://bugzilla.suse.com/1173576">SUSE bug 1173576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174230">SUSE bug 1174230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12426</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12426" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12426" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12426" ref_url="https://www.suse.com/security/cve/CVE-2020-12426" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1017-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members reported memory safety bugs present in Firefox 77. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox &lt; 78.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12426/">CVE-2020-12426</cve>
	<bugzilla href="https://bugzilla.suse.com/1173576">SUSE bug 1173576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174230">SUSE bug 1174230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012430" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12430</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12430" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12430" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12430" ref_url="https://www.suse.com/security/cve/CVE-2020-12430" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006819.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the domstats command, resulting in a potential denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12430/">CVE-2020-12430</cve>
	<bugzilla href="https://bugzilla.suse.com/1170765">SUSE bug 1170765</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12464</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12464" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12464" ref_url="https://www.suse.com/security/cve/CVE-2020-12464" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
    <description>
    usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="1.8/CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12464/">CVE-2020-12464</cve>
	<bugzilla href="https://bugzilla.suse.com/1170901">SUSE bug 1170901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012465" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12465</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12465" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12465" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12465" ref_url="https://www.suse.com/security/cve/CVE-2020-12465" source="SUSE CVE"/>
    <description>
    An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12465/">CVE-2020-12465</cve>
	<bugzilla href="https://bugzilla.suse.com/1170828">SUSE bug 1170828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170888">SUSE bug 1170888</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012603" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12603</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12603" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12603" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12603" ref_url="https://www.suse.com/security/cve/CVE-2020-12603" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:50-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:51-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008286.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WUFXLLYPEPLGLE3CNOENBUDET76YJXPI/" source="SUSE-SU"/>
    <description>
    Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when proxying HTTP/2 requests or responses with many small (i.e. 1 byte) data frames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12603/">CVE-2020-12603</cve>
	<bugzilla href="https://bugzilla.suse.com/1173559">SUSE bug 1173559</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670542" comment="envoy-proxy-1.14.6-bp153.3.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009670589" comment="envoy-proxy is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670543" comment="envoy-proxy-source-1.14.6-bp153.3.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009670590" comment="envoy-proxy-source is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012604" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12604</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12604" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12604" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12604" ref_url="https://www.suse.com/security/cve/CVE-2020-12604" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:50-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:51-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008286.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WUFXLLYPEPLGLE3CNOENBUDET76YJXPI/" source="SUSE-SU"/>
    <description>
    Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case where an HTTP/2 client requests a large payload but does not send enough window updates to consume the entire stream and does not reset the stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12604/">CVE-2020-12604</cve>
	<bugzilla href="https://bugzilla.suse.com/1173559">SUSE bug 1173559</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670542" comment="envoy-proxy-1.14.6-bp153.3.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009670589" comment="envoy-proxy is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670543" comment="envoy-proxy-source-1.14.6-bp153.3.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009670590" comment="envoy-proxy-source is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012605" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12605</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12605" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12605" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12605" ref_url="https://www.suse.com/security/cve/CVE-2020-12605" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:50-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:51-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008286.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WUFXLLYPEPLGLE3CNOENBUDET76YJXPI/" source="SUSE-SU"/>
    <description>
    Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when processing HTTP/1.1 headers with long field names or requests with long URLs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12605/">CVE-2020-12605</cve>
	<bugzilla href="https://bugzilla.suse.com/1173559">SUSE bug 1173559</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670542" comment="envoy-proxy-1.14.6-bp153.3.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009670589" comment="envoy-proxy is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670543" comment="envoy-proxy-source-1.14.6-bp153.3.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009670590" comment="envoy-proxy-source is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12641</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12641" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12641" ref_url="https://www.suse.com/security/cve/CVE-2020-12641" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1516-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3WUL4HE7A5MLE433XPBQYBUU6265EYNA/" source="SUSE-SU"/>
    <description>
    rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12641/">CVE-2020-12641</cve>
	<bugzilla href="https://bugzilla.suse.com/1171148">SUSE bug 1171148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175135">SUSE bug 1175135</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009718212" comment="roundcubemail-1.5.3-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152670" comment="roundcubemail is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12652</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12652" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12652" ref_url="https://www.suse.com/security/cve/CVE-2020-12652" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14393-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006913.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12652/">CVE-2020-12652</cve>
	<bugzilla href="https://bugzilla.suse.com/1171218">SUSE bug 1171218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012653" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12653</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12653" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12653" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14393-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006913.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
    <description>
    An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<bugzilla href="https://bugzilla.suse.com/1171195">SUSE bug 1171195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171254">SUSE bug 1171254</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12654</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12654" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14393-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006913.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
    <description>
    An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to trigger a heap-based buffer overflow because of an incorrect memcpy, aka CID-3a9b153c5591.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<bugzilla href="https://bugzilla.suse.com/1171202">SUSE bug 1171202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171252">SUSE bug 1171252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12655</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12655" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12655" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12655" ref_url="https://www.suse.com/security/cve/CVE-2020-12655" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3929-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/020993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009856.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12655/">CVE-2020-12655</cve>
	<bugzilla href="https://bugzilla.suse.com/1171217">SUSE bug 1171217</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012656" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12656</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12656" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12656" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12656" ref_url="https://www.suse.com/security/cve/CVE-2020-12656" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in the Linux kernel through 5.6.10 lacks certain domain_release calls, leading to a memory leak. Note: This was disputed with the assertion that the issue does not grant any access not already available. It is a problem that on unloading a specific kernel module some memory is leaked, but loading kernel modules is a privileged operation. A user could also write a kernel module to consume any amount of memory they like and load that replicating the effect of this bug.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12656/">CVE-2020-12656</cve>
	<bugzilla href="https://bugzilla.suse.com/1171219">SUSE bug 1171219</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012657" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12657</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12657" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12657" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12657" ref_url="https://www.suse.com/security/cve/CVE-2020-12657" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel before 5.6.5. There is a use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12657/">CVE-2020-12657</cve>
	<bugzilla href="https://bugzilla.suse.com/1171205">SUSE bug 1171205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201585">SUSE bug 1201585</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12659</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12659" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12659" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12659" ref_url="https://www.suse.com/security/cve/CVE-2020-12659" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12659/">CVE-2020-12659</cve>
	<bugzilla href="https://bugzilla.suse.com/1171214">SUSE bug 1171214</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012723" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12723</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12723" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12723" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12723" ref_url="https://www.suse.com/security/cve/CVE-2020-12723" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:314-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1682-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0850-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html" source="SUSE-SU"/>
    <description>
    regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12723/">CVE-2020-12723</cve>
	<bugzilla href="https://bugzilla.suse.com/1171866">SUSE bug 1171866</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628966" comment="perl-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628967" comment="perl-base-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628968" comment="perl-base-32bit-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153231" comment="perl-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628969" comment="perl-core-DB_File-5.26.1-15.87 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695544" comment="perl-core-DB_File is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12762</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12762" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12762" ref_url="https://www.suse.com/security/cve/CVE-2020-12762" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:314-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:504-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:80-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:28-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:29-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:31-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:36-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0184-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0184-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LS5Y2M6XDX2JOBPPLIMAXXAXRPAU65ND/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0184-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IDXGYZS2VAIBN2IO5VQRKJVJGNOKHZF7/" source="SUSE-SU"/>
    <description>
    json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12762/">CVE-2020-12762</cve>
	<bugzilla href="https://bugzilla.suse.com/1171479">SUSE bug 1171479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664148" comment="libjson-c-devel-0.13-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009664842" comment="libjson-c-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664259" comment="libjson-c-doc-0.13-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009664843" comment="libjson-c-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664149" comment="libjson-c3-0.13-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177189" comment="libjson-c3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664150" comment="libjson-c3-32bit-0.13-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177190" comment="libjson-c3-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12767</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12767" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12767" ref_url="https://www.suse.com/security/cve/CVE-2020-12767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007105.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html" source="SUSE-SU"/>
    <description>
    exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12767/">CVE-2020-12767</cve>
	<bugzilla href="https://bugzilla.suse.com/1171475">SUSE bug 1171475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629201" comment="libexif12-0.6.22-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12769</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12769" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12769" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12769" ref_url="https://www.suse.com/security/cve/CVE-2020-12769" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka CID-19b61392c5a8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12769/">CVE-2020-12769</cve>
	<bugzilla href="https://bugzilla.suse.com/1171983">SUSE bug 1171983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012770" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12770</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12770" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12770" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12770" ref_url="https://www.suse.com/security/cve/CVE-2020-12770" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:37-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009475.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3205-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3217-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-September/020289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3969-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009872.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010396.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3179-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UNTKFNNFNHHX5QOW7C4SZXLANXGXQCYJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3205-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AUF5M64CM26PNMNFO4R3S57DLRRNSTVG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3876-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JOIHHN3KQX7O34NG25NJOF7PFEZF2TVP/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12770/">CVE-2020-12770</cve>
	<bugzilla href="https://bugzilla.suse.com/1171420">SUSE bug 1171420</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633135" comment="cluster-md-kmp-64kb-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633191" comment="cluster-md-kmp-azure-5.3.18-38.22.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632945" comment="cluster-md-kmp-default-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633136" comment="cluster-md-kmp-preempt-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633137" comment="dlm-kmp-64kb-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633192" comment="dlm-kmp-azure-5.3.18-38.22.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632946" comment="dlm-kmp-default-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633138" comment="dlm-kmp-preempt-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633139" comment="dtb-al-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633140" comment="dtb-allwinner-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633141" comment="dtb-altera-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633142" comment="dtb-amd-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633143" comment="dtb-amlogic-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633144" comment="dtb-apm-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633145" comment="dtb-arm-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633146" comment="dtb-broadcom-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633147" comment="dtb-cavium-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633148" comment="dtb-exynos-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633149" comment="dtb-freescale-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633150" comment="dtb-hisilicon-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633151" comment="dtb-lg-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633152" comment="dtb-marvell-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633153" comment="dtb-mediatek-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633154" comment="dtb-nvidia-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633155" comment="dtb-qcom-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633156" comment="dtb-renesas-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633157" comment="dtb-rockchip-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633158" comment="dtb-socionext-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633159" comment="dtb-sprd-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633160" comment="dtb-xilinx-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633161" comment="dtb-zte-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633162" comment="gfs2-kmp-64kb-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633193" comment="gfs2-kmp-azure-5.3.18-38.22.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632947" comment="gfs2-kmp-default-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633163" comment="gfs2-kmp-preempt-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632922" comment="kernel-64kb-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632923" comment="kernel-64kb-devel-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633164" comment="kernel-64kb-extra-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633165" comment="kernel-64kb-livepatch-devel-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633166" comment="kernel-64kb-optional-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632940" comment="kernel-azure-5.3.18-38.22.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632941" comment="kernel-azure-devel-5.3.18-38.22.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633194" comment="kernel-azure-extra-5.3.18-38.22.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633195" comment="kernel-azure-livepatch-devel-5.3.18-38.22.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633196" comment="kernel-azure-optional-5.3.18-38.22.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633167" comment="kernel-debug-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658245" comment="kernel-debug-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633168" comment="kernel-debug-devel-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633169" comment="kernel-debug-livepatch-devel-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632924" comment="kernel-default-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632925" comment="kernel-default-base-5.3.18-59.24.1.18.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633170" comment="kernel-default-base-rebuild-5.3.18-59.24.1.18.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632926" comment="kernel-default-devel-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633171" comment="kernel-default-extra-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633172" comment="kernel-default-livepatch-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633173" comment="kernel-default-livepatch-devel-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658155" comment="kernel-default-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633174" comment="kernel-default-optional-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632927" comment="kernel-devel-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632942" comment="kernel-devel-azure-5.3.18-38.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632931" comment="kernel-docs-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633175" comment="kernel-docs-html-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633176" comment="kernel-kvmsmall-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658246" comment="kernel-kvmsmall-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633177" comment="kernel-kvmsmall-devel-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633178" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632928" comment="kernel-macros-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632932" comment="kernel-obs-build-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633179" comment="kernel-obs-qa-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632929" comment="kernel-preempt-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632933" comment="kernel-preempt-devel-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633180" comment="kernel-preempt-extra-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633181" comment="kernel-preempt-livepatch-devel-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633182" comment="kernel-preempt-optional-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632934" comment="kernel-source-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632943" comment="kernel-source-azure-5.3.18-38.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633183" comment="kernel-source-vanilla-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632935" comment="kernel-syms-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632944" comment="kernel-syms-azure-5.3.18-38.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658247" comment="kernel-vanilla-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658248" comment="kernel-vanilla-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658249" comment="kernel-vanilla-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658250" comment="kernel-vanilla-livepatch-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632930" comment="kernel-zfcpdump-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658251" comment="kernel-zfcpdump-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633184" comment="kselftests-kmp-64kb-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633197" comment="kselftests-kmp-azure-5.3.18-38.22.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633185" comment="kselftests-kmp-default-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633186" comment="kselftests-kmp-preempt-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633187" comment="ocfs2-kmp-64kb-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633198" comment="ocfs2-kmp-azure-5.3.18-38.22.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632948" comment="ocfs2-kmp-default-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633188" comment="ocfs2-kmp-preempt-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633189" comment="reiserfs-kmp-64kb-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633199" comment="reiserfs-kmp-azure-5.3.18-38.22.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632936" comment="reiserfs-kmp-default-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633190" comment="reiserfs-kmp-preempt-5.3.18-59.24.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12771</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12771" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12771" ref_url="https://www.suse.com/security/cve/CVE-2020-12771" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2152-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12771/">CVE-2020-12771</cve>
	<bugzilla href="https://bugzilla.suse.com/1171732">SUSE bug 1171732</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12801</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12801" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12801" ref_url="https://www.suse.com/security/cve/CVE-2020-12801" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006880.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00011.html" source="SUSE-SU"/>
    <description>
    If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the recovered document was not LibreOffice's default ODF file format, then affected versions of LibreOffice default that subsequent saves of the document are unencrypted. This may lead to a user accidentally saving a MSOffice file format document unencrypted while believing it to be encrypted. This issue affects: LibreOffice 6-3 series versions prior to 6.3.6; 6-4 series versions prior to 6.4.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12801/">CVE-2020-12801</cve>
	<bugzilla href="https://bugzilla.suse.com/1171997">SUSE bug 1171997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12802</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12802" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12802" ref_url="https://www.suse.com/security/cve/CVE-2020-12802" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007261.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007265.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007285.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00058.html" source="SUSE-SU"/>
    <description>
    LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where remote graphic links loaded from docx documents were omitted from this protection prior to version 6.4.4. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.9/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-12802/">CVE-2020-12802</cve>
	<bugzilla href="https://bugzilla.suse.com/1172796">SUSE bug 1172796</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12803</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12803" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12803" ref_url="https://www.suse.com/security/cve/CVE-2020-12803" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007261.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007265.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007285.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00058.html" source="SUSE-SU"/>
    <description>
    ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable forms, ODF implements the XForms W3C standard, which allows data to be submitted without the need for macros or other active scripting Prior to version 6.4.4 LibreOffice allowed forms to be submitted to any URI, including file: URIs, enabling form submissions to overwrite local files. User-interaction is required to submit the form, but to avoid the possibility of malicious documents engineered to maximize the possibility of inadvertent user submission this feature has now been limited to http[s] URIs, removing the possibility to overwrite local files. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12803/">CVE-2020-12803</cve>
	<bugzilla href="https://bugzilla.suse.com/1172795">SUSE bug 1172795</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630170" comment="libreoffice-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630171" comment="libreoffice-base-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630173" comment="libreoffice-branding-upstream-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630174" comment="libreoffice-calc-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630176" comment="libreoffice-draw-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630177" comment="libreoffice-filters-optional-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630180" comment="libreoffice-gnome-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630181" comment="libreoffice-gtk3-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630182" comment="libreoffice-icon-themes-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009176160" comment="libreoffice-icon-themes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630183" comment="libreoffice-impress-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630186" comment="libreoffice-l10n-ar-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630190" comment="libreoffice-l10n-bg-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630196" comment="libreoffice-l10n-bs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239722" comment="libreoffice-l10n-bs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630197" comment="libreoffice-l10n-ca-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630200" comment="libreoffice-l10n-cs-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630202" comment="libreoffice-l10n-da-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630203" comment="libreoffice-l10n-de-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630207" comment="libreoffice-l10n-el-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630208" comment="libreoffice-l10n-en-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630209" comment="libreoffice-l10n-en_GB-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239725" comment="libreoffice-l10n-en_GB is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630211" comment="libreoffice-l10n-eo-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171437" comment="libreoffice-l10n-eo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630212" comment="libreoffice-l10n-es-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630213" comment="libreoffice-l10n-et-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630215" comment="libreoffice-l10n-fa-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630216" comment="libreoffice-l10n-fi-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630217" comment="libreoffice-l10n-fr-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630229" comment="libreoffice-l10n-hu-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630230" comment="libreoffice-l10n-id-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239731" comment="libreoffice-l10n-id is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630232" comment="libreoffice-l10n-it-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630233" comment="libreoffice-l10n-ja-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630240" comment="libreoffice-l10n-ko-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630245" comment="libreoffice-l10n-lt-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630254" comment="libreoffice-l10n-nb-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630256" comment="libreoffice-l10n-nl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630264" comment="libreoffice-l10n-pl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630265" comment="libreoffice-l10n-pt_BR-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630268" comment="libreoffice-l10n-ru-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630275" comment="libreoffice-l10n-sk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630276" comment="libreoffice-l10n-sl-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630281" comment="libreoffice-l10n-sv-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630293" comment="libreoffice-l10n-uk-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630299" comment="libreoffice-l10n-zh_CN-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630300" comment="libreoffice-l10n-zh_TW-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630303" comment="libreoffice-mailmerge-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630304" comment="libreoffice-math-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630306" comment="libreoffice-pyuno-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630307" comment="libreoffice-qt5-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239761" comment="libreoffice-qt5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630310" comment="libreoffice-writer-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630312" comment="libreofficekit-7.1.2.2-2.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12823</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12823" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12823" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12823" ref_url="https://www.suse.com/security/cve/CVE-2020-12823" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1027-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00056.html" source="SUSE-SU"/>
    <description>
    OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certificate data to get_cert_name in gnutls.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12823/">CVE-2020-12823</cve>
	<bugzilla href="https://bugzilla.suse.com/1171862">SUSE bug 1171862</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630322" comment="openconnect-7.08-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151736" comment="openconnect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630325" comment="openconnect-lang-7.08-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177178" comment="openconnect-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12825</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12825" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12825" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12825" ref_url="https://www.suse.com/security/cve/CVE-2020-12825" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009654.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009674.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009454.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009452.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2909-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012482.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1294-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FYZZYH2MI4PFNRWE2NZ5CTA5TOHKDLPC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3123-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WG6EJIK3ZOQTMMMAGVUCMM2QCK7CQQ77/" source="SUSE-SU"/>
    <description>
    libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12825/">CVE-2020-12825</cve>
	<bugzilla href="https://bugzilla.suse.com/1171685">SUSE bug 1171685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203730">SUSE bug 1203730</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631871" comment="libcroco-0.6.13-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257312" comment="libcroco is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631872" comment="libcroco-0_6-3-0.6.13-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177260" comment="libcroco-0_6-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631873" comment="libcroco-0_6-3-32bit-0.6.13-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177261" comment="libcroco-0_6-3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631874" comment="libcroco-devel-0.6.13-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009257313" comment="libcroco-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012861" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12861</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12861" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12861" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12861" ref_url="https://www.suse.com/security/cve/CVE-2020-12861" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007683.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1791-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1798-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00003.html" source="SUSE-SU"/>
    <description>
    A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-080.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12861/">CVE-2020-12861</cve>
	<bugzilla href="https://bugzilla.suse.com/1172524">SUSE bug 1172524</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629222" comment="sane-backends-1.0.32-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154031" comment="sane-backends is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629223" comment="sane-backends-autoconfig-1.0.32-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154033" comment="sane-backends-autoconfig is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12862</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12862" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12862" ref_url="https://www.suse.com/security/cve/CVE-2020-12862" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007683.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1791-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1798-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00003.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-082.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12862/">CVE-2020-12862</cve>
	<bugzilla href="https://bugzilla.suse.com/1172524">SUSE bug 1172524</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629222" comment="sane-backends-1.0.32-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154031" comment="sane-backends is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629223" comment="sane-backends-autoconfig-1.0.32-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154033" comment="sane-backends-autoconfig is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12863</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12863" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12863" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12863" ref_url="https://www.suse.com/security/cve/CVE-2020-12863" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007683.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1791-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1798-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00003.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-083.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12863/">CVE-2020-12863</cve>
	<bugzilla href="https://bugzilla.suse.com/1172524">SUSE bug 1172524</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629222" comment="sane-backends-1.0.32-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154031" comment="sane-backends is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629223" comment="sane-backends-autoconfig-1.0.32-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154033" comment="sane-backends-autoconfig is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12864</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12864" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12864" ref_url="https://www.suse.com/security/cve/CVE-2020-12864" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007683.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1791-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1798-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00003.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-081.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12864/">CVE-2020-12864</cve>
	<bugzilla href="https://bugzilla.suse.com/1172524">SUSE bug 1172524</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629222" comment="sane-backends-1.0.32-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154031" comment="sane-backends is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629223" comment="sane-backends-autoconfig-1.0.32-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154033" comment="sane-backends-autoconfig is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012865" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12865</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12865" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12865" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12865" ref_url="https://www.suse.com/security/cve/CVE-2020-12865" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007683.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1791-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1798-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00003.html" source="SUSE-SU"/>
    <description>
    A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-084.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12865/">CVE-2020-12865</cve>
	<bugzilla href="https://bugzilla.suse.com/1172524">SUSE bug 1172524</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629222" comment="sane-backends-1.0.32-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154031" comment="sane-backends is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629223" comment="sane-backends-autoconfig-1.0.32-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154033" comment="sane-backends-autoconfig is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12866</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12866" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12866" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12866" ref_url="https://www.suse.com/security/cve/CVE-2020-12866" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007683.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1791-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1798-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00003.html" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12866/">CVE-2020-12866</cve>
	<bugzilla href="https://bugzilla.suse.com/1172524">SUSE bug 1172524</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629222" comment="sane-backends-1.0.32-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154031" comment="sane-backends is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629223" comment="sane-backends-autoconfig-1.0.32-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154033" comment="sane-backends-autoconfig is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12867</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12867" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12867" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12867" ref_url="https://www.suse.com/security/cve/CVE-2020-12867" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007683.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1791-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1798-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00003.html" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12867/">CVE-2020-12867</cve>
	<bugzilla href="https://bugzilla.suse.com/1172524">SUSE bug 1172524</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629222" comment="sane-backends-1.0.32-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154031" comment="sane-backends is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629223" comment="sane-backends-autoconfig-1.0.32-6.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154033" comment="sane-backends-autoconfig is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202012888" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-12888</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-12888" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12888" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-12888" ref_url="https://www.suse.com/security/cve/CVE-2020-12888" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12888/">CVE-2020-12888</cve>
	<bugzilla href="https://bugzilla.suse.com/1171868">SUSE bug 1171868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176979">SUSE bug 1176979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179612">SUSE bug 1179612</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13112</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13112" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13112" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13112" ref_url="https://www.suse.com/security/cve/CVE-2020-13112" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007105.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13112/">CVE-2020-13112</cve>
	<bugzilla href="https://bugzilla.suse.com/1172116">SUSE bug 1172116</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629201" comment="libexif12-0.6.22-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13113</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13113" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13113" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13113" ref_url="https://www.suse.com/security/cve/CVE-2020-13113" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007105.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13113/">CVE-2020-13113</cve>
	<bugzilla href="https://bugzilla.suse.com/1172105">SUSE bug 1172105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629201" comment="libexif12-0.6.22-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13114</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13114" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13114" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13114" ref_url="https://www.suse.com/security/cve/CVE-2020-13114" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007105.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13114/">CVE-2020-13114</cve>
	<bugzilla href="https://bugzilla.suse.com/1172121">SUSE bug 1172121</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629201" comment="libexif12-0.6.22-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13143</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13143" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13143" ref_url="https://www.suse.com/security/cve/CVE-2020-13143" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13143/">CVE-2020-13143</cve>
	<bugzilla href="https://bugzilla.suse.com/1171982">SUSE bug 1171982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13249</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13249" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13249" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13249" ref_url="https://www.suse.com/security/cve/CVE-2020-13249" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1423-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1431-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1711-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007915.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0870-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00054.html" source="SUSE-SU"/>
    <description>
    libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-13249/">CVE-2020-13249</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628792" comment="libmariadb3-3.1.12-3.25.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261766" comment="libmariadb3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013253" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13253</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13253" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13253" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13253" ref_url="https://www.suse.com/security/cve/CVE-2020-13253" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0210-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0210-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010251.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0210-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ORE7QLMZXD7OV3HIKQUG3SXU2RG6ONFC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0210-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IUV2UU2CMT6KXSJ7THBLFDIVHI27MZFH/" source="SUSE-SU"/>
    <description>
    sd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of-bounds read during sdhci_write() operations. A guest OS user can crash the QEMU process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13253/">CVE-2020-13253</cve>
	<bugzilla href="https://bugzilla.suse.com/1172033">SUSE bug 1172033</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664059" comment="qemu-s390-4.2.1-11.34.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013361" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13361</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13361" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13361" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13361" ref_url="https://www.suse.com/security/cve/CVE-2020-13361" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008671.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008673.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html" source="SUSE-SU"/>
    <description>
    In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13361/">CVE-2020-13361</cve>
	<bugzilla href="https://bugzilla.suse.com/1172384">SUSE bug 1172384</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13362</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13362" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13362" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13362" ref_url="https://www.suse.com/security/cve/CVE-2020-13362" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008671.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008673.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html" source="SUSE-SU"/>
    <description>
    In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13362/">CVE-2020-13362</cve>
	<bugzilla href="https://bugzilla.suse.com/1172383">SUSE bug 1172383</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13396</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13396" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13396" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13396" ref_url="https://www.suse.com/security/cve/CVE-2020-13396" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13396/">CVE-2020-13396</cve>
	<bugzilla href="https://bugzilla.suse.com/1171441">SUSE bug 1171441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013397" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13397</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13397" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13397" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13397" ref_url="https://www.suse.com/security/cve/CVE-2020-13397" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in security_fips_decrypt in libfreerdp/core/security.c due to an uninitialized value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-13397/">CVE-2020-13397</cve>
	<bugzilla href="https://bugzilla.suse.com/1171441">SUSE bug 1171441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013398" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13398</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13398" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13398" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13398" ref_url="https://www.suse.com/security/cve/CVE-2020-13398" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has been detected in crypto_rsa_common in libfreerdp/crypto/crypto.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2020-13398/">CVE-2020-13398</cve>
	<bugzilla href="https://bugzilla.suse.com/1171441">SUSE bug 1171441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013428" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13428</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13428" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13428" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13428" ref_url="https://www.suse.com/security/cve/CVE-2020-13428" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0076-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OD6C4CTIQTZF237437FPGD5AIRV33TET/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0091-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KIZQCEFFNAB3CPF433JKRUT3ZM2EDM33/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0121-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IYGQU4F6PPW4XHK4LTESKSQ2CPHZS3QW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0122-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YJCT5WYFJXXNRF5NSC7LOIHN7BD5UKVV/" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11 for macOS/iOS allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted H.264 Annex-B video (.avi for example) file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13428/">CVE-2020-13428</cve>
	<bugzilla href="https://bugzilla.suse.com/1172727">SUSE bug 1172727</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13429</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13429" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13429" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13429" ref_url="https://www.suse.com/security/cve/CVE-2020-13429" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009472.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1308-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CXHELI44TGNRVVE3N32KXRTYBU3O3F3H/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3175-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JN7UM2F5HQYAKPOO75CIJNTXDGDU6ZTJ/" source="SUSE-SU"/>
    <description>
    legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header (aka legend header) option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-13429/">CVE-2020-13429</cve>
	<bugzilla href="https://bugzilla.suse.com/1172125">SUSE bug 1172125</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633661" comment="grafana-piechart-panel-1.6.1-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291398" comment="grafana-piechart-panel is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13434</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13434" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13434" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13434" ref_url="https://www.suse.com/security/cve/CVE-2020-13434" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13434/">CVE-2020-13434</cve>
	<bugzilla href="https://bugzilla.suse.com/1172115">SUSE bug 1172115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13435</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13435" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13435" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13435" ref_url="https://www.suse.com/security/cve/CVE-2020-13435" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13435/">CVE-2020-13435</cve>
	<bugzilla href="https://bugzilla.suse.com/1172091">SUSE bug 1172091</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13529</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13529" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13529" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13529" ref_url="https://www.suse.com/security/cve/CVE-2020-13529" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:343-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010517.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010518.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010519.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010520.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:373-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009377.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:621-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009328.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2809-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PFXYBJHAFZNV57EZ4VL2LC446RMO7HVT/" source="SUSE-SU"/>
    <description>
    An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13529/">CVE-2020-13529</cve>
	<bugzilla href="https://bugzilla.suse.com/1185972">SUSE bug 1185972</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626216" comment="libsystemd0-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626217" comment="libsystemd0-32bit-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626218" comment="libudev-devel-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151690" comment="libudev-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626371" comment="libudev-devel-32bit-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239129" comment="libudev-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626219" comment="libudev1-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626220" comment="libudev1-32bit-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626372" comment="nss-myhostname-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152580" comment="nss-myhostname is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626373" comment="nss-myhostname-32bit-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152581" comment="nss-myhostname-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626374" comment="nss-mymachines-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154203" comment="nss-mymachines is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626375" comment="nss-mymachines-32bit-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239130" comment="nss-mymachines-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626376" comment="nss-resolve-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625971" comment="nss-resolve is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626377" comment="nss-systemd-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239131" comment="nss-systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626221" comment="systemd-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626222" comment="systemd-32bit-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626223" comment="systemd-container-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626224" comment="systemd-coredump-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239133" comment="systemd-coredump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626225" comment="systemd-devel-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152582" comment="systemd-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626226" comment="systemd-doc-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626227" comment="systemd-journal-remote-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625973" comment="systemd-journal-remote is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626228" comment="systemd-lang-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626378" comment="systemd-logger-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151696" comment="systemd-logger is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626379" comment="systemd-network-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625975" comment="systemd-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626229" comment="systemd-sysvinit-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626230" comment="udev-246.15-7.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13543</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13543" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13543" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13543" ref_url="https://www.suse.com/security/cve/CVE-2020-13543" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3867-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2304-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7IUIQR7TXEJAY36F5QQB7QCCGHWKYG7E/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2310-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GFB3TOJ4CYRIFTJV3HUC6V24BQQDJYA4/" source="SUSE-SU"/>
    <description>
    A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a webpage to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13543/">CVE-2020-13543</cve>
	<bugzilla href="https://bugzilla.suse.com/1179451">SUSE bug 1179451</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13558</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13558" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13558" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13558" ref_url="https://www.suse.com/security/cve/CVE-2020-13558" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0583-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0376-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/M3MQBA72WHEO5RZKASEJOENULHWKFOZY/" source="SUSE-SU"/>
    <description>
    A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13558/">CVE-2020-13558</cve>
	<bugzilla href="https://bugzilla.suse.com/1182286">SUSE bug 1182286</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013584" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13584</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13584" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13584" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13584" ref_url="https://www.suse.com/security/cve/CVE-2020-13584" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3867-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2304-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7IUIQR7TXEJAY36F5QQB7QCCGHWKYG7E/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2310-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GFB3TOJ4CYRIFTJV3HUC6V24BQQDJYA4/" source="SUSE-SU"/>
    <description>
    An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A specially crafted HTML web page can cause a use-after-free condition, resulting in a remote code execution. The victim needs to visit a malicious web site to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13584/">CVE-2020-13584</cve>
	<bugzilla href="https://bugzilla.suse.com/1179122">SUSE bug 1179122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179910">SUSE bug 1179910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179911">SUSE bug 1179911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179912">SUSE bug 1179912</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13630</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13630" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13630" ref_url="https://www.suse.com/security/cve/CVE-2020-13630" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13630/">CVE-2020-13630</cve>
	<bugzilla href="https://bugzilla.suse.com/1172234">SUSE bug 1172234</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013631" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13631</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13631" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13631" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13631" ref_url="https://www.suse.com/security/cve/CVE-2020-13631" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-13631/">CVE-2020-13631</cve>
	<bugzilla href="https://bugzilla.suse.com/1172236">SUSE bug 1172236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13632</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13632" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13632" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13632" ref_url="https://www.suse.com/security/cve/CVE-2020-13632" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13632/">CVE-2020-13632</cve>
	<bugzilla href="https://bugzilla.suse.com/1172240">SUSE bug 1172240</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13645</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13645" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13645" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13645" ref_url="https://www.suse.com/security/cve/CVE-2020-13645" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3944-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009879.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009886.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1094-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42QNVR5Y3Z3YQLA2G7H66ZAGRYHVNWHT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1554-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7ALNGEQGJBIVTIE7PVRV4LMX5VCNHFOZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3944-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3WJQDO7GLZV6KOOPFA2ZGLO6YGORWTRO/" source="SUSE-SU"/>
    <description>
    In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-13645/">CVE-2020-13645</cve>
	<bugzilla href="https://bugzilla.suse.com/1172460">SUSE bug 1172460</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628101" comment="balsa-2.6.1-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009289523" comment="balsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628102" comment="balsa-lang-2.6.1-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009289524" comment="balsa-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658878" comment="glib-networking-2.62.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659232" comment="glib-networking is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658914" comment="glib-networking-32bit-2.62.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659233" comment="glib-networking-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658879" comment="glib-networking-lang-2.62.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009659234" comment="glib-networking-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13659</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13659" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13659" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13659" ref_url="https://www.suse.com/security/cve/CVE-2020-13659" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008671.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html" source="SUSE-SU"/>
    <description>
    address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13659/">CVE-2020-13659</cve>
	<bugzilla href="https://bugzilla.suse.com/1172386">SUSE bug 1172386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13753</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13753" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13753" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13753" ref_url="https://www.suse.com/security/cve/CVE-2020-13753" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl. CLONE_NEWUSER could potentially be used to confuse xdg-desktop-portal, which allows access outside the sandbox. TIOCSTI can be used to directly execute commands outside the sandbox by writing to the controlling terminal's input buffer, similar to CVE-2017-5226.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-22"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13753/">CVE-2020-13753</cve>
	<bugzilla href="https://bugzilla.suse.com/1173998">SUSE bug 1173998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013757" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13757</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13757" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13757" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13757" ref_url="https://www.suse.com/security/cve/CVE-2020-13757" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:254-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:257-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012269.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0901-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/P3ME7Z7HY3RZGMZEXVYWABVMMLGMXE2S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2008-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V4YOO76ZUMWHQXJCEHC2KUOF54N5673X/" source="SUSE-SU"/>
    <description>
    Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-13757/">CVE-2020-13757</cve>
	<bugzilla href="https://bugzilla.suse.com/1172389">SUSE bug 1172389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497911" comment="python2-rsa-3.4.2-3.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479909" comment="python2-rsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494053" comment="python3-rsa-3.4.2-3.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479910" comment="python3-rsa is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13777</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13777" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13777" ref_url="https://www.suse.com/security/cve/CVE-2020-13777" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006939.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006910.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0790-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00015.html" source="SUSE-SU"/>
    <description>
    GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS server always uses wrong data in place of an encryption key derived from an application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-13777/">CVE-2020-13777</cve>
	<bugzilla href="https://bugzilla.suse.com/1172461">SUSE bug 1172461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172506">SUSE bug 1172506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628489" comment="gnutls-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628491" comment="libgnutls30-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177128" comment="libgnutls30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628492" comment="libgnutls30-32bit-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009235745" comment="libgnutls30-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13790</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13790" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13790" ref_url="https://www.suse.com/security/cve/CVE-2020-13790" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007380.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007379.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1413-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00062.html" source="SUSE-SU"/>
    <description>
    libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13790/">CVE-2020-13790</cve>
	<bugzilla href="https://bugzilla.suse.com/1172491">SUSE bug 1172491</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628779" comment="libjpeg8-8.1.2-5.15.7 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152543" comment="libjpeg8 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13800</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13800" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13800" ref_url="https://www.suse.com/security/cve/CVE-2020-13800" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007171.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html" source="SUSE-SU"/>
    <description>
    ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13800/">CVE-2020-13800</cve>
	<bugzilla href="https://bugzilla.suse.com/1172495">SUSE bug 1172495</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13844</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13844" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13844" ref_url="https://www.suse.com/security/cve/CVE-2020-13844" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007586.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007587.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:567-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:568-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007639.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007640.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007641.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007643.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007644.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:578-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:579-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007646.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007647.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007753.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007963.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2300-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/J4EOEHZ7Q27TTGN54YMFIIKDEJ5OS3SI/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2301-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OIESM64GYREKLMRLTSQUIOYAUT6QG6A2/" source="SUSE-SU"/>
    <description>
    Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-13844/">CVE-2020-13844</cve>
	<bugzilla href="https://bugzilla.suse.com/1172798">SUSE bug 1172798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628360" comment="cpp7-7.5.0+r278197-4.25.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009268648" comment="cpp7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628610" comment="libgcc_s1-10.2.1+git583-1.3.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152931" comment="libgcc_s1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628611" comment="libgcc_s1-32bit-10.2.1+git583-1.3.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152932" comment="libgcc_s1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628366" comment="libgfortran4-7.5.0+r278197-4.25.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009268669" comment="libgfortran4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628616" comment="libgomp1-10.2.1+git583-1.3.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152942" comment="libgomp1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628621" comment="libobjc4-10.2.1+git583-1.3.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152198" comment="libobjc4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628623" comment="libquadmath0-10.2.1+git583-1.3.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152956" comment="libquadmath0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628625" comment="libstdc++6-10.2.1+git583-1.3.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152962" comment="libstdc++6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628626" comment="libstdc++6-32bit-10.2.1+git583-1.3.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152963" comment="libstdc++6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628629" comment="libstdc++6-pp-gcc10-10.2.1+git583-1.3.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296112" comment="libstdc++6-pp-gcc10 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628630" comment="libstdc++6-pp-gcc10-32bit-10.2.1+git583-1.3.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296113" comment="libstdc++6-pp-gcc10-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013904" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13904</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13904" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13904" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13904" ref_url="https://www.suse.com/security/cve/CVE-2020-13904" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13904/">CVE-2020-13904</cve>
	<bugzilla href="https://bugzilla.suse.com/1172640">SUSE bug 1172640</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013936" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13936</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13936" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13936" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13936" ref_url="https://www.suse.com/security/cve/CVE-2020-13936" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3397-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012531.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0447-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/X7H6XAK2KQMJUKMVVIRDA5YQLUSPV5YO/" source="SUSE-SU"/>
    <description>
    An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity templates running Apache Velocity Engine versions up to 2.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-27"/>
	<updated date="2022-10-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13936/">CVE-2020-13936</cve>
	<bugzilla href="https://bugzilla.suse.com/1183360">SUSE bug 1183360</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710247" comment="snakeyaml-1.31-150200.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009477984" comment="snakeyaml is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710409" comment="snakeyaml-javadoc-1.31-150200.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009477985" comment="snakeyaml-javadoc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013950" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13950</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13950" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13950" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13950" ref_url="https://www.suse.com/security/cve/CVE-2020-13950" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2127-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0908-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F32WQ7K6A45WOBEDFMGMRXDC2F2SL3IF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2127-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KAQGPGA6ZQQT3VO5WOYFSSTZFH57MPWK/" source="SUSE-SU"/>
    <description>
    Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13950/">CVE-2020-13950</cve>
	<bugzilla href="https://bugzilla.suse.com/1187040">SUSE bug 1187040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494069" comment="apache2-2.4.43-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009499964" comment="apache2-devel-2.4.43-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009499965" comment="apache2-doc-2.4.43-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497924" comment="apache2-event-2.4.43-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153274" comment="apache2-event is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625323" comment="apache2-example-pages-2.4.43-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494070" comment="apache2-prefork-2.4.43-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494071" comment="apache2-utils-2.4.43-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009499966" comment="apache2-worker-2.4.43-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153275" comment="apache2-worker is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13962</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13962" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13962" ref_url="https://www.suse.com/security/cve/CVE-2020-13962" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007309.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails. (Mumble 1.3.1 is not affected, regardless of the Qt version.)
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13962/">CVE-2020-13962</cve>
	<bugzilla href="https://bugzilla.suse.com/1172726">SUSE bug 1172726</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628554" comment="libQt5Concurrent5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152276" comment="libQt5Concurrent5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628557" comment="libQt5Core5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152281" comment="libQt5Core5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628560" comment="libQt5DBus5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152286" comment="libQt5DBus5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628563" comment="libQt5Gui5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152297" comment="libQt5Gui5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628568" comment="libQt5Network5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152308" comment="libQt5Network5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628571" comment="libQt5OpenGL5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152316" comment="libQt5OpenGL5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628577" comment="libQt5PrintSupport5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152329" comment="libQt5PrintSupport5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628580" comment="libQt5Sql5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152341" comment="libQt5Sql5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629186" comment="libQt5Sql5-mysql-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152343" comment="libQt5Sql5-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628581" comment="libQt5Sql5-sqlite-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152347" comment="libQt5Sql5-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628584" comment="libQt5Test5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152356" comment="libQt5Test5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628587" comment="libQt5Widgets5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152380" comment="libQt5Widgets5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628589" comment="libQt5Xml5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152386" comment="libQt5Xml5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629189" comment="libqt5-qtbase-platformtheme-gtk3-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177209" comment="libqt5-qtbase-platformtheme-gtk3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13974</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13974" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13974" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13974" ref_url="https://www.suse.com/security/cve/CVE-2020-13974" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2152-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if k_ascii is called several times in a row, aka CID-b86dab054059. NOTE: Members in the community argue that the integer overflow does not lead to a security issue in this case.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13974/">CVE-2020-13974</cve>
	<bugzilla href="https://bugzilla.suse.com/1172775">SUSE bug 1172775</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013987" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13987</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13987" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13987" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13987" ref_url="https://www.suse.com/security/cve/CVE-2020-13987" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008407.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008619.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011912.html" source="SUSE-SU"/>
		<reference ref_id="TID000019813" ref_url="https://www.suse.com/support/kb/doc/?id=000019813" source="SUSE-SU"/>
    <description>
    An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-13987/">CVE-2020-13987</cve>
	<bugzilla href="https://bugzilla.suse.com/1179907">SUSE bug 1179907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179908">SUSE bug 1179908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193385">SUSE bug 1193385</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628520" comment="iscsiuio-0.7.8.6-30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474403" comment="iscsiuio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628521" comment="libopeniscsiusr0_2_0-2.1.4-30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474405" comment="libopeniscsiusr0_2_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628522" comment="open-iscsi-2.1.4-30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474407" comment="open-iscsi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13988</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13988" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13988" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13988" ref_url="https://www.suse.com/security/cve/CVE-2020-13988" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008407.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008619.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011912.html" source="SUSE-SU"/>
		<reference ref_id="TID000019813" ref_url="https://www.suse.com/support/kb/doc/?id=000019813" source="SUSE-SU"/>
    <description>
    An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uip_process in net/ipv4/uip.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13988/">CVE-2020-13988</cve>
	<bugzilla href="https://bugzilla.suse.com/1179907">SUSE bug 1179907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179908">SUSE bug 1179908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193385">SUSE bug 1193385</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628520" comment="iscsiuio-0.7.8.6-30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474403" comment="iscsiuio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628521" comment="libopeniscsiusr0_2_0-2.1.4-30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474405" comment="libopeniscsiusr0_2_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628522" comment="open-iscsi-2.1.4-30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474407" comment="open-iscsi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202013999" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-13999</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-13999" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13999" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-13999" ref_url="https://www.suse.com/security/cve/CVE-2020-13999" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012194.html" source="SUSE-SU"/>
    <description>
    ScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an integer overflow and denial of service via a crafted EMF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-09"/>
	<updated date="2022-09-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13999/">CVE-2020-13999</cve>
	<bugzilla href="https://bugzilla.suse.com/1173070">SUSE bug 1173070</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708081" comment="libEMF-devel-1.0.7-150000.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009285808" comment="libEMF-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708082" comment="libEMF-utils-1.0.7-150000.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009285809" comment="libEMF-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708083" comment="libEMF1-1.0.7-150000.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009285810" comment="libEMF1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14001</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14001" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14001" ref_url="https://www.suse.com/security/cve/CVE-2020-14001" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012214.html" source="SUSE-SU"/>
    <description>
    The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template="/etc/passwd") or unintended embedded Ruby code execution (such as a string that begins with template="string://&lt;%= `). NOTE: kramdown is used in Jekyll, GitLab Pages, GitHub Pages, and Thredded Forum.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-13"/>
	<updated date="2022-09-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14001/">CVE-2020-14001</cve>
	<bugzilla href="https://bugzilla.suse.com/1174297">SUSE bug 1174297</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710254" comment="ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710614" comment="ruby2.5-rubygem-kramdown is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710403" comment="ruby2.5-rubygem-kramdown-doc-1.15.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710615" comment="ruby2.5-rubygem-kramdown-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710404" comment="ruby2.5-rubygem-kramdown-testsuite-1.15.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710616" comment="ruby2.5-rubygem-kramdown-testsuite is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14155</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14155" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14155" ref_url="https://www.suse.com/security/cve/CVE-2020-14155" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009675.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009676.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:474-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009677.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:476-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-October/020654.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009718.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009758.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:514-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009759.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:138-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:343-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010517.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010518.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010519.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010520.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:373-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:52-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:55-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:56-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:80-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:83-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010107.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009689.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:750-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009690.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:28-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:29-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3529-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-October/020617.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3652-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009715.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1441-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ANBRV4PU5AWEEYUWZYBLJCQBG3AHEGD/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3529-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DOG6FED4Y3TBAFL2V2XUUC43MKZLFGH3/" source="SUSE-SU"/>
    <description>
    libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14155/">CVE-2020-14155</cve>
	<bugzilla href="https://bugzilla.suse.com/1172974">SUSE bug 1172974</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652864" comment="libpcre1-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652865" comment="libpcre1-32bit-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652866" comment="libpcre16-0-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652913" comment="libpcre16-0-32bit-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652867" comment="libpcrecpp0-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652868" comment="libpcrecpp0-32bit-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652869" comment="libpcreposix0-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652914" comment="libpcreposix0-32bit-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652870" comment="pcre-devel-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652915" comment="pcre-devel-static-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652916" comment="pcre-doc-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652871" comment="pcre-tools-8.45-20.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014303" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14303</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14303" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14303" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14303" ref_url="https://www.suse.com/security/cve/CVE-2020-14303" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007440.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0984-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14303/">CVE-2020-14303</cve>
	<bugzilla href="https://bugzilla.suse.com/1173359">SUSE bug 1173359</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014308" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14308</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14308" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14308" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14308" ref_url="https://www.suse.com/security/cve/CVE-2020-14308" source="SUSE CVE"/>
		<reference ref_id="BOOTHOLE-BLOG" ref_url="https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007199.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007200.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007198.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007197.html" source="SUSE-SU"/>
		<reference ref_id="TID000019673" ref_url="https://www.suse.com/support/kb/doc/?id=000019673" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1169-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html" source="SUSE-SU"/>
    <description>
    In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity, confidentiality and availability impacts during the boot process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14308/">CVE-2020-14308</cve>
	<bugzilla href="https://bugzilla.suse.com/1168994">SUSE bug 1168994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173812">SUSE bug 1173812</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628504" comment="grub2-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628505" comment="grub2-arm64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623763" comment="grub2-arm64-efi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628506" comment="grub2-i386-pc-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628507" comment="grub2-powerpc-ieee1275-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623765" comment="grub2-powerpc-ieee1275 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628509" comment="grub2-snapper-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628510" comment="grub2-systemd-sleep-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628511" comment="grub2-x86_64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14309</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14309" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14309" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14309" ref_url="https://www.suse.com/security/cve/CVE-2020-14309" source="SUSE CVE"/>
		<reference ref_id="BOOTHOLE-BLOG" ref_url="https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007199.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007200.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007198.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007197.html" source="SUSE-SU"/>
		<reference ref_id="TID000019673" ref_url="https://www.suse.com/support/kb/doc/?id=000019673" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1169-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html" source="SUSE-SU"/>
    <description>
    There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic overflow leading to a zero-size allocation further causing a heap-based buffer overflow with attacker controlled data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14309/">CVE-2020-14309</cve>
	<bugzilla href="https://bugzilla.suse.com/1168994">SUSE bug 1168994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173812">SUSE bug 1173812</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628504" comment="grub2-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628505" comment="grub2-arm64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623763" comment="grub2-arm64-efi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628506" comment="grub2-i386-pc-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628507" comment="grub2-powerpc-ieee1275-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623765" comment="grub2-powerpc-ieee1275 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628509" comment="grub2-snapper-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628510" comment="grub2-systemd-sleep-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628511" comment="grub2-x86_64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14310</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14310" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14310" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14310" ref_url="https://www.suse.com/security/cve/CVE-2020-14310" source="SUSE CVE"/>
		<reference ref_id="BOOTHOLE-BLOG" ref_url="https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007199.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007200.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007198.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007197.html" source="SUSE-SU"/>
		<reference ref_id="TID000019673" ref_url="https://www.suse.com/support/kb/doc/?id=000019673" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1169-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html" source="SUSE-SU"/>
    <description>
    There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1 length in bytes but it doesn't verify it before proceed with buffer allocation to read the value from the font value. An attacker may leverage that by crafting a malicious font file which has a name with UINT32_MAX, leading to read_section_as_string() to an arithmetic overflow, zero-sized allocation and further heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14310/">CVE-2020-14310</cve>
	<bugzilla href="https://bugzilla.suse.com/1168994">SUSE bug 1168994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173812">SUSE bug 1173812</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628504" comment="grub2-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628505" comment="grub2-arm64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623763" comment="grub2-arm64-efi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628506" comment="grub2-i386-pc-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628507" comment="grub2-powerpc-ieee1275-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623765" comment="grub2-powerpc-ieee1275 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628509" comment="grub2-snapper-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628510" comment="grub2-systemd-sleep-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628511" comment="grub2-x86_64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14311</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14311" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14311" ref_url="https://www.suse.com/security/cve/CVE-2020-14311" source="SUSE CVE"/>
		<reference ref_id="BOOTHOLE-BLOG" ref_url="https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007199.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007200.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007198.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007197.html" source="SUSE-SU"/>
		<reference ref_id="TID000019673" ref_url="https://www.suse.com/support/kb/doc/?id=000019673" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1169-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html" source="SUSE-SU"/>
    <description>
    There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14311/">CVE-2020-14311</cve>
	<bugzilla href="https://bugzilla.suse.com/1168994">SUSE bug 1168994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173812">SUSE bug 1173812</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628504" comment="grub2-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628505" comment="grub2-arm64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623763" comment="grub2-arm64-efi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628506" comment="grub2-i386-pc-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628507" comment="grub2-powerpc-ieee1275-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623765" comment="grub2-powerpc-ieee1275 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628509" comment="grub2-snapper-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628510" comment="grub2-systemd-sleep-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628511" comment="grub2-x86_64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14312</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14312" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14312" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14312" ref_url="https://www.suse.com/security/cve/CVE-2020-14312" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:36-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1426-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q5SXZU2UVUXVIVOLI6OT32WIQ6OJBE5E/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3530-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2DP73HQCB6UNPUB54KPOZEMBUQDVN6M6/" source="SUSE-SU"/>
    <description>
    A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queries from addresses outside of its local subnet. In particular, the option `local-service` is not enabled. Running dnsmasq in this manner may inadvertently make it an open resolver accessible from any address on the internet. This flaw allows an attacker to conduct a Distributed Denial of Service (DDoS) against other systems.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-15"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14312/">CVE-2020-14312</cve>
	<bugzilla href="https://bugzilla.suse.com/1173646">SUSE bug 1173646</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653308" comment="dnsmasq-2.86-7.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653374" comment="dnsmasq-utils-2.86-7.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153255" comment="dnsmasq-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014314" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14314</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14314" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14314" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14314" ref_url="https://www.suse.com/security/cve/CVE-2020-14314" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2485-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007348.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007374.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007381.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2576-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007393.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007405.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2610-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007408.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007419.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007426.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with broken indexing. This flaw allows a local user to crash the system if the directory exists. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14314/">CVE-2020-14314</cve>
	<bugzilla href="https://bugzilla.suse.com/1173798">SUSE bug 1173798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014318" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14318</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14318" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14318" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14318" ref_url="https://www.suse.com/security/cve/CVE-2020-14318" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007664.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007675.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007673.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008231.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1819-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00012.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14318/">CVE-2020-14318</cve>
	<bugzilla href="https://bugzilla.suse.com/1173902">SUSE bug 1173902</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014323" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14323</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14323" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14323" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14323" ref_url="https://www.suse.com/security/cve/CVE-2020-14323" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007664.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007675.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007673.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1819-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00012.html" source="SUSE-SU"/>
    <description>
    A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14323/">CVE-2020-14323</cve>
	<bugzilla href="https://bugzilla.suse.com/1173994">SUSE bug 1173994</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014330" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14330</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14330" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14330" ref_url="https://www.suse.com/security/cve/CVE-2020-14330" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri module. The highest threat from this vulnerability is to data confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14330/">CVE-2020-14330</cve>
	<bugzilla href="https://bugzilla.suse.com/1174145">SUSE bug 1174145</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014331" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14331</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14331" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14331" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007357.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2517-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2537-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007374.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007381.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2576-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007393.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007405.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2610-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007408.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007419.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007426.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the system, potentially escalating their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<bugzilla href="https://bugzilla.suse.com/1174205">SUSE bug 1174205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174247">SUSE bug 1174247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014332" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14332</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14332" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14332" ref_url="https://www.suse.com/security/cve/CVE-2020-14332" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Ansible Engine when using module_args. Tasks executed with check mode (--check-mode) do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14332/">CVE-2020-14332</cve>
	<bugzilla href="https://bugzilla.suse.com/1174302">SUSE bug 1174302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014339" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14339</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14339" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14339" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14339" ref_url="https://www.suse.com/security/cve/CVE-2020-14339" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007268.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007278.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00058.html" source="SUSE-SU"/>
    <description>
    A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of their standard permissions, potentially causing serious damage to the host operating system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14339/">CVE-2020-14339</cve>
	<bugzilla href="https://bugzilla.suse.com/1174458">SUSE bug 1174458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14342</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14342" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14342" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14342" ref_url="https://www.suse.com/security/cve/CVE-2020-14342" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007474.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008716.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1579-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00109.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0639-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/65NUX6IGI72XJIWLCF5QOKIKAWWJUMEY/" source="SUSE-SU"/>
    <description>
    It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14342/">CVE-2020-14342</cve>
	<bugzilla href="https://bugzilla.suse.com/1174477">SUSE bug 1174477</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628352" comment="cifs-utils-6.9-5.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151261" comment="cifs-utils is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014344" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14344</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14344" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14344" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14344" ref_url="https://www.suse.com/security/cve/CVE-2020-14344" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14445-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007226.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14447-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007247.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007222.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007253.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007252.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1164-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1198-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00031.html" source="SUSE-SU"/>
    <description>
    An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14344/">CVE-2020-14344</cve>
	<bugzilla href="https://bugzilla.suse.com/1174628">SUSE bug 1174628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174638">SUSE bug 1174638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175880">SUSE bug 1175880</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628593" comment="libX11-6-1.6.5-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151817" comment="libX11-6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628595" comment="libX11-data-1.6.5-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151819" comment="libX11-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628597" comment="libX11-xcb1-1.6.5-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151821" comment="libX11-xcb1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14345</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14345" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14345" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14345" ref_url="https://www.suse.com/security/cve/CVE-2020-14345" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007302.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007305.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00075.html" source="SUSE-SU"/>
    <description>
    A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14345/">CVE-2020-14345</cve>
	<bugzilla href="https://bugzilla.suse.com/1174635">SUSE bug 1174635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174638">SUSE bug 1174638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174908">SUSE bug 1174908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174910">SUSE bug 1174910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174913">SUSE bug 1174913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177596">SUSE bug 1177596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181067">SUSE bug 1181067</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629053" comment="xorg-x11-server-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629054" comment="xorg-x11-server-extra-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684245" comment="xorg-x11-server-wayland-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177168" comment="xorg-x11-server-wayland is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014346" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14346</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14346" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14346" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14346" ref_url="https://www.suse.com/security/cve/CVE-2020-14346" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007302.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007305.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00075.html" source="SUSE-SU"/>
    <description>
    A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14346/">CVE-2020-14346</cve>
	<bugzilla href="https://bugzilla.suse.com/1174635">SUSE bug 1174635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174638">SUSE bug 1174638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174910">SUSE bug 1174910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174913">SUSE bug 1174913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629053" comment="xorg-x11-server-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629054" comment="xorg-x11-server-extra-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684245" comment="xorg-x11-server-wayland-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177168" comment="xorg-x11-server-wayland is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014347" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14347</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14347" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14347" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14347" ref_url="https://www.suse.com/security/cve/CVE-2020-14347" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007302.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007305.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00075.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14347/">CVE-2020-14347</cve>
	<bugzilla href="https://bugzilla.suse.com/1174633">SUSE bug 1174633</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629053" comment="xorg-x11-server-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629054" comment="xorg-x11-server-extra-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684245" comment="xorg-x11-server-wayland-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177168" comment="xorg-x11-server-wayland is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14351</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14351" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14351" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14351" ref_url="https://www.suse.com/security/cve/CVE-2020-14351" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007748.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007842.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1906-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W7MTGDUP74HR4XORTRYN7I7MANTKWCGQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2112-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14351/">CVE-2020-14351</cve>
	<bugzilla href="https://bugzilla.suse.com/1177086">SUSE bug 1177086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14355</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14355" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14355" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14355" ref_url="https://www.suse.com/security/cve/CVE-2020-14355" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3070-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007651.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3071-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3085-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007662.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1902-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019243.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1905-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019242.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008978.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008998.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1803-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messages that, when processed by the QUIC image compression algorithm, result in a process crash or potential code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14355/">CVE-2020-14355</cve>
	<bugzilla href="https://bugzilla.suse.com/1177158">SUSE bug 1177158</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628871" comment="libspice-client-glib-2_0-8-0.38-1.59 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151753" comment="libspice-client-glib-2_0-8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628872" comment="libspice-client-glib-helper-0.38-1.59 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154105" comment="libspice-client-glib-helper is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628873" comment="libspice-client-gtk-3_0-5-0.38-1.59 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161282" comment="libspice-client-gtk-3_0-5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629866" comment="libspice-server1-0.14.3-1.48 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629986" comment="typelib-1_0-SpiceClientGlib-2_0-0.38-1.59 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151758" comment="typelib-1_0-SpiceClientGlib-2_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629987" comment="typelib-1_0-SpiceClientGtk-3_0-0.38-1.59 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151759" comment="typelib-1_0-SpiceClientGtk-3_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014356" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14356</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14356" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14356" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14356" ref_url="https://www.suse.com/security/cve/CVE-2020-14356" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2485-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007348.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007374.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007381.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007405.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2610-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007408.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007419.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007426.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way when reboot the system. A local user could use this flaw to crash the system or escalate their privileges on the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14356/">CVE-2020-14356</cve>
	<bugzilla href="https://bugzilla.suse.com/1175213">SUSE bug 1175213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176392">SUSE bug 1176392</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014360" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14360</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14360" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14360" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14360" ref_url="https://www.suse.com/security/cve/CVE-2020-14360" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007898.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3586-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3588-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007896.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3589-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007897.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2147-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HP4SY5GPVDDNTXYVZ6YALLHT7B5RVDBJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LJUVPABDGLSKQJMNPJUJBYOQTIDGD67K/" source="SUSE-SU"/>
    <description>
    A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the XkbSetMap function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14360/">CVE-2020-14360</cve>
	<bugzilla href="https://bugzilla.suse.com/1174908">SUSE bug 1174908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177596">SUSE bug 1177596</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629053" comment="xorg-x11-server-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629054" comment="xorg-x11-server-extra-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684245" comment="xorg-x11-server-wayland-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177168" comment="xorg-x11-server-wayland is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014361" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14361</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14361" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14361" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14361" ref_url="https://www.suse.com/security/cve/CVE-2020-14361" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007320.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2399-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007319.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007349.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1376-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00014.html" source="SUSE-SU"/>
    <description>
    A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14361/">CVE-2020-14361</cve>
	<bugzilla href="https://bugzilla.suse.com/1174635">SUSE bug 1174635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174638">SUSE bug 1174638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174910">SUSE bug 1174910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174913">SUSE bug 1174913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629053" comment="xorg-x11-server-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629054" comment="xorg-x11-server-extra-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684245" comment="xorg-x11-server-wayland-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177168" comment="xorg-x11-server-wayland is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14362</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14362" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14362" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14362" ref_url="https://www.suse.com/security/cve/CVE-2020-14362" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007320.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2399-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007319.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007349.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1376-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00014.html" source="SUSE-SU"/>
    <description>
    A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14362/">CVE-2020-14362</cve>
	<bugzilla href="https://bugzilla.suse.com/1174635">SUSE bug 1174635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174638">SUSE bug 1174638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174910">SUSE bug 1174910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174913">SUSE bug 1174913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629053" comment="xorg-x11-server-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629054" comment="xorg-x11-server-extra-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684245" comment="xorg-x11-server-wayland-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177168" comment="xorg-x11-server-wayland is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14363</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14363" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14363" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14363" ref_url="https://www.suse.com/security/cve/CVE-2020-14363" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2474-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007343.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2474-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2475-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007895.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00018.html" source="SUSE-SU"/>
    <description>
    An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application compiled with libX11 to crash, or in some cases, result in arbitrary code execution. The highest threat from this flaw is to confidentiality, integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14363/">CVE-2020-14363</cve>
	<bugzilla href="https://bugzilla.suse.com/1175239">SUSE bug 1175239</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628593" comment="libX11-6-1.6.5-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151817" comment="libX11-6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628595" comment="libX11-data-1.6.5-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151819" comment="libX11-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628597" comment="libX11-xcb1-1.6.5-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151821" comment="libX11-xcb1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14364</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14364" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14364" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14364" ref_url="https://www.suse.com/security/cve/CVE-2020-14364" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007511.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2877-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007532.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008671.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008673.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008910.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008916.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1894-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1895-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1942-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008990.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1043-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1942-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEKBDJBTGKO53MSKM3SRYVUQDWIJ2N5I/" source="SUSE-SU"/>
    <description>
    An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14364/">CVE-2020-14364</cve>
	<bugzilla href="https://bugzilla.suse.com/1175441">SUSE bug 1175441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175534">SUSE bug 1175534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176494">SUSE bug 1176494</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177130">SUSE bug 1177130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695666" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695667" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625288" comment="qemu-audio-alsa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625289" comment="qemu-audio-pa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695668" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695669" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625291" comment="qemu-block-dmg-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625292" comment="qemu-block-gluster-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500107" comment="qemu-block-iscsi-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625293" comment="qemu-block-nfs-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695670" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695671" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500110" comment="qemu-chardev-baum-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695672" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625295" comment="qemu-extra-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695673" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695674" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695675" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695676" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695677" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625300" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695678" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695679" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695680" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625303" comment="qemu-ivshmem-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695681" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500121" comment="qemu-kvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500122" comment="qemu-lang-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695682" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695683" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625305" comment="qemu-s390x-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695684" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695685" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500127" comment="qemu-skiboot-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695686" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695687" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695688" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695689" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695690" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695691" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695692" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625310" comment="qemu-vhost-user-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695693" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014367" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14367</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14367" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14367" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14367" ref_url="https://www.suse.com/security/cve/CVE-2020-14367" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010472.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010473.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:314-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010512.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010513.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010514.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010515.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010526.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010528.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:363-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010529.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:364-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010530.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010531.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010532.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:370-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010534.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:376-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010538.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010635.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010639.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010640.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:504-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:485-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010440.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0845-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010756.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0845-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GIUHNUKYNY5JRZHWXP7NXCJOMX4HEQMQ/" source="SUSE-SU"/>
    <description>
    A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created during chronyd startup while still running as the root user, and when it's opened for writing, chronyd does not check for an existing symbolic link with the same file name. This flaw allows an attacker with privileged access to create a symlink with the default PID file name pointing to any destination file in the system, resulting in data loss and a denial of service due to the path traversal.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14367/">CVE-2020-14367</cve>
	<bugzilla href="https://bugzilla.suse.com/1174911">SUSE bug 1174911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670461" comment="chrony-4.1-150300.16.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177182" comment="chrony is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670462" comment="chrony-pool-empty-4.1-150300.16.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673483" comment="chrony-pool-empty is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670587" comment="chrony-pool-openSUSE-4.1-150300.16.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673484" comment="chrony-pool-openSUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670463" comment="chrony-pool-suse-4.1-150300.16.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673485" comment="chrony-pool-suse is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14370</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14370" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14370" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14370" ref_url="https://www.suse.com/security/cve/CVE-2020-14370" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:357-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-March/022067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:358-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-March/022068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3378-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007809.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:23018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010347.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012287.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2039-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4AHS44MM5VJQEFYSAEM4XLRKSPLU53H7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2063-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WEYG3UZ6PAJGRLA4U75IIT2HGWDPPZWR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:23018-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5BA2TLW7O5ZURGQUAQUH4HD5SQYNDDZ6/" source="SUSE-SU"/>
    <description>
    An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are created in a short duration, the environment variables from the first container will get leaked into subsequent containers. An attacker who has control over the subsequent containers could use this flaw to gain access to sensitive information stored in such variables.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14370/">CVE-2020-14370</cve>
	<bugzilla href="https://bugzilla.suse.com/1176804">SUSE bug 1176804</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669747" comment="conmon-2.0.30-150300.8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009280795" comment="conmon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669744" comment="libcontainers-common-20210626-150300.8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266789" comment="libcontainers-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669745" comment="libseccomp-devel-2.5.3-150300.10.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267594" comment="libseccomp-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669860" comment="libseccomp-tools-2.5.3-150300.10.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267595" comment="libseccomp-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669746" comment="libseccomp2-2.5.3-150300.10.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267596" comment="libseccomp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669861" comment="libseccomp2-32bit-2.5.3-150300.10.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267597" comment="libseccomp2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669748" comment="podman-3.4.4-150300.9.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266791" comment="podman is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669749" comment="podman-cni-config-3.4.4-150300.9.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266792" comment="podman-cni-config is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14372</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14372" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14372" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14372" ref_url="https://www.suse.com/security/cve/CVE-2020-14372" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0681-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008423.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14659-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-March/018162.html" source="SUSE-SU"/>
		<reference ref_id="TID000019892" ref_url="https://www.suse.com/support/kb/doc/?id=000019892" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0462-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XXPYL42MSKRB4D7LRFMW7PBGGLKSJKPS/" source="SUSE-SU"/>
    <description>
    A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table (SSDT) containing code to overwrite the Linux kernel lockdown variable content directly into memory. The table is further loaded and executed by the kernel, defeating its Secure Boot lockdown and allowing the attacker to load unsigned code. The highest threat from this vulnerability is to data confidentiality and integrity, as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14372/">CVE-2020-14372</cve>
	<bugzilla href="https://bugzilla.suse.com/1175970">SUSE bug 1175970</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628504" comment="grub2-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628505" comment="grub2-arm64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623763" comment="grub2-arm64-efi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628506" comment="grub2-i386-pc-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628507" comment="grub2-powerpc-ieee1275-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623765" comment="grub2-powerpc-ieee1275 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628509" comment="grub2-snapper-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628510" comment="grub2-systemd-sleep-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628511" comment="grub2-x86_64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14382</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14382" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14382" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14382" ref_url="https://www.suse.com/security/cve/CVE-2020-14382" source="SUSE CVE"/>
    <description>
    A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container. The bug is in segments validation code in file 'lib/luks2/luks2_json_metadata.c' in function hdr_validate_segments(struct crypt_device *cd, json_object *hdr_jobj) where the code does not check for possible overflow on memory allocation used for intervals array (see statement "intervals = malloc(first_backup * sizeof(*intervals));"). Due to the bug, library can be *tricked* to expect such allocation was successful but for far less memory then originally expected. Later it may read data FROM image crafted by an attacker and actually write such data BEYOND allocated memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14382/">CVE-2020-14382</cve>
	<bugzilla href="https://bugzilla.suse.com/1176128">SUSE bug 1176128</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628375" comment="cryptsetup-2.3.4-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009664267" comment="cryptsetup is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628376" comment="cryptsetup-lang-2.3.4-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009664268" comment="cryptsetup-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628378" comment="libcryptsetup12-2.3.4-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009664270" comment="libcryptsetup12 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14383</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14383" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14383" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14383" ref_url="https://www.suse.com/security/cve/CVE-2020-14383" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007664.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007675.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007673.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008231.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1819-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00012.html" source="SUSE-SU"/>
    <description>
    A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again as soon as it returns. The Samba DNS server itself will continue to operate, but many RPC services will not.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14383/">CVE-2020-14383</cve>
	<bugzilla href="https://bugzilla.suse.com/1177613">SUSE bug 1177613</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14385</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14385" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14385" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14385" ref_url="https://www.suse.com/security/cve/CVE-2020-14385" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2908-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007551.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1586-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leading to a denial of service. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14385/">CVE-2020-14385</cve>
	<bugzilla href="https://bugzilla.suse.com/1176137">SUSE bug 1176137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14386</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14386" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14386" ref_url="https://www.suse.com/security/cve/CVE-2020-14386" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007381.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2576-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007386.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2578-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007389.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2579-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007385.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007387.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007393.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2610-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007408.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007419.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007712.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007708.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3210-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3225-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-November/016787.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14386/">CVE-2020-14386</cve>
	<bugzilla href="https://bugzilla.suse.com/1176069">SUSE bug 1176069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176072">SUSE bug 1176072</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14390</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14390" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14390" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14390" ref_url="https://www.suse.com/security/cve/CVE-2020-14390" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007544.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007545.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2908-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1586-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux kernel in versions before 5.9-rc6. When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14390/">CVE-2020-14390</cve>
	<bugzilla href="https://bugzilla.suse.com/1176235">SUSE bug 1176235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176253">SUSE bug 1176253</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176278">SUSE bug 1176278</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014397" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14397</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14397" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14397" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14397" ref_url="https://www.suse.com/security/cve/CVE-2020-14397" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1922-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2167-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007241.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14397/">CVE-2020-14397</cve>
	<bugzilla href="https://bugzilla.suse.com/1173477">SUSE bug 1173477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173700">SUSE bug 1173700</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014398" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14398</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14398" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14398" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14398" ref_url="https://www.suse.com/security/cve/CVE-2020-14398" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1922-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2167-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007241.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14398/">CVE-2020-14398</cve>
	<bugzilla href="https://bugzilla.suse.com/1173477">SUSE bug 1173477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173880">SUSE bug 1173880</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14399</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14399" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14399" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14399" ref_url="https://www.suse.com/security/cve/CVE-2020-14399" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1922-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2167-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007241.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boundary crossed."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14399/">CVE-2020-14399</cve>
	<bugzilla href="https://bugzilla.suse.com/1173477">SUSE bug 1173477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173743">SUSE bug 1173743</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014400" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14400</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14400" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14400" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14400" ref_url="https://www.suse.com/security/cve/CVE-2020-14400" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1922-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2167-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007241.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no known path of exploitation or cross of a trust boundary.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14400/">CVE-2020-14400</cve>
	<bugzilla href="https://bugzilla.suse.com/1173477">SUSE bug 1173477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173691">SUSE bug 1173691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14401</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14401" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14401" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14401" ref_url="https://www.suse.com/security/cve/CVE-2020-14401" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1922-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2167-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007241.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14401/">CVE-2020-14401</cve>
	<bugzilla href="https://bugzilla.suse.com/1173477">SUSE bug 1173477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173694">SUSE bug 1173694</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14402</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14402" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14402" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14402" ref_url="https://www.suse.com/security/cve/CVE-2020-14402" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1922-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2167-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007241.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds access via encodings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14402/">CVE-2020-14402</cve>
	<bugzilla href="https://bugzilla.suse.com/1173477">SUSE bug 1173477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173701">SUSE bug 1173701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014409" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14409</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14409" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14409" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14409" ref_url="https://www.suse.com/security/cve/CVE-2020-14409" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0104-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14943-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010802.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0104-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GCAJV7QU7NXYUTY7OMBOV6LAES2X326R/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0104-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LG2DES77OYKEDNAIOARFYYX34EY75ACT/" source="SUSE-SU"/>
    <description>
    SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-04"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14409/">CVE-2020-14409</cve>
	<bugzilla href="https://bugzilla.suse.com/1181202">SUSE bug 1181202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200204">SUSE bug 1200204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679467" comment="libSDL-1_2-0-1.2.15-150000.3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251318" comment="libSDL-1_2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679575" comment="libSDL-1_2-0-32bit-1.2.15-150000.3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251319" comment="libSDL-1_2-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679468" comment="libSDL-devel-1.2.15-150000.3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251320" comment="libSDL-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679576" comment="libSDL-devel-32bit-1.2.15-150000.3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251321" comment="libSDL-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663285" comment="libSDL2-2_0-0-2.0.8-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663287" comment="libSDL2-2_0-0-32bit-2.0.8-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166228" comment="libSDL2-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663286" comment="libSDL2-devel-2.0.8-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166230" comment="libSDL2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663449" comment="libSDL2-devel-32bit-2.0.8-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166232" comment="libSDL2-devel-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14410</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14410" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14410" ref_url="https://www.suse.com/security/cve/CVE-2020-14410" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0104-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14943-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010802.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0104-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GCAJV7QU7NXYUTY7OMBOV6LAES2X326R/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0104-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LG2DES77OYKEDNAIOARFYYX34EY75ACT/" source="SUSE-SU"/>
    <description>
    SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-04"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14410/">CVE-2020-14410</cve>
	<bugzilla href="https://bugzilla.suse.com/1181201">SUSE bug 1181201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200204">SUSE bug 1200204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679467" comment="libSDL-1_2-0-1.2.15-150000.3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251318" comment="libSDL-1_2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679575" comment="libSDL-1_2-0-32bit-1.2.15-150000.3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251319" comment="libSDL-1_2-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679468" comment="libSDL-devel-1.2.15-150000.3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251320" comment="libSDL-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679576" comment="libSDL-devel-32bit-1.2.15-150000.3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251321" comment="libSDL-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663285" comment="libSDL2-2_0-0-2.0.8-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663287" comment="libSDL2-2_0-0-32bit-2.0.8-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166228" comment="libSDL2-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663286" comment="libSDL2-devel-2.0.8-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166230" comment="libSDL2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663449" comment="libSDL2-devel-32bit-2.0.8-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166232" comment="libSDL2-devel-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14416</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14416" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14416" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14416" ref_url="https://www.suse.com/security/cve/CVE-2020-14416" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2152-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    In the Linux kernel before 5.4.16, a race condition in tty-&gt;disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14416/">CVE-2020-14416</cve>
	<bugzilla href="https://bugzilla.suse.com/1162002">SUSE bug 1162002</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14422</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14422" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14422" ref_url="https://www.suse.com/security/cve/CVE-2020-14422" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1939-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2157-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007239.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007892.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008118.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0931-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0940-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1002-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2332-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S3JTHM6LLDKL7VPNRJUSRPNZAD2FZ25H/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2333-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FLGERALYYFTBIX3ZKPM6EQ2WJVUXLOXY/" source="SUSE-SU"/>
    <description>
    Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface objects, and this attacker can cause many dictionary entries to be created. This is fixed in: v3.5.10, v3.5.10rc1; v3.6.12; v3.7.9; v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1; v3.9.0, v3.9.0b4, v3.9.0b5, v3.9.0rc1, v3.9.0rc2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14422/">CVE-2020-14422</cve>
	<bugzilla href="https://bugzilla.suse.com/1173274">SUSE bug 1173274</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14424</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14424" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14424" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14424" ref_url="https://www.suse.com/security/cve/CVE-2020-14424" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:1190-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JBZLNMUSFBOJOEX22NOPCJOWBJDHPBAA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1208-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2NZJSSIG6ZIT5F2CRYU4MLRUHPBV6XTL/" source="SUSE-SU"/>
    <description>
    Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14424/">CVE-2020-14424</cve>
	<bugzilla href="https://bugzilla.suse.com/1188188">SUSE bug 1188188</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631820" comment="cacti-1.2.18-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152167" comment="cacti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631821" comment="cacti-spine-1.2.18-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153174" comment="cacti-spine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14556</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14556" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14556" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14556" ref_url="https://www.suse.com/security/cve/CVE-2020-14556" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007336.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007338.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1191-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DJAO3FCIU7U6QFGCFQBWQ7AIAFG7CCLZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2083-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWRVFCOMHOVFD7QH66A4H74YOLORU4TF/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14556/">CVE-2020-14556</cve>
	<bugzilla href="https://bugzilla.suse.com/1174157">SUSE bug 1174157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175259">SUSE bug 1175259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14562</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14562" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14562" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14562" ref_url="https://www.suse.com/security/cve/CVE-2020-14562" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007229.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1191-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00027.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14562/">CVE-2020-14562</cve>
	<bugzilla href="https://bugzilla.suse.com/1174157">SUSE bug 1174157</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14573</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14573" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14573" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14573" ref_url="https://www.suse.com/security/cve/CVE-2020-14573" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007229.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1191-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00027.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14573/">CVE-2020-14573</cve>
	<bugzilla href="https://bugzilla.suse.com/1174157">SUSE bug 1174157</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14577</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14577" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14577" ref_url="https://www.suse.com/security/cve/CVE-2020-14577" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007336.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007338.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007347.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1191-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DJAO3FCIU7U6QFGCFQBWQ7AIAFG7CCLZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2083-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWRVFCOMHOVFD7QH66A4H74YOLORU4TF/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14577/">CVE-2020-14577</cve>
	<bugzilla href="https://bugzilla.suse.com/1174157">SUSE bug 1174157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175259">SUSE bug 1175259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014581" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14581</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14581" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14581" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14581" ref_url="https://www.suse.com/security/cve/CVE-2020-14581" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007336.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007338.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1191-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DJAO3FCIU7U6QFGCFQBWQ7AIAFG7CCLZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2083-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWRVFCOMHOVFD7QH66A4H74YOLORU4TF/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14581/">CVE-2020-14581</cve>
	<bugzilla href="https://bugzilla.suse.com/1174157">SUSE bug 1174157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175259">SUSE bug 1175259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14583</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14583" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14583" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14583" ref_url="https://www.suse.com/security/cve/CVE-2020-14583" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007336.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007338.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007347.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1191-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DJAO3FCIU7U6QFGCFQBWQ7AIAFG7CCLZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2083-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWRVFCOMHOVFD7QH66A4H74YOLORU4TF/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14583/">CVE-2020-14583</cve>
	<bugzilla href="https://bugzilla.suse.com/1174157">SUSE bug 1174157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175259">SUSE bug 1175259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14593</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14593" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14593" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14593" ref_url="https://www.suse.com/security/cve/CVE-2020-14593" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007336.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007338.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007347.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1191-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DJAO3FCIU7U6QFGCFQBWQ7AIAFG7CCLZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2083-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWRVFCOMHOVFD7QH66A4H74YOLORU4TF/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-14593/">CVE-2020-14593</cve>
	<bugzilla href="https://bugzilla.suse.com/1174157">SUSE bug 1174157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175259">SUSE bug 1175259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14621</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14621" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14621" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14621" ref_url="https://www.suse.com/security/cve/CVE-2020-14621" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007336.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007338.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007347.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1191-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DJAO3FCIU7U6QFGCFQBWQ7AIAFG7CCLZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2083-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWRVFCOMHOVFD7QH66A4H74YOLORU4TF/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14621/">CVE-2020-14621</cve>
	<bugzilla href="https://bugzilla.suse.com/1174157">SUSE bug 1174157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175259">SUSE bug 1175259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014628" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14628</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14628" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14628" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14628" ref_url="https://www.suse.com/security/cve/CVE-2020-14628" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Note: The CVE-2020-14628 is applicable to Windows VM only. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14628/">CVE-2020-14628</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14629</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14629" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14629" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14629" ref_url="https://www.suse.com/security/cve/CVE-2020-14629" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14629/">CVE-2020-14629</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14646</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14646" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14646" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14646" ref_url="https://www.suse.com/security/cve/CVE-2020-14646" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14646/">CVE-2020-14646</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014647" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14647</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14647" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14647" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14647" ref_url="https://www.suse.com/security/cve/CVE-2020-14647" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14647/">CVE-2020-14647</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14648</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14648" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14648" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14648" ref_url="https://www.suse.com/security/cve/CVE-2020-14648" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14648/">CVE-2020-14648</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014649" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14649</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14649" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14649" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14649" ref_url="https://www.suse.com/security/cve/CVE-2020-14649" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14649/">CVE-2020-14649</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14650</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14650" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14650" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14650" ref_url="https://www.suse.com/security/cve/CVE-2020-14650" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14650/">CVE-2020-14650</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14673</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14673" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14673" ref_url="https://www.suse.com/security/cve/CVE-2020-14673" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14673/">CVE-2020-14673</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14674</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14674" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14674" ref_url="https://www.suse.com/security/cve/CVE-2020-14674" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14674/">CVE-2020-14674</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14675</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14675" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14675" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14675" ref_url="https://www.suse.com/security/cve/CVE-2020-14675" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14675/">CVE-2020-14675</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14676</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14676" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14676" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14676" ref_url="https://www.suse.com/security/cve/CVE-2020-14676" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14676/">CVE-2020-14676</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014677" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14677</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14677" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14677" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14677" ref_url="https://www.suse.com/security/cve/CVE-2020-14677" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14677/">CVE-2020-14677</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14694</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14694" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14694" ref_url="https://www.suse.com/security/cve/CVE-2020-14694" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14694/">CVE-2020-14694</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14695</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14695" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14695" ref_url="https://www.suse.com/security/cve/CVE-2020-14695" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14695/">CVE-2020-14695</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14698</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14698" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14698" ref_url="https://www.suse.com/security/cve/CVE-2020-14698" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14698/">CVE-2020-14698</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14699</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14699" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14699" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14699" ref_url="https://www.suse.com/security/cve/CVE-2020-14699" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14699/">CVE-2020-14699</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014700" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14700</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14700" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14700" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14700" ref_url="https://www.suse.com/security/cve/CVE-2020-14700" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14700/">CVE-2020-14700</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014703" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14703</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14703" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14703" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14703" ref_url="https://www.suse.com/security/cve/CVE-2020-14703" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14703/">CVE-2020-14703</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14704</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14704" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14704" ref_url="https://www.suse.com/security/cve/CVE-2020-14704" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14704/">CVE-2020-14704</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14707</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14707" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14707" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14707" ref_url="https://www.suse.com/security/cve/CVE-2020-14707" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 5.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14707/">CVE-2020-14707</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14711</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14711" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14711" ref_url="https://www.suse.com/security/cve/CVE-2020-14711" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Note: The CVE-2020-14711 is applicable to macOS host only. CVSS 3.1 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14711/">CVE-2020-14711</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14712</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14712" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14712" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14712" ref_url="https://www.suse.com/security/cve/CVE-2020-14712" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 5.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-14712/">CVE-2020-14712</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14713</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14713" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14713" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14713" ref_url="https://www.suse.com/security/cve/CVE-2020-14713" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14713/">CVE-2020-14713</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014714" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14714</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14714" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14714" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14714" ref_url="https://www.suse.com/security/cve/CVE-2020-14714" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14714/">CVE-2020-14714</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014715" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14715</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14715" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14715" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14715" ref_url="https://www.suse.com/security/cve/CVE-2020-14715" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14715/">CVE-2020-14715</cve>
	<bugzilla href="https://bugzilla.suse.com/1174159">SUSE bug 1174159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1472</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1472" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1472" ref_url="https://www.suse.com/security/cve/CVE-2020-1472" source="SUSE CVE"/>
		<reference ref_id="BLOG-ZEROLOGON" ref_url="https://www.suse.com/c/suse-addresses-zerologon-vulnerability/" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007464.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2720-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007468.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007469.html" source="SUSE-SU"/>
		<reference ref_id="TID000019713" ref_url="https://www.suse.com/support/kb/doc/?id=000019713" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00086.html" source="SUSE-SU"/>
    <description>
    An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC), aka 'Netlogon Elevation of Privilege Vulnerability'.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-17"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1472/">CVE-2020-1472</cve>
	<bugzilla href="https://bugzilla.suse.com/1176579">SUSE bug 1176579</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628655" comment="libdcerpc-binding0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628656" comment="libdcerpc-binding0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628660" comment="libdcerpc0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628661" comment="libdcerpc0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628664" comment="libndr-krb5pac0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628665" comment="libndr-krb5pac0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628667" comment="libndr-nbt0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628668" comment="libndr-nbt0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628670" comment="libndr-standard0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628671" comment="libndr-standard0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628672" comment="libndr1-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628673" comment="libndr1-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628675" comment="libnetapi0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628676" comment="libnetapi0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628678" comment="libsamba-credentials0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628679" comment="libsamba-credentials0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628681" comment="libsamba-errors0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628682" comment="libsamba-errors0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628684" comment="libsamba-hostconfig0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628685" comment="libsamba-hostconfig0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628687" comment="libsamba-passdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628688" comment="libsamba-passdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628691" comment="libsamba-policy0-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628693" comment="libsamba-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628694" comment="libsamba-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628696" comment="libsamdb0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628697" comment="libsamdb0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628699" comment="libsmbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628701" comment="libsmbconf0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628702" comment="libsmbconf0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628704" comment="libsmbldap2-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628705" comment="libsmbldap2-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628707" comment="libtevent-util0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628708" comment="libtevent-util0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628710" comment="libwbclient0-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628711" comment="libwbclient0-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628712" comment="samba-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628714" comment="samba-client-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694847" comment="samba-client-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628717" comment="samba-libs-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628718" comment="samba-libs-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628719" comment="samba-libs-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628720" comment="samba-python3-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628721" comment="samba-winbind-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628722" comment="samba-winbind-32bit-4.13.4+git.187.5ad4708741a-1.34 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729187" comment="sca-patterns-base-1.5.0-150300.10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729422" comment="sca-patterns-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729188" comment="sca-patterns-hae-1.5.1-150300.10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729423" comment="sca-patterns-hae is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729189" comment="sca-patterns-sle11-1.5.1-150300.18.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623504" comment="sca-patterns-sle11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729190" comment="sca-patterns-sle12-1.5.1-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729424" comment="sca-patterns-sle12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729191" comment="sca-patterns-sle15-1.5.1-150300.14.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729425" comment="sca-patterns-sle15 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729192" comment="sca-patterns-suma-1.5.0-150300.9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729426" comment="sca-patterns-suma is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729193" comment="sca-server-report-1.5.1-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729427" comment="sca-server-report is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14765</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14765" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14765" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14765" ref_url="https://www.suse.com/security/cve/CVE-2020-14765" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007843.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3564-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007915.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2090-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEA5NKMLBRO6JL3F3JJPI23H6KZ5L7P2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2149-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HTXANMDMHA454FKDXGYDWZBZF7VFHZXR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2254-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QJBILMORHJAJO5BNYHFTZJVMAIQQRB6P/" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14765/">CVE-2020-14765</cve>
	<bugzilla href="https://bugzilla.suse.com/1178428">SUSE bug 1178428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14776</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14776" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14776" ref_url="https://www.suse.com/security/cve/CVE-2020-14776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007843.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3564-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007915.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2090-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEA5NKMLBRO6JL3F3JJPI23H6KZ5L7P2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2149-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HTXANMDMHA454FKDXGYDWZBZF7VFHZXR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2254-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QJBILMORHJAJO5BNYHFTZJVMAIQQRB6P/" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14776/">CVE-2020-14776</cve>
	<bugzilla href="https://bugzilla.suse.com/1178428">SUSE bug 1178428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14779</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14779" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14779" ref_url="https://www.suse.com/security/cve/CVE-2020-14779" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008107.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14588-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0019-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008155.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1984-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JSWTDWV5MMTZOHS5HIFMSHB3IUNUEUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1994-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y5I3H5OR336ZSCD3OKSPETQ54YCFESWA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DJAO3FCIU7U6QFGCFQBWQ7AIAFG7CCLZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2083-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWRVFCOMHOVFD7QH66A4H74YOLORU4TF/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14779/">CVE-2020-14779</cve>
	<bugzilla href="https://bugzilla.suse.com/1177943">SUSE bug 1177943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180063">SUSE bug 1180063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14781</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14781" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14781" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14781" ref_url="https://www.suse.com/security/cve/CVE-2020-14781" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008107.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14588-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0019-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008155.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1984-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JSWTDWV5MMTZOHS5HIFMSHB3IUNUEUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1994-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y5I3H5OR336ZSCD3OKSPETQ54YCFESWA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DJAO3FCIU7U6QFGCFQBWQ7AIAFG7CCLZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2083-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWRVFCOMHOVFD7QH66A4H74YOLORU4TF/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14781/">CVE-2020-14781</cve>
	<bugzilla href="https://bugzilla.suse.com/1177943">SUSE bug 1177943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180063">SUSE bug 1180063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14782</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14782" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14782" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14782" ref_url="https://www.suse.com/security/cve/CVE-2020-14782" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008107.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14588-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0019-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008133.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1984-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JSWTDWV5MMTZOHS5HIFMSHB3IUNUEUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1994-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y5I3H5OR336ZSCD3OKSPETQ54YCFESWA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DJAO3FCIU7U6QFGCFQBWQ7AIAFG7CCLZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2083-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWRVFCOMHOVFD7QH66A4H74YOLORU4TF/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14782/">CVE-2020-14782</cve>
	<bugzilla href="https://bugzilla.suse.com/1177943">SUSE bug 1177943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180063">SUSE bug 1180063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14789</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14789" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14789" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14789" ref_url="https://www.suse.com/security/cve/CVE-2020-14789" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007843.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3564-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007915.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2090-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEA5NKMLBRO6JL3F3JJPI23H6KZ5L7P2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2149-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HTXANMDMHA454FKDXGYDWZBZF7VFHZXR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2254-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QJBILMORHJAJO5BNYHFTZJVMAIQQRB6P/" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14789/">CVE-2020-14789</cve>
	<bugzilla href="https://bugzilla.suse.com/1178428">SUSE bug 1178428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14792</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14792" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14792" ref_url="https://www.suse.com/security/cve/CVE-2020-14792" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008107.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14588-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0019-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008155.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1984-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JSWTDWV5MMTZOHS5HIFMSHB3IUNUEUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1994-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y5I3H5OR336ZSCD3OKSPETQ54YCFESWA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DJAO3FCIU7U6QFGCFQBWQ7AIAFG7CCLZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2083-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWRVFCOMHOVFD7QH66A4H74YOLORU4TF/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14792/">CVE-2020-14792</cve>
	<bugzilla href="https://bugzilla.suse.com/1177943">SUSE bug 1177943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180063">SUSE bug 1180063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014796" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14796</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14796" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14796" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14796" ref_url="https://www.suse.com/security/cve/CVE-2020-14796" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008107.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14588-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0019-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008155.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1984-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JSWTDWV5MMTZOHS5HIFMSHB3IUNUEUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1994-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y5I3H5OR336ZSCD3OKSPETQ54YCFESWA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DJAO3FCIU7U6QFGCFQBWQ7AIAFG7CCLZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2083-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWRVFCOMHOVFD7QH66A4H74YOLORU4TF/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14796/">CVE-2020-14796</cve>
	<bugzilla href="https://bugzilla.suse.com/1177943">SUSE bug 1177943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180063">SUSE bug 1180063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14797</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14797" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14797" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14797" ref_url="https://www.suse.com/security/cve/CVE-2020-14797" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008107.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14588-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0019-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008155.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1984-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JSWTDWV5MMTZOHS5HIFMSHB3IUNUEUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1994-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y5I3H5OR336ZSCD3OKSPETQ54YCFESWA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DJAO3FCIU7U6QFGCFQBWQ7AIAFG7CCLZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2083-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWRVFCOMHOVFD7QH66A4H74YOLORU4TF/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14797/">CVE-2020-14797</cve>
	<bugzilla href="https://bugzilla.suse.com/1177943">SUSE bug 1177943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180063">SUSE bug 1180063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14798</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14798" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14798" ref_url="https://www.suse.com/security/cve/CVE-2020-14798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008107.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14588-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0019-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008155.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1984-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JSWTDWV5MMTZOHS5HIFMSHB3IUNUEUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1994-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y5I3H5OR336ZSCD3OKSPETQ54YCFESWA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DJAO3FCIU7U6QFGCFQBWQ7AIAFG7CCLZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2083-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWRVFCOMHOVFD7QH66A4H74YOLORU4TF/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14798/">CVE-2020-14798</cve>
	<bugzilla href="https://bugzilla.suse.com/1177943">SUSE bug 1177943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180063">SUSE bug 1180063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14803</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14803" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14803" ref_url="https://www.suse.com/security/cve/CVE-2020-14803" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008107.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14588-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0019-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008155.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0533-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0652-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008394.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008405.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14634-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008347.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008363.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1984-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JSWTDWV5MMTZOHS5HIFMSHB3IUNUEUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1994-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y5I3H5OR336ZSCD3OKSPETQ54YCFESWA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DJAO3FCIU7U6QFGCFQBWQ7AIAFG7CCLZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2083-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWRVFCOMHOVFD7QH66A4H74YOLORU4TF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0374-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IE6Q2IB2YXUXIWFBPF2P2FIHVNJLBUPC/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14803/">CVE-2020-14803</cve>
	<bugzilla href="https://bugzilla.suse.com/1177943">SUSE bug 1177943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181239">SUSE bug 1181239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182186">SUSE bug 1182186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14812</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14812" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14812" ref_url="https://www.suse.com/security/cve/CVE-2020-14812" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007843.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3564-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007915.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2090-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEA5NKMLBRO6JL3F3JJPI23H6KZ5L7P2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2149-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HTXANMDMHA454FKDXGYDWZBZF7VFHZXR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2254-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QJBILMORHJAJO5BNYHFTZJVMAIQQRB6P/" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14812/">CVE-2020-14812</cve>
	<bugzilla href="https://bugzilla.suse.com/1178428">SUSE bug 1178428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202014928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-14928</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-14928" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14928" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-14928" ref_url="https://www.suse.com/security/cve/CVE-2020-14928" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0885-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008554.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0482-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/I3CUVYOHJVMCTZXIKRZXRNXLROM7HCFQ/" source="SUSE-SU"/>
    <description>
    evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14928/">CVE-2020-14928</cve>
	<bugzilla href="https://bugzilla.suse.com/1173910">SUSE bug 1173910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630123" comment="evolution-data-server-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348193" comment="evolution-data-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630125" comment="evolution-data-server-lang-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348196" comment="evolution-data-server-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630126" comment="libcamel-1_2-62-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348199" comment="libcamel-1_2-62 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630127" comment="libebackend-1_2-10-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348201" comment="libebackend-1_2-10 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630128" comment="libebook-1_2-20-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348203" comment="libebook-1_2-20 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630129" comment="libebook-contacts-1_2-3-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348205" comment="libebook-contacts-1_2-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630130" comment="libecal-2_0-1-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348207" comment="libecal-2_0-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630131" comment="libedata-book-1_2-26-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348209" comment="libedata-book-1_2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630132" comment="libedata-cal-2_0-1-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348211" comment="libedata-cal-2_0-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630133" comment="libedataserver-1_2-24-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348213" comment="libedataserver-1_2-24 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630134" comment="libedataserverui-1_2-2-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348215" comment="libedataserverui-1_2-2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15078</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15078" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15078" ref_url="https://www.suse.com/security/cve/CVE-2020-15078" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008765.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1576-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008761.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008762.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0734-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C5VK3H4AGK4ZRCLIB2D3IB7SS5RI4AZK/" source="SUSE-SU"/>
    <description>
    OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-15078/">CVE-2020-15078</cve>
	<bugzilla href="https://bugzilla.suse.com/1185279">SUSE bug 1185279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694906" comment="openvpn-2.4.3-5.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152221" comment="openvpn is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15103</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15103" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15103" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15103" ref_url="https://www.suse.com/security/cve/CVE-2020-15103" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2409-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007322.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00010.html" source="SUSE-SU"/>
    <description>
    In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affected. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data that will crash the client later on (invalid length arguments to a `memcpy`) This has been fixed in 2.2.0. As a workaround, stop using command line arguments /gfx, /gfx-h264 and /network:auto
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15103/">CVE-2020-15103</cve>
	<bugzilla href="https://bugzilla.suse.com/1174321">SUSE bug 1174321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15157</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15157" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15157" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15157" ref_url="https://www.suse.com/security/cve/CVE-2020-15157" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:357-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-March/022067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:358-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-March/022068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0445-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:23018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010347.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012287.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:23018-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5BA2TLW7O5ZURGQUAQUH4HD5SQYNDDZ6/" source="SUSE-SU"/>
    <description>
    In containerd (an industry-standard container runtime) before version 1.2.14 there is a credential leaking vulnerability. If a container image manifest in the OCI Image format or Docker Image V2 Schema 2 format includes a URL for the location of a specific image layer (otherwise known as a “foreign layer”), the default containerd resolver will follow that URL to attempt to download it. In v1.2.x but not 1.3.0 or later, the default containerd resolver will provide its authentication credentials if the server where the URL is located presents an HTTP 401 status code along with registry-specific HTTP headers. If an attacker publishes a public image with a manifest that directs one of the layers to be fetched from a web server they control and they trick a user or system into pulling the image, they can obtain the credentials used for pulling that image. In some cases, this may be the user's username and password for the registry. In other cases, this may be the credentials attached to the cloud virtual instance which can grant access to other cloud resources in the account. The default containerd resolver is used by the cri-containerd plugin (which can be used by Kubernetes), the ctr development tool, and other client programs that have explicitly linked against it. This vulnerability has been fixed in containerd 1.2.14. containerd 1.3 and later are not affected. If you are using containerd 1.3 or later, you are not affected. If you are using cri-containerd in the 1.2 series or prior, you should ensure you only pull images from trusted sources. Other container runtimes built on top of containerd but not using the default resolver (such as Docker) are not affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-15157/">CVE-2020-15157</cve>
	<bugzilla href="https://bugzilla.suse.com/1177598">SUSE bug 1177598</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669747" comment="conmon-2.0.30-150300.8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009280795" comment="conmon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669744" comment="libcontainers-common-20210626-150300.8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266789" comment="libcontainers-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669745" comment="libseccomp-devel-2.5.3-150300.10.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267594" comment="libseccomp-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669860" comment="libseccomp-tools-2.5.3-150300.10.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267595" comment="libseccomp-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669746" comment="libseccomp2-2.5.3-150300.10.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267596" comment="libseccomp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669861" comment="libseccomp2-32bit-2.5.3-150300.10.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267597" comment="libseccomp2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669748" comment="podman-3.4.4-150300.9.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266791" comment="podman is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669749" comment="podman-cni-config-3.4.4-150300.9.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266792" comment="podman-cni-config is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15180</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15180" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15180" ref_url="https://www.suse.com/security/cve/CVE-2020-15180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007843.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3564-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007915.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2090-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEA5NKMLBRO6JL3F3JJPI23H6KZ5L7P2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2149-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HTXANMDMHA454FKDXGYDWZBZF7VFHZXR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2254-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QJBILMORHJAJO5BNYHFTZJVMAIQQRB6P/" source="SUSE-SU"/>
    <description>
    A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and availability. This flaw affects mariadb versions before 10.1.47, before 10.2.34, before 10.3.25, before 10.4.15 and before 10.5.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15180/">CVE-2020-15180</cve>
	<bugzilla href="https://bugzilla.suse.com/1177472">SUSE bug 1177472</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15304</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15304" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15304" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15304" ref_url="https://www.suse.com/security/cve/CVE-2020-15304" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0970-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00048.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file could cause invalid memory access in TiledInputFile::TiledInputFile() in IlmImf/ImfTiledInputFile.cpp, as demonstrated by a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-15304/">CVE-2020-15304</cve>
	<bugzilla href="https://bugzilla.suse.com/1173466">SUSE bug 1173466</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015305" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15305</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15305" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15305" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15305" ref_url="https://www.suse.com/security/cve/CVE-2020-15305" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0970-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00048.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in DeepScanLineInputFile::DeepScanLineInputFile() in IlmImf/ImfDeepScanLineInputFile.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15305/">CVE-2020-15305</cve>
	<bugzilla href="https://bugzilla.suse.com/1173467">SUSE bug 1173467</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015306" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15306</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15306" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15306" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15306" ref_url="https://www.suse.com/security/cve/CVE-2020-15306" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0970-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00048.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize() in IlmImf/ImfMisc.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15306/">CVE-2020-15306</cve>
	<bugzilla href="https://bugzilla.suse.com/1173469">SUSE bug 1173469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015358" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15358</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15358" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15358" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15358" ref_url="https://www.suse.com/security/cve/CVE-2020-15358" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-15358/">CVE-2020-15358</cve>
	<bugzilla href="https://bugzilla.suse.com/1173641">SUSE bug 1173641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15389</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15389" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15389" ref_url="https://www.suse.com/security/cve/CVE-2020-15389" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010666.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010791.html" source="SUSE-SU"/>
    <description>
    jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opj_image_destroy twice.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-15389/">CVE-2020-15389</cve>
	<bugzilla href="https://bugzilla.suse.com/1173578">SUSE bug 1173578</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677917" comment="libopenjp2-7-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678643" comment="libopenjp2-7-32bit-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679714" comment="libopenjpeg1-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679751" comment="libopenjpeg1-32bit-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153809" comment="libopenjpeg1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679752" comment="openjpeg-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153810" comment="openjpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679715" comment="openjpeg-devel-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153811" comment="openjpeg-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679753" comment="openjpeg-devel-32bit-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153812" comment="openjpeg-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677918" comment="openjpeg2-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677919" comment="openjpeg2-devel-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15393</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15393" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15393" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15393" ref_url="https://www.suse.com/security/cve/CVE-2020-15393" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011942.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    In the Linux kernel 4.4 through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15393/">CVE-2020-15393</cve>
	<bugzilla href="https://bugzilla.suse.com/1173514">SUSE bug 1173514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15436</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15436" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15436" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15436" ref_url="https://www.suse.com/security/cve/CVE-2020-15436" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007937.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007978.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2161-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ICEKZTGIQ6MSKDFOTIOJ2RLWAWJFPSYA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2193-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4YRSQJNKLIOJJTD3P2UKMHRFMCIG3JDN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2260-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZYES3O2NEKKQXQ3R5CZOH5YCWJ3TJSKH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15436/">CVE-2020-15436</cve>
	<bugzilla href="https://bugzilla.suse.com/1179141">SUSE bug 1179141</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15437</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15437" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15437" ref_url="https://www.suse.com/security/cve/CVE-2020-15437" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007937.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3714-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-December/017242.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007938.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007978.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2161-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ICEKZTGIQ6MSKDFOTIOJ2RLWAWJFPSYA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2193-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4YRSQJNKLIOJJTD3P2UKMHRFMCIG3JDN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2260-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZYES3O2NEKKQXQ3R5CZOH5YCWJ3TJSKH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:serial8250_isa_init_ports() that allows local users to cause a denial of service by using the p-&gt;serial_in pointer which uninitialized.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15437/">CVE-2020-15437</cve>
	<bugzilla href="https://bugzilla.suse.com/1179140">SUSE bug 1179140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15503</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15503" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15503" ref_url="https://www.suse.com/security/cve/CVE-2020-15503" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2028-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2029-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007173.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1088-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00001.html" source="SUSE-SU"/>
    <description>
    LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example, malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs without validating T.tlength.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-15503/">CVE-2020-15503</cve>
	<bugzilla href="https://bugzilla.suse.com/1173674">SUSE bug 1173674</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694877" comment="libraw16-0.18.9-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177187" comment="libraw16 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15522</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15522" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15522" ref_url="https://www.suse.com/security/cve/CVE-2020-15522" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0940-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WSUJOEQHX6WIC7O7EQMIAET7L3ZTQKGM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2163-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XW6YD6VRTKZILPJP3QZQB6MFPZKOQLU6/" source="SUSE-SU"/>
    <description>
    Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-15522/">CVE-2020-15522</cve>
	<bugzilla href="https://bugzilla.suse.com/1186328">SUSE bug 1186328</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496561" comment="bouncycastle-1.64-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153068" comment="bouncycastle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621371" comment="bouncycastle-javadoc-1.64-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153069" comment="bouncycastle-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621372" comment="bouncycastle-mail-1.64-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009616465" comment="bouncycastle-mail is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496562" comment="bouncycastle-pg-1.64-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009616466" comment="bouncycastle-pg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621373" comment="bouncycastle-pkix-1.64-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009616467" comment="bouncycastle-pkix is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621374" comment="bouncycastle-tls-1.64-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009616468" comment="bouncycastle-tls is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15563</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15563" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15563" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15563" ref_url="https://www.suse.com/security/cve/CVE-2020-15563" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1902-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0965-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00031.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a hypervisor crash. An inverted conditional in x86 HVM guests' dirty video RAM tracking code allows such guests to make Xen de-reference a pointer guaranteed to point at unmapped space. A malicious or buggy HVM guest may cause the hypervisor to crash, resulting in Denial of Service (DoS) affecting the entire host. Xen versions from 4.8 onwards are affected. Xen versions 4.7 and earlier are not affected. Only x86 systems are affected. Arm systems are not affected. Only x86 HVM guests using shadow paging can leverage the vulnerability. In addition, there needs to be an entity actively monitoring a guest's video frame buffer (typically for display purposes) in order for such a guest to be able to leverage the vulnerability. x86 PV guests, as well as x86 HVM guests using hardware assisted paging (HAP), cannot leverage the vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15563/">CVE-2020-15563</cve>
	<bugzilla href="https://bugzilla.suse.com/1173377">SUSE bug 1173377</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015565" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15565</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15565" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15565" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15565" ref_url="https://www.suse.com/security/cve/CVE-2020-15565" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1902-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007126.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007511.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0965-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00031.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a host OS denial of service or possibly gain privileges because of insufficient cache write-back under VT-d. When page tables are shared between IOMMU and CPU, changes to them require flushing of both TLBs. Furthermore, IOMMUs may be non-coherent, and hence prior to flushing IOMMU TLBs, a CPU cache also needs writing back to memory after changes were made. Such writing back of cached data was missing in particular when splitting large page mappings into smaller granularity ones. A malicious guest may be able to retain read/write DMA access to frames returned to Xen's free pool, and later reused for another purpose. Host crashes (leading to a Denial of Service) and privilege escalation cannot be ruled out. Xen versions from at least 3.2 onwards are affected. Only x86 Intel systems are affected. x86 AMD as well as Arm systems are not affected. Only x86 HVM guests using hardware assisted paging (HAP), having a passed through PCI device assigned, and having page table sharing enabled can leverage the vulnerability. Note that page table sharing will be enabled (by default) only if Xen considers IOMMU and CPU large page size support compatible.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.9/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-15565/">CVE-2020-15565</cve>
	<bugzilla href="https://bugzilla.suse.com/1173378">SUSE bug 1173378</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015566" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15566</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15566" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15566" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15566" ref_url="https://www.suse.com/security/cve/CVE-2020-15566" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1902-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0965-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00031.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a host OS crash because of incorrect error handling in event-channel port allocation. The allocation of an event-channel port may fail for multiple reasons: (1) port is already in use, (2) the memory allocation failed, or (3) the port we try to allocate is higher than what is supported by the ABI (e.g., 2L or FIFO) used by the guest or the limit set by an administrator (max_event_channels in xl cfg). Due to the missing error checks, only (1) will be considered an error. All the other cases will provide a valid port and will result in a crash when trying to access the event channel. When the administrator configured a guest to allow more than 1023 event channels, that guest may be able to crash the host. When Xen is out-of-memory, allocation of new event channels will result in crashing the host rather than reporting an error. Xen versions 4.10 and later are affected. All architectures are affected. The default configuration, when guests are created with xl/libxl, is not vulnerable, because of the default event-channel limit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15566/">CVE-2020-15566</cve>
	<bugzilla href="https://bugzilla.suse.com/1173376">SUSE bug 1173376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15567</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15567" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15567" ref_url="https://www.suse.com/security/cve/CVE-2020-15567" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1902-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007126.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007511.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0965-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00031.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges or cause a denial of service because of non-atomic modification of a live EPT PTE. When mapping guest EPT (nested paging) tables, Xen would in some circumstances use a series of non-atomic bitfield writes. Depending on the compiler version and optimisation flags, Xen might expose a dangerous partially written PTE to the hardware, which an attacker might be able to race to exploit. A guest administrator or perhaps even an unprivileged guest user might be able to cause denial of service, data corruption, or privilege escalation. Only systems using Intel CPUs are vulnerable. Systems using AMD CPUs, and Arm systems, are not vulnerable. Only systems using nested paging (hap, aka nested paging, aka in this case Intel EPT) are vulnerable. Only HVM and PVH guests can exploit the vulnerability. The presence and scope of the vulnerability depends on the precise optimisations performed by the compiler used to build Xen. If the compiler generates (a) a single 64-bit write, or (b) a series of read-modify-write operations in the same order as the source code, the hypervisor is not vulnerable. For example, in one test build using GCC 8.3 with normal settings, the compiler generated multiple (unlocked) read-modify-write operations in source-code order, which did not constitute a vulnerability. We have not been able to survey compilers; consequently we cannot say which compiler(s) might produce vulnerable code (with which code-generation options). The source code clearly violates the C rules, and thus should be considered vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-15567/">CVE-2020-15567</cve>
	<bugzilla href="https://bugzilla.suse.com/1173380">SUSE bug 1173380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15652</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15652" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15652" ref_url="https://www.suse.com/security/cve/CVE-2020-15652" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007233.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007246.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1179-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00032.html" source="SUSE-SU"/>
    <description>
    By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. This vulnerability affects Firefox &lt; 79, Firefox ESR &lt; 68.11, Firefox ESR &lt; 78.1, Thunderbird &lt; 68.11, and Thunderbird &lt; 78.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-15652/">CVE-2020-15652</cve>
	<bugzilla href="https://bugzilla.suse.com/1174538">SUSE bug 1174538</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015653" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15653</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15653" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15653" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15653" ref_url="https://www.suse.com/security/cve/CVE-2020-15653" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007233.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html" source="SUSE-SU"/>
    <description>
    An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying on sandbox configurations that allowed popups and hosted arbitrary content. This vulnerability affects Firefox ESR &lt; 78.1, Firefox &lt; 79, and Thunderbird &lt; 78.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15653/">CVE-2020-15653</cve>
	<bugzilla href="https://bugzilla.suse.com/1174538">SUSE bug 1174538</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15654</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15654" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15654" ref_url="https://www.suse.com/security/cve/CVE-2020-15654" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007233.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html" source="SUSE-SU"/>
    <description>
    When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not. This could lead to a perceived broken state, especially when interactions with existing browser dialogs and warnings do not work. This vulnerability affects Firefox ESR &lt; 78.1, Firefox &lt; 79, and Thunderbird &lt; 78.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15654/">CVE-2020-15654</cve>
	<bugzilla href="https://bugzilla.suse.com/1174538">SUSE bug 1174538</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15655</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15655" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15655" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15655" ref_url="https://www.suse.com/security/cve/CVE-2020-15655" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007233.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html" source="SUSE-SU"/>
    <description>
    A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information. This vulnerability affects Firefox ESR &lt; 78.1, Firefox &lt; 79, and Thunderbird &lt; 78.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15655/">CVE-2020-15655</cve>
	<bugzilla href="https://bugzilla.suse.com/1174538">SUSE bug 1174538</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015656" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15656</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15656" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15656" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15656" ref_url="https://www.suse.com/security/cve/CVE-2020-15656" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007233.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html" source="SUSE-SU"/>
    <description>
    JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR &lt; 78.1, Firefox &lt; 79, and Thunderbird &lt; 78.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-15656/">CVE-2020-15656</cve>
	<bugzilla href="https://bugzilla.suse.com/1174538">SUSE bug 1174538</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015657" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15657</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15657" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15657" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15657" ref_url="https://www.suse.com/security/cve/CVE-2020-15657" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007233.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html" source="SUSE-SU"/>
    <description>
    Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placing files in the installation directory. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR &lt; 78.1, Firefox &lt; 79, and Thunderbird &lt; 78.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15657/">CVE-2020-15657</cve>
	<bugzilla href="https://bugzilla.suse.com/1174538">SUSE bug 1174538</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15658</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15658" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15658" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15658" ref_url="https://www.suse.com/security/cve/CVE-2020-15658" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007233.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html" source="SUSE-SU"/>
    <description>
    The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR &lt; 78.1, Firefox &lt; 79, and Thunderbird &lt; 78.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15658/">CVE-2020-15658</cve>
	<bugzilla href="https://bugzilla.suse.com/1174538">SUSE bug 1174538</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15659</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15659" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15659" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15659" ref_url="https://www.suse.com/security/cve/CVE-2020-15659" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007233.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007246.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1179-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00032.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox &lt; 79, Firefox ESR &lt; 68.11, Firefox ESR &lt; 78.1, Thunderbird &lt; 68.11, and Thunderbird &lt; 78.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15659/">CVE-2020-15659</cve>
	<bugzilla href="https://bugzilla.suse.com/1174538">SUSE bug 1174538</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15663</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15663" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15663" ref_url="https://www.suse.com/security/cve/CVE-2020-15663" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007483.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1383-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00026.html" source="SUSE-SU"/>
    <description>
    If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to a previous version which would have allowed exploitation of an older bug and arbitrary code execution with System Privileges. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox &lt; 80, Thunderbird &lt; 78.2, Thunderbird &lt; 68.12, Firefox ESR &lt; 68.12, and Firefox ESR &lt; 78.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15663/">CVE-2020-15663</cve>
	<bugzilla href="https://bugzilla.suse.com/1175686">SUSE bug 1175686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15664</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15664" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15664" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15664" ref_url="https://www.suse.com/security/cve/CVE-2020-15664" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007483.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1383-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00026.html" source="SUSE-SU"/>
    <description>
    By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox &lt; 80, Thunderbird &lt; 78.2, Thunderbird &lt; 68.12, Firefox ESR &lt; 68.12, Firefox ESR &lt; 78.2, and Firefox for Android &lt; 80.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15664/">CVE-2020-15664</cve>
	<bugzilla href="https://bugzilla.suse.com/1175686">SUSE bug 1175686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15669</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15669" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15669" ref_url="https://www.suse.com/security/cve/CVE-2020-15669" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007376.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1383-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00026.html" source="SUSE-SU"/>
    <description>
    When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR &lt; 68.12 and Thunderbird &lt; 68.12.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15669/">CVE-2020-15669</cve>
	<bugzilla href="https://bugzilla.suse.com/1175686">SUSE bug 1175686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15670</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15670" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15670" ref_url="https://www.suse.com/security/cve/CVE-2020-15670" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007483.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00027.html" source="SUSE-SU"/>
    <description>
    Mozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox &lt; 80, Firefox ESR &lt; 78.2, Thunderbird &lt; 78.2, and Firefox for Android &lt; 80.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15670/">CVE-2020-15670</cve>
	<bugzilla href="https://bugzilla.suse.com/1175686">SUSE bug 1175686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15673</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15673" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15673" ref_url="https://www.suse.com/security/cve/CVE-2020-15673" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2747-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-September/016248.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2759-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007487.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007671.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1555-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1574-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html" source="SUSE-SU"/>
    <description>
    Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox &lt; 81, Thunderbird &lt; 78.3, and Firefox ESR &lt; 78.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15673/">CVE-2020-15673</cve>
	<bugzilla href="https://bugzilla.suse.com/1176756">SUSE bug 1176756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176899">SUSE bug 1176899</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15676</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15676" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15676" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15676" ref_url="https://www.suse.com/security/cve/CVE-2020-15676" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2747-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-September/016248.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2759-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007487.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007671.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1555-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1574-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html" source="SUSE-SU"/>
    <description>
    Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element. This vulnerability affects Firefox &lt; 81, Thunderbird &lt; 78.3, and Firefox ESR &lt; 78.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15676/">CVE-2020-15676</cve>
	<bugzilla href="https://bugzilla.suse.com/1176756">SUSE bug 1176756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176899">SUSE bug 1176899</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015677" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15677</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15677" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15677" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15677" ref_url="https://www.suse.com/security/cve/CVE-2020-15677" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2747-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-September/016248.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2759-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007487.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007671.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1555-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1574-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html" source="SUSE-SU"/>
    <description>
    By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site (the one suffering from the open redirect) rather than the site the file was actually downloaded from. This vulnerability affects Firefox &lt; 81, Thunderbird &lt; 78.3, and Firefox ESR &lt; 78.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15677/">CVE-2020-15677</cve>
	<bugzilla href="https://bugzilla.suse.com/1176756">SUSE bug 1176756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176899">SUSE bug 1176899</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15678</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15678" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15678" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15678" ref_url="https://www.suse.com/security/cve/CVE-2020-15678" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2747-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-September/016248.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2759-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007487.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007671.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1555-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1574-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html" source="SUSE-SU"/>
    <description>
    When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs because the function APZCTreeManager::ComputeClippedCompositionBounds did not follow iterator invalidation rules. This vulnerability affects Firefox &lt; 81, Thunderbird &lt; 78.3, and Firefox ESR &lt; 78.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15678/">CVE-2020-15678</cve>
	<bugzilla href="https://bugzilla.suse.com/1176756">SUSE bug 1176756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176899">SUSE bug 1176899</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15683</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15683" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15683" ref_url="https://www.suse.com/security/cve/CVE-2020-15683" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007619.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3022-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007616.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007671.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR &lt; 78.4, Firefox &lt; 82, and Thunderbird &lt; 78.4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15683/">CVE-2020-15683</cve>
	<bugzilla href="https://bugzilla.suse.com/1177872">SUSE bug 1177872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177977">SUSE bug 1177977</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15685</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15685" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15685" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15685" ref_url="https://www.suse.com/security/cve/CVE-2020-15685" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008254.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0257-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008261.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0208-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PJ6EGWAN3STX7MVPJ6SXVNB6AQBHBJEA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0209-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LV6TQVT6324Y5SWHTL34EKZT7PFDOYE4/" source="SUSE-SU"/>
    <description>
    During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulnerability affects Thunderbird &lt; 78.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-23"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15685/">CVE-2020-15685</cve>
	<bugzilla href="https://bugzilla.suse.com/1181414">SUSE bug 1181414</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15690</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15690" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15690" ref_url="https://www.suse.com/security/cve/CVE-2020-15690" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:10095-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HM5F2H5AWO4WRQSTOWMODGKMXAHHBVRH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10101-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SNDISR45BBTIWW5MDTIQOSRHOEV3XUKF/" source="SUSE-SU"/>
    <description>
    In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-24"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15690/">CVE-2020-15690</cve>
	<bugzilla href="https://bugzilla.suse.com/1181705">SUSE bug 1181705</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707627" comment="nim-1.6.6-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009351816" comment="nim is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15692</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15692" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15692" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15692" ref_url="https://www.suse.com/security/cve/CVE-2020-15692" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:10095-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HM5F2H5AWO4WRQSTOWMODGKMXAHHBVRH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10101-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SNDISR45BBTIWW5MDTIQOSRHOEV3XUKF/" source="SUSE-SU"/>
    <description>
    In Nim 1.2.4, the standard library browsers mishandles the URL argument to browsers.openDefaultBrowser. This argument can be a local file path that will be opened in the default explorer. An attacker can pass one argument to the underlying open command to execute arbitrary registered system commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-24"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15692/">CVE-2020-15692</cve>
	<bugzilla href="https://bugzilla.suse.com/1175334">SUSE bug 1175334</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707627" comment="nim-1.6.6-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009351816" comment="nim is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15693</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15693" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15693" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15693" ref_url="https://www.suse.com/security/cve/CVE-2020-15693" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:10095-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HM5F2H5AWO4WRQSTOWMODGKMXAHHBVRH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10101-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SNDISR45BBTIWW5MDTIQOSRHOEV3XUKF/" source="SUSE-SU"/>
    <description>
    In Nim 1.2.4, the standard library httpClient is vulnerable to a CR-LF injection in the target URL. An injection is possible if the attacker controls any part of the URL provided in a call (such as httpClient.get or httpClient.post), the User-Agent header value, or custom HTTP header names or values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-24"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15693/">CVE-2020-15693</cve>
	<bugzilla href="https://bugzilla.suse.com/1175333">SUSE bug 1175333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707627" comment="nim-1.6.6-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009351816" comment="nim is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15694</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15694" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15694" ref_url="https://www.suse.com/security/cve/CVE-2020-15694" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:10095-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HM5F2H5AWO4WRQSTOWMODGKMXAHHBVRH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10101-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SNDISR45BBTIWW5MDTIQOSRHOEV3XUKF/" source="SUSE-SU"/>
    <description>
    In Nim 1.2.4, the standard library httpClient fails to properly validate the server response. For example, httpClient.get().contentLength() does not raise any error if a malicious server provides a negative Content-Length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-24"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15694/">CVE-2020-15694</cve>
	<bugzilla href="https://bugzilla.suse.com/1175332">SUSE bug 1175332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707627" comment="nim-1.6.6-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009351816" comment="nim is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15705</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15705" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15705" ref_url="https://www.suse.com/security/cve/CVE-2020-15705" source="SUSE CVE"/>
		<reference ref_id="BOOTHOLE-BLOG" ref_url="https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007297.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2304-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2308-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007292.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1282-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00069.html" source="SUSE-SU"/>
    <description>
    GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. This issue affects GRUB2 version 2.04 and prior versions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15705/">CVE-2020-15705</cve>
	<bugzilla href="https://bugzilla.suse.com/1174421">SUSE bug 1174421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182890">SUSE bug 1182890</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628504" comment="grub2-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628505" comment="grub2-arm64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623763" comment="grub2-arm64-efi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628506" comment="grub2-i386-pc-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628507" comment="grub2-powerpc-ieee1275-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623765" comment="grub2-powerpc-ieee1275 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628509" comment="grub2-snapper-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628510" comment="grub2-systemd-sleep-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628511" comment="grub2-x86_64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15706</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15706" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15706" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15706" ref_url="https://www.suse.com/security/cve/CVE-2020-15706" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007199.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007200.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007198.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007197.html" source="SUSE-SU"/>
		<reference ref_id="TID000019673" ref_url="https://www.suse.com/support/kb/doc/?id=000019673" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1169-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html" source="SUSE-SU"/>
    <description>
    GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitrary code execution and secure boot restriction bypass. This issue affects GRUB2 version 2.04 and prior versions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15706/">CVE-2020-15706</cve>
	<bugzilla href="https://bugzilla.suse.com/1174463">SUSE bug 1174463</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628504" comment="grub2-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628505" comment="grub2-arm64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623763" comment="grub2-arm64-efi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628506" comment="grub2-i386-pc-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628507" comment="grub2-powerpc-ieee1275-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623765" comment="grub2-powerpc-ieee1275 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628509" comment="grub2-snapper-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628510" comment="grub2-systemd-sleep-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628511" comment="grub2-x86_64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15707</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15707" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15707" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15707" ref_url="https://www.suse.com/security/cve/CVE-2020-15707" source="SUSE CVE"/>
		<reference ref_id="BOOTHOLE-BLOG" ref_url="https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007199.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007200.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007198.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007197.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1169-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html" source="SUSE-SU"/>
    <description>
    Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream), leading to a heap-based buffer overflow. These could be triggered by an extremely large number of arguments to the initrd command on 32-bit architectures, or a crafted filesystem with very large files on any architecture. An attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. This issue affects GRUB2 version 2.04 and prior versions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15707/">CVE-2020-15707</cve>
	<bugzilla href="https://bugzilla.suse.com/1174570">SUSE bug 1174570</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628504" comment="grub2-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628505" comment="grub2-arm64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623763" comment="grub2-arm64-efi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628506" comment="grub2-i386-pc-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628507" comment="grub2-powerpc-ieee1275-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623765" comment="grub2-powerpc-ieee1275 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628509" comment="grub2-snapper-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628510" comment="grub2-systemd-sleep-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628511" comment="grub2-x86_64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15708</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15708" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15708" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15708" ref_url="https://www.suse.com/security/cve/CVE-2020-15708" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2969-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2970-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3037-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3038-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3039-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007687.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00072.html" source="SUSE-SU"/>
    <description>
    Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to overwrite arbitrary files or execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15708/">CVE-2020-15708</cve>
	<bugzilla href="https://bugzilla.suse.com/1174955">SUSE bug 1174955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015719" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15719</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15719" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15719" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15719" ref_url="https://www.suse.com/security/cve/CVE-2020-15719" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007395.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007397.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2581-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1416-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00059.html" source="SUSE-SU"/>
    <description>
    libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15719/">CVE-2020-15719</cve>
	<bugzilla href="https://bugzilla.suse.com/1174154">SUSE bug 1174154</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015780" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15780</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15780" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15780" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15780" ref_url="https://www.suse.com/security/cve/CVE-2020-15780" source="SUSE CVE"/>
		<reference ref_id="BOOTHOLE-BLOG" ref_url="https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007357.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2517-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007353.html" source="SUSE-SU"/>
		<reference ref_id="TID000019673" ref_url="https://www.suse.com/support/kb/doc/?id=000019673" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15780/">CVE-2020-15780</cve>
	<bugzilla href="https://bugzilla.suse.com/1173573">SUSE bug 1173573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174186">SUSE bug 1174186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15803</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15803" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15803" ref_url="https://www.suse.com/security/cve/CVE-2020-15803" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007269.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0036-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EDFZEEJCPRPPDEWV6JULRJZVSQCMYOEY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZTUQBSMWYBVSTVDYNNRW5EOI5CCOSTPZ/" source="SUSE-SU"/>
    <description>
    Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15803/">CVE-2020-15803</cve>
	<bugzilla href="https://bugzilla.suse.com/1174253">SUSE bug 1174253</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670203" comment="zabbix-agent-4.0.38-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294885" comment="zabbix-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670204" comment="zabbix-java-gateway-4.0.38-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294889" comment="zabbix-java-gateway is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670205" comment="zabbix-phpfrontend-4.0.38-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294891" comment="zabbix-phpfrontend is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670206" comment="zabbix-proxy-4.0.38-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294893" comment="zabbix-proxy is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670207" comment="zabbix-proxy-mysql-4.0.38-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294895" comment="zabbix-proxy-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670208" comment="zabbix-proxy-postgresql-4.0.38-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294897" comment="zabbix-proxy-postgresql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670209" comment="zabbix-proxy-sqlite-4.0.38-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294899" comment="zabbix-proxy-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670210" comment="zabbix-server-4.0.38-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294901" comment="zabbix-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670211" comment="zabbix-server-mysql-4.0.38-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294903" comment="zabbix-server-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670212" comment="zabbix-server-postgresql-4.0.38-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294905" comment="zabbix-server-postgresql is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15862</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15862" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15862" ref_url="https://www.suse.com/security/cve/CVE-2020-15862" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:4191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0050-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010490.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0050-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2OQK3YBZP7LLGFOZF2RYGZC5GDDRHRI6/" source="SUSE-SU"/>
    <description>
    Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15862/">CVE-2020-15862</cve>
	<bugzilla href="https://bugzilla.suse.com/1174961">SUSE bug 1174961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193875">SUSE bug 1193875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196341">SUSE bug 1196341</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661027" comment="libsnmp30-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151706" comment="libsnmp30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661035" comment="libsnmp30-32bit-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151707" comment="libsnmp30-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661028" comment="net-snmp-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151708" comment="net-snmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661029" comment="net-snmp-devel-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151709" comment="net-snmp-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661802" comment="net-snmp-devel-32bit-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238133" comment="net-snmp-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661030" comment="perl-SNMP-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151710" comment="perl-SNMP is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661803" comment="python2-net-snmp-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238134" comment="python2-net-snmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661804" comment="python3-net-snmp-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238135" comment="python3-net-snmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661031" comment="snmp-mibs-5.7.3-10.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151711" comment="snmp-mibs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15863</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15863" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15863" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15863" ref_url="https://www.suse.com/security/cve/CVE-2020-15863" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2877-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007532.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008671.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14774-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-August/019812.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html" source="SUSE-SU"/>
    <description>
    hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15863/">CVE-2020-15863</cve>
	<bugzilla href="https://bugzilla.suse.com/1174386">SUSE bug 1174386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15900</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15900" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15900" ref_url="https://www.suse.com/security/cve/CVE-2020-15900" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007204.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1146-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00006.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15900/">CVE-2020-15900</cve>
	<bugzilla href="https://bugzilla.suse.com/1174415">SUSE bug 1174415</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628459" comment="ghostscript-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628461" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015917" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15917</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15917" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15917" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15917" ref_url="https://www.suse.com/security/cve/CVE-2020-15917" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1116-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1822-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1045-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2VE6WDEXX6HETWFB6EGOWAEY6QQSAI6E/" source="SUSE-SU"/>
    <description>
    common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15917/">CVE-2020-15917</cve>
	<bugzilla href="https://bugzilla.suse.com/1174457">SUSE bug 1174457</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625222" comment="claws-mail-3.18.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151767" comment="claws-mail is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625223" comment="claws-mail-devel-3.18.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153189" comment="claws-mail-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625224" comment="claws-mail-lang-3.18.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151768" comment="claws-mail-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15959</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15959" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15959" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15959" ref_url="https://www.suse.com/security/cve/CVE-2020-15959" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-01"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-15959/">CVE-2020-15959</cve>
	<bugzilla href="https://bugzilla.suse.com/1176306">SUSE bug 1176306</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15960</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15960" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15960" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15960" ref_url="https://www.suse.com/security/cve/CVE-2020-15960" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00242.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1542-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1550-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15960/">CVE-2020-15960</cve>
	<bugzilla href="https://bugzilla.suse.com/1176791">SUSE bug 1176791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176799">SUSE bug 1176799</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15961</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15961" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15961" ref_url="https://www.suse.com/security/cve/CVE-2020-15961" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00242.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1542-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1550-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html" source="SUSE-SU"/>
    <description>
    Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15961/">CVE-2020-15961</cve>
	<bugzilla href="https://bugzilla.suse.com/1176791">SUSE bug 1176791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176799">SUSE bug 1176799</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15962</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15962" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15962" ref_url="https://www.suse.com/security/cve/CVE-2020-15962" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00242.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1542-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1550-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html" source="SUSE-SU"/>
    <description>
    Insufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15962/">CVE-2020-15962</cve>
	<bugzilla href="https://bugzilla.suse.com/1176791">SUSE bug 1176791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176799">SUSE bug 1176799</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015963" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15963</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15963" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15963" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15963" ref_url="https://www.suse.com/security/cve/CVE-2020-15963" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00242.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1542-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1550-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15963/">CVE-2020-15963</cve>
	<bugzilla href="https://bugzilla.suse.com/1176791">SUSE bug 1176791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176799">SUSE bug 1176799</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15964</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15964" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15964" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15964" ref_url="https://www.suse.com/security/cve/CVE-2020-15964" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00242.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1542-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1550-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15964/">CVE-2020-15964</cve>
	<bugzilla href="https://bugzilla.suse.com/1176791">SUSE bug 1176791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176799">SUSE bug 1176799</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15965</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15965" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15965" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15965" ref_url="https://www.suse.com/security/cve/CVE-2020-15965" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00242.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1542-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1550-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html" source="SUSE-SU"/>
    <description>
    Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15965/">CVE-2020-15965</cve>
	<bugzilla href="https://bugzilla.suse.com/1176791">SUSE bug 1176791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176799">SUSE bug 1176799</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15966</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15966" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15966" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15966" ref_url="https://www.suse.com/security/cve/CVE-2020-15966" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00242.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1542-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1550-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-15966/">CVE-2020-15966</cve>
	<bugzilla href="https://bugzilla.suse.com/1176791">SUSE bug 1176791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176799">SUSE bug 1176799</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015967" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15967</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15967" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15967" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15967" ref_url="https://www.suse.com/security/cve/CVE-2020-15967" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15967/">CVE-2020-15967</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015968" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15968</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15968" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15968" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15968" ref_url="https://www.suse.com/security/cve/CVE-2020-15968" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15968/">CVE-2020-15968</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15969</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15969" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15969" ref_url="https://www.suse.com/security/cve/CVE-2020-15969" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007619.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3022-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007616.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007671.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15969/">CVE-2020-15969</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177872">SUSE bug 1177872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177977">SUSE bug 1177977</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15970</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15970" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15970" ref_url="https://www.suse.com/security/cve/CVE-2020-15970" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15970/">CVE-2020-15970</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15971</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15971" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15971" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15971" ref_url="https://www.suse.com/security/cve/CVE-2020-15971" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15971/">CVE-2020-15971</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15972</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15972" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15972" ref_url="https://www.suse.com/security/cve/CVE-2020-15972" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Use after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15972/">CVE-2020-15972</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15973</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15973" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15973" ref_url="https://www.suse.com/security/cve/CVE-2020-15973" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15973/">CVE-2020-15973</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15974</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15974" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15974" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15974" ref_url="https://www.suse.com/security/cve/CVE-2020-15974" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15974/">CVE-2020-15974</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15975</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15975" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15975" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15975" ref_url="https://www.suse.com/security/cve/CVE-2020-15975" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15975/">CVE-2020-15975</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15976</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15976" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15976" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15976" ref_url="https://www.suse.com/security/cve/CVE-2020-15976" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Use after free in WebXR in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15976/">CVE-2020-15976</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15977</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15977" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15977" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15977" ref_url="https://www.suse.com/security/cve/CVE-2020-15977" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-15977/">CVE-2020-15977</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15978</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15978" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15978" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15978" ref_url="https://www.suse.com/security/cve/CVE-2020-15978" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15978/">CVE-2020-15978</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15979</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15979" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15979" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15979" ref_url="https://www.suse.com/security/cve/CVE-2020-15979" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15979/">CVE-2020-15979</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015980" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15980</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15980" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15980" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15980" ref_url="https://www.suse.com/security/cve/CVE-2020-15980" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation restrictions via crafted Intents.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15980/">CVE-2020-15980</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015981" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15981</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15981" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15981" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15981" ref_url="https://www.suse.com/security/cve/CVE-2020-15981" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Out of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-15981/">CVE-2020-15981</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15982</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15982" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15982" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15982" ref_url="https://www.suse.com/security/cve/CVE-2020-15982" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in cache in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-15982/">CVE-2020-15982</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15983</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15983" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15983" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15983" ref_url="https://www.suse.com/security/cve/CVE-2020-15983" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed a local attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15983/">CVE-2020-15983</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15984</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15984" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15984" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15984" ref_url="https://www.suse.com/security/cve/CVE-2020-15984" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15984/">CVE-2020-15984</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15985</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15985" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15985" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15985" ref_url="https://www.suse.com/security/cve/CVE-2020-15985" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to spoof security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15985/">CVE-2020-15985</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15986</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15986" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15986" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15986" ref_url="https://www.suse.com/security/cve/CVE-2020-15986" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Integer overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15986/">CVE-2020-15986</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015987" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15987</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15987" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15987" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15987" ref_url="https://www.suse.com/security/cve/CVE-2020-15987" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15987/">CVE-2020-15987</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15988</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15988" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15988" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15988" ref_url="https://www.suse.com/security/cve/CVE-2020-15988" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75 allowed a remote attacker who convinced the user to open files to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-15988/">CVE-2020-15988</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015989" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15989</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15989" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15989" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15989" ref_url="https://www.suse.com/security/cve/CVE-2020-15989" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-15989/">CVE-2020-15989</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015990" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15990</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15990" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15990" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15990" ref_url="https://www.suse.com/security/cve/CVE-2020-15990" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15990/">CVE-2020-15990</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15991</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15991" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15991" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15991" ref_url="https://www.suse.com/security/cve/CVE-2020-15991" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15991/">CVE-2020-15991</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15992</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15992" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15992" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15992" ref_url="https://www.suse.com/security/cve/CVE-2020-15992" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15992/">CVE-2020-15992</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15995</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15995" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15995" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15995" ref_url="https://www.suse.com/security/cve/CVE-2020-15995" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0040-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6P57LOOIW2OJU7P7J5KL7C2XT5WWY2YT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0041-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GR5AM5XB3SLX6EFTV6X7ST2RBPHRH4HY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0047-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRR7YCDCDGHTWIIOCJQ5NJ4K3G6W7TLQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHBBTXAXJWMTZFXKAXB3FMLMOLA32VFG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0138-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KOW5ITBZI4UX7TPPGA7TM2EFI3OZCDH7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0139-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXQPSNTTRO5MNKYMIG7XOBBXCUECNO7J/" source="SUSE-SU"/>
    <description>
    Out of bounds write in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15995/">CVE-2020-15995</cve>
	<bugzilla href="https://bugzilla.suse.com/1180645">SUSE bug 1180645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202015999" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-15999</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-15999" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15999" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-15999" ref_url="https://www.suse.com/security/cve/CVE-2020-15999" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007639.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2995-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007607.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007883.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1734-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1737-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1744-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1952-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZPDJYULXAMSZLQSDCDB6AOO535U72YK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2020-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LK7W6L42GLCUWLGKEJNDWSRASOS3CLIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2031-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KX646YBHO2LBCWJZORVE6CWXY2DMCYHR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2096-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DVMMW4XRNOGVJH2XZU4UUV2ATGSF6TJ6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2187-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JXIRQKYZLZFQPPH6RZY4V3IIMPGHUT5V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2315-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/76P3E35NHCSZCWGVU63J3OKJKJO3HUJD/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1134-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N6MMS3NOFXF2TZBZ5M3EC6VOB65FRP4I/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15999/">CVE-2020-15999</cve>
	<bugzilla href="https://bugzilla.suse.com/1177914">SUSE bug 1177914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177936">SUSE bug 1177936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178824">SUSE bug 1178824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178894">SUSE bug 1178894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628448" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628449" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16000</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16000" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16000" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16000" ref_url="https://www.suse.com/security/cve/CVE-2020-16000" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1737-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1952-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZPDJYULXAMSZLQSDCDB6AOO535U72YK/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16000/">CVE-2020-16000</cve>
	<bugzilla href="https://bugzilla.suse.com/1177936">SUSE bug 1177936</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16001</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16001" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16001" ref_url="https://www.suse.com/security/cve/CVE-2020-16001" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1737-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1952-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZPDJYULXAMSZLQSDCDB6AOO535U72YK/" source="SUSE-SU"/>
    <description>
    Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16001/">CVE-2020-16001</cve>
	<bugzilla href="https://bugzilla.suse.com/1177936">SUSE bug 1177936</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16002</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16002" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16002" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16002" ref_url="https://www.suse.com/security/cve/CVE-2020-16002" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1737-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1952-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZPDJYULXAMSZLQSDCDB6AOO535U72YK/" source="SUSE-SU"/>
    <description>
    Use after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16002/">CVE-2020-16002</cve>
	<bugzilla href="https://bugzilla.suse.com/1177936">SUSE bug 1177936</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016003" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16003</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16003" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16003" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16003" ref_url="https://www.suse.com/security/cve/CVE-2020-16003" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1737-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1952-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZPDJYULXAMSZLQSDCDB6AOO535U72YK/" source="SUSE-SU"/>
    <description>
    Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16003/">CVE-2020-16003</cve>
	<bugzilla href="https://bugzilla.suse.com/1177936">SUSE bug 1177936</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016004" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16004</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16004" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16004" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16004" ref_url="https://www.suse.com/security/cve/CVE-2020-16004" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1937-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ABZ54FWLCGQJEV7RPVRMYY7B5D4OPJ4P/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1952-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZPDJYULXAMSZLQSDCDB6AOO535U72YK/" source="SUSE-SU"/>
    <description>
    Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16004/">CVE-2020-16004</cve>
	<bugzilla href="https://bugzilla.suse.com/1178375">SUSE bug 1178375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16005</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16005" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16005" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16005" ref_url="https://www.suse.com/security/cve/CVE-2020-16005" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1937-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ABZ54FWLCGQJEV7RPVRMYY7B5D4OPJ4P/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1952-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZPDJYULXAMSZLQSDCDB6AOO535U72YK/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16005/">CVE-2020-16005</cve>
	<bugzilla href="https://bugzilla.suse.com/1178375">SUSE bug 1178375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016006" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16006</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16006" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16006" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16006" ref_url="https://www.suse.com/security/cve/CVE-2020-16006" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1937-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ABZ54FWLCGQJEV7RPVRMYY7B5D4OPJ4P/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1952-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZPDJYULXAMSZLQSDCDB6AOO535U72YK/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16006/">CVE-2020-16006</cve>
	<bugzilla href="https://bugzilla.suse.com/1178375">SUSE bug 1178375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016007" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16007</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16007" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16007" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16007" ref_url="https://www.suse.com/security/cve/CVE-2020-16007" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1937-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ABZ54FWLCGQJEV7RPVRMYY7B5D4OPJ4P/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1952-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZPDJYULXAMSZLQSDCDB6AOO535U72YK/" source="SUSE-SU"/>
    <description>
    Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege via a crafted filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16007/">CVE-2020-16007</cve>
	<bugzilla href="https://bugzilla.suse.com/1178375">SUSE bug 1178375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016008" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16008</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16008" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16008" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16008" ref_url="https://www.suse.com/security/cve/CVE-2020-16008" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1937-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ABZ54FWLCGQJEV7RPVRMYY7B5D4OPJ4P/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1952-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZPDJYULXAMSZLQSDCDB6AOO535U72YK/" source="SUSE-SU"/>
    <description>
    Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit stack corruption via a crafted WebRTC packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16008/">CVE-2020-16008</cve>
	<bugzilla href="https://bugzilla.suse.com/1178375">SUSE bug 1178375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16009</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16009" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16009" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16009" ref_url="https://www.suse.com/security/cve/CVE-2020-16009" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1937-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ABZ54FWLCGQJEV7RPVRMYY7B5D4OPJ4P/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1952-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZPDJYULXAMSZLQSDCDB6AOO535U72YK/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16009/">CVE-2020-16009</cve>
	<bugzilla href="https://bugzilla.suse.com/1178375">SUSE bug 1178375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16011</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16011" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16011" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16011" ref_url="https://www.suse.com/security/cve/CVE-2020-16011" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1937-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ABZ54FWLCGQJEV7RPVRMYY7B5D4OPJ4P/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1952-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZPDJYULXAMSZLQSDCDB6AOO535U72YK/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16011/">CVE-2020-16011</cve>
	<bugzilla href="https://bugzilla.suse.com/1178375">SUSE bug 1178375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16012</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16012" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16012" ref_url="https://www.suse.com/security/cve/CVE-2020-16012" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007883.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2020-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LK7W6L42GLCUWLGKEJNDWSRASOS3CLIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2031-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KX646YBHO2LBCWJZORVE6CWXY2DMCYHR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2096-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DVMMW4XRNOGVJH2XZU4UUV2ATGSF6TJ6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2187-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JXIRQKYZLZFQPPH6RZY4V3IIMPGHUT5V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2315-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/76P3E35NHCSZCWGVU63J3OKJKJO3HUJD/" source="SUSE-SU"/>
    <description>
    Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16012/">CVE-2020-16012</cve>
	<bugzilla href="https://bugzilla.suse.com/1178824">SUSE bug 1178824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178894">SUSE bug 1178894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16013</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16013" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16013" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16013" ref_url="https://www.suse.com/security/cve/CVE-2020-16013" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1929-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FGRLB34GVO6HCDVG2KNYFJ6QDDAJAJQL/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1943-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ANOJKJGKULVXQB2C3UGQREMNTAMBT2TN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2013-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LPTIP6IPJZXPO6V6HSNDVUIUI6Q7O5CQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ATY43F3BVWRUUGKVEMXHKDP7IZZROP3M/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2178-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ELOCKFRXJEKGKGO7AQH4WNPKH7IYSMSR/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16013/">CVE-2020-16013</cve>
	<bugzilla href="https://bugzilla.suse.com/1178703">SUSE bug 1178703</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016014" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16014</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16014" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16014" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16014" ref_url="https://www.suse.com/security/cve/CVE-2020-16014" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Use after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16014/">CVE-2020-16014</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016015" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16015</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16015" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16015" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16015" ref_url="https://www.suse.com/security/cve/CVE-2020-16015" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16015/">CVE-2020-16015</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016016" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16016</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16016" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16016" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16016" ref_url="https://www.suse.com/security/cve/CVE-2020-16016" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1929-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FGRLB34GVO6HCDVG2KNYFJ6QDDAJAJQL/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1943-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ANOJKJGKULVXQB2C3UGQREMNTAMBT2TN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2013-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LPTIP6IPJZXPO6V6HSNDVUIUI6Q7O5CQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ATY43F3BVWRUUGKVEMXHKDP7IZZROP3M/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16016/">CVE-2020-16016</cve>
	<bugzilla href="https://bugzilla.suse.com/1178630">SUSE bug 1178630</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016017" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16017</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16017" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16017" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16017" ref_url="https://www.suse.com/security/cve/CVE-2020-16017" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1929-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FGRLB34GVO6HCDVG2KNYFJ6QDDAJAJQL/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1943-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ANOJKJGKULVXQB2C3UGQREMNTAMBT2TN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2013-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LPTIP6IPJZXPO6V6HSNDVUIUI6Q7O5CQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ATY43F3BVWRUUGKVEMXHKDP7IZZROP3M/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2178-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ELOCKFRXJEKGKGO7AQH4WNPKH7IYSMSR/" source="SUSE-SU"/>
    <description>
    Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16017/">CVE-2020-16017</cve>
	<bugzilla href="https://bugzilla.suse.com/1178703">SUSE bug 1178703</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016018" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16018</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16018" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16018" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16018" ref_url="https://www.suse.com/security/cve/CVE-2020-16018" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16018/">CVE-2020-16018</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16019</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16019" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16019" ref_url="https://www.suse.com/security/cve/CVE-2020-16019" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16019/">CVE-2020-16019</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16020</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16020" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16020" ref_url="https://www.suse.com/security/cve/CVE-2020-16020" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in cryptohome in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass discretionary access control via a malicious file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16020/">CVE-2020-16020</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16021</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16021" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16021" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16021" ref_url="https://www.suse.com/security/cve/CVE-2020-16021" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to perform OS-level privilege escalation via a malicious file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16021/">CVE-2020-16021</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16022</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16022" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16022" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16022" ref_url="https://www.suse.com/security/cve/CVE-2020-16022" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in networking in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially bypass firewall controls via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16022/">CVE-2020-16022</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016023" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16023</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16023" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16023" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16023" ref_url="https://www.suse.com/security/cve/CVE-2020-16023" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Use after free in WebCodecs in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16023/">CVE-2020-16023</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16024</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16024" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16024" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16024" ref_url="https://www.suse.com/security/cve/CVE-2020-16024" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16024/">CVE-2020-16024</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16025</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16025" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16025" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16025" ref_url="https://www.suse.com/security/cve/CVE-2020-16025" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in clipboard in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16025/">CVE-2020-16025</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16026</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16026" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16026" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16026" ref_url="https://www.suse.com/security/cve/CVE-2020-16026" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Use after free in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16026/">CVE-2020-16026</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016027" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16027</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16027" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16027" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16027" ref_url="https://www.suse.com/security/cve/CVE-2020-16027" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from the user's disk via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16027/">CVE-2020-16027</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16028</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16028" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16028" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16028" ref_url="https://www.suse.com/security/cve/CVE-2020-16028" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16028/">CVE-2020-16028</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16029</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16029" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16029" ref_url="https://www.suse.com/security/cve/CVE-2020-16029" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16029/">CVE-2020-16029</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16030</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16030" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16030" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16030" ref_url="https://www.suse.com/security/cve/CVE-2020-16030" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-16030/">CVE-2020-16030</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16031</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16031" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16031" ref_url="https://www.suse.com/security/cve/CVE-2020-16031" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Insufficient data validation in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-16031/">CVE-2020-16031</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16032</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16032" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16032" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16032" ref_url="https://www.suse.com/security/cve/CVE-2020-16032" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-16032/">CVE-2020-16032</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016033" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16033</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16033" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16033" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16033" ref_url="https://www.suse.com/security/cve/CVE-2020-16033" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in WebUSB in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-16033/">CVE-2020-16033</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016034" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16034</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16034" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16034" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16034" ref_url="https://www.suse.com/security/cve/CVE-2020-16034" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a local attacker to bypass policy restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-16034/">CVE-2020-16034</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16035</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16035" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16035" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16035" ref_url="https://www.suse.com/security/cve/CVE-2020-16035" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16035/">CVE-2020-16035</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016036" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16036</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16036" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16036" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16036" ref_url="https://www.suse.com/security/cve/CVE-2020-16036" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2010-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QY4HVSGBXI6UWJK3O7NRFLCCCLNP2X5N/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2012-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LYG4UYLBRBIOTJZ2AK7WUVPNH52MH5CG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2021-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2026-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3EEK4JCTZ6ZUPXX2R7FXWU4SEGDRFMY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2032-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIZKUW3YM4QYNE4MWWJG47ZVOOWCF43S/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C2RCNJJSY7TUK4IYHVCSUVEBMIXTWCWM/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in cookies in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass cookie restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-16036/">CVE-2020-16036</cve>
	<bugzilla href="https://bugzilla.suse.com/1178923">SUSE bug 1178923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16037</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16037" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16037" ref_url="https://www.suse.com/security/cve/CVE-2020-16037" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2181-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CDMZGVMNSMD6LDMI25NDRZ36NEBSFUHY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2213-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VCC4XLQNOV2QXKDOJAWY34R26577RWDC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2216-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XPQHVY33MWDC273XBHHGBLLDEBESEZOU/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2229-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LVYWJ3IDOZBKDSDO2ORAHQLOXALQJEGV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2359-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AKN6XFMHGSU5TFVYGT3C4SOLOD7IXLXK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2360-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DD5O6DYQGK2VKG37ZUD4DXDFLTSCZFGY/" source="SUSE-SU"/>
    <description>
    Use after free in clipboard in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16037/">CVE-2020-16037</cve>
	<bugzilla href="https://bugzilla.suse.com/1179576">SUSE bug 1179576</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16038</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16038" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16038" ref_url="https://www.suse.com/security/cve/CVE-2020-16038" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2181-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CDMZGVMNSMD6LDMI25NDRZ36NEBSFUHY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2213-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VCC4XLQNOV2QXKDOJAWY34R26577RWDC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2216-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XPQHVY33MWDC273XBHHGBLLDEBESEZOU/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2229-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LVYWJ3IDOZBKDSDO2ORAHQLOXALQJEGV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2359-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AKN6XFMHGSU5TFVYGT3C4SOLOD7IXLXK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2360-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DD5O6DYQGK2VKG37ZUD4DXDFLTSCZFGY/" source="SUSE-SU"/>
    <description>
    Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16038/">CVE-2020-16038</cve>
	<bugzilla href="https://bugzilla.suse.com/1179576">SUSE bug 1179576</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16039</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16039" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16039" ref_url="https://www.suse.com/security/cve/CVE-2020-16039" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2181-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CDMZGVMNSMD6LDMI25NDRZ36NEBSFUHY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2213-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VCC4XLQNOV2QXKDOJAWY34R26577RWDC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2216-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XPQHVY33MWDC273XBHHGBLLDEBESEZOU/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2229-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LVYWJ3IDOZBKDSDO2ORAHQLOXALQJEGV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2359-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AKN6XFMHGSU5TFVYGT3C4SOLOD7IXLXK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2360-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DD5O6DYQGK2VKG37ZUD4DXDFLTSCZFGY/" source="SUSE-SU"/>
    <description>
    Use after free in extensions in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16039/">CVE-2020-16039</cve>
	<bugzilla href="https://bugzilla.suse.com/1179576">SUSE bug 1179576</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16040</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16040" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16040" ref_url="https://www.suse.com/security/cve/CVE-2020-16040" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2181-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CDMZGVMNSMD6LDMI25NDRZ36NEBSFUHY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2213-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VCC4XLQNOV2QXKDOJAWY34R26577RWDC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2216-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XPQHVY33MWDC273XBHHGBLLDEBESEZOU/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2229-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LVYWJ3IDOZBKDSDO2ORAHQLOXALQJEGV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2359-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AKN6XFMHGSU5TFVYGT3C4SOLOD7IXLXK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2360-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DD5O6DYQGK2VKG37ZUD4DXDFLTSCZFGY/" source="SUSE-SU"/>
    <description>
    Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16040/">CVE-2020-16040</cve>
	<bugzilla href="https://bugzilla.suse.com/1179576">SUSE bug 1179576</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16041</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16041" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16041" ref_url="https://www.suse.com/security/cve/CVE-2020-16041" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:2181-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CDMZGVMNSMD6LDMI25NDRZ36NEBSFUHY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2213-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VCC4XLQNOV2QXKDOJAWY34R26577RWDC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2216-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XPQHVY33MWDC273XBHHGBLLDEBESEZOU/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2229-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LVYWJ3IDOZBKDSDO2ORAHQLOXALQJEGV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2359-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AKN6XFMHGSU5TFVYGT3C4SOLOD7IXLXK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2360-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DD5O6DYQGK2VKG37ZUD4DXDFLTSCZFGY/" source="SUSE-SU"/>
    <description>
    Out of bounds read in networking in Google Chrome prior to 87.0.4280.88 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16041/">CVE-2020-16041</cve>
	<bugzilla href="https://bugzilla.suse.com/1179576">SUSE bug 1179576</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16042</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16042" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16042" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16042" ref_url="https://www.suse.com/security/cve/CVE-2020-16042" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3902-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008122.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2181-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CDMZGVMNSMD6LDMI25NDRZ36NEBSFUHY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2213-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VCC4XLQNOV2QXKDOJAWY34R26577RWDC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2216-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XPQHVY33MWDC273XBHHGBLLDEBESEZOU/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2229-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LVYWJ3IDOZBKDSDO2ORAHQLOXALQJEGV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2317-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZRYMYUEZXYQNBK2DWV7DAYE5EXEQPBUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2318-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LL2B6S5KIA4HGLES3CDLSB4VRZW275H2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2324-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MFGNB2YB4LDKDYXRSTS5R357XYHABN5P/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2325-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JZN3OVPTOCIWBAWJK4JZQDXFN752D6AR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2359-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AKN6XFMHGSU5TFVYGT3C4SOLOD7IXLXK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2360-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DD5O6DYQGK2VKG37ZUD4DXDFLTSCZFGY/" source="SUSE-SU"/>
    <description>
    Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16042/">CVE-2020-16042</cve>
	<bugzilla href="https://bugzilla.suse.com/1179576">SUSE bug 1179576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180039">SUSE bug 1180039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016043" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16043</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16043" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16043" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16043" ref_url="https://www.suse.com/security/cve/CVE-2020-16043" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0040-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6P57LOOIW2OJU7P7J5KL7C2XT5WWY2YT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0041-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GR5AM5XB3SLX6EFTV6X7ST2RBPHRH4HY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0047-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRR7YCDCDGHTWIIOCJQ5NJ4K3G6W7TLQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHBBTXAXJWMTZFXKAXB3FMLMOLA32VFG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0138-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KOW5ITBZI4UX7TPPGA7TM2EFI3OZCDH7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0139-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXQPSNTTRO5MNKYMIG7XOBBXCUECNO7J/" source="SUSE-SU"/>
    <description>
    Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicious network traffic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16043/">CVE-2020-16043</cve>
	<bugzilla href="https://bugzilla.suse.com/1180645">SUSE bug 1180645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16044</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16044" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16044" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16044" ref_url="https://www.suse.com/security/cve/CVE-2020-16044" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0071-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0072-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008199.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008204.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008172.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0056-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MWW23OVUF57OUUNFOOBPRID66YRCNBPH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0063-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/R64OG7KLB7DVCRVNOYE46AZ266XQ2F23/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0093-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/72PBD5PFZIW6WZ7R65QRFVISRDWYC6WO/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0127-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3236IRHAJFLO3NB3KMMBI5XYZOZFL6S7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16044/">CVE-2020-16044</cve>
	<bugzilla href="https://bugzilla.suse.com/1180623">SUSE bug 1180623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16092</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16092" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16092" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16092" ref_url="https://www.suse.com/security/cve/CVE-2020-16092" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2877-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007532.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008671.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html" source="SUSE-SU"/>
    <description>
    In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16092/">CVE-2020-16092</cve>
	<bugzilla href="https://bugzilla.suse.com/1174641">SUSE bug 1174641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16116</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16116" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16116" ref_url="https://www.suse.com/security/cve/CVE-2020-16116" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1183-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00045.html" source="SUSE-SU"/>
    <description>
    In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-16116/">CVE-2020-16116</cve>
	<bugzilla href="https://bugzilla.suse.com/1174773">SUSE bug 1174773</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694715" comment="ark-20.04.2-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154016" comment="ark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694716" comment="ark-lang-20.04.2-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009289271" comment="ark-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694717" comment="libkerfuffle20-20.04.2-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291475" comment="libkerfuffle20 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16117</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16117" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16117" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16117" ref_url="https://www.suse.com/security/cve/CVE-2020-16117" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0885-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008554.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0482-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/I3CUVYOHJVMCTZXIKRZXRNXLROM7HCFQ/" source="SUSE-SU"/>
    <description>
    In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16117/">CVE-2020-16117</cve>
	<bugzilla href="https://bugzilla.suse.com/1174712">SUSE bug 1174712</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630123" comment="evolution-data-server-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348193" comment="evolution-data-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630125" comment="evolution-data-server-lang-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348196" comment="evolution-data-server-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630126" comment="libcamel-1_2-62-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348199" comment="libcamel-1_2-62 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630127" comment="libebackend-1_2-10-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348201" comment="libebackend-1_2-10 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630128" comment="libebook-1_2-20-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348203" comment="libebook-1_2-20 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630129" comment="libebook-contacts-1_2-3-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348205" comment="libebook-contacts-1_2-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630130" comment="libecal-2_0-1-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348207" comment="libecal-2_0-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630131" comment="libedata-book-1_2-26-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348209" comment="libedata-book-1_2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630132" comment="libedata-cal-2_0-1-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348211" comment="libedata-cal-2_0-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630133" comment="libedataserver-1_2-24-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348213" comment="libedataserver-1_2-24 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630134" comment="libedataserverui-1_2-2-3.34.4-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348215" comment="libedataserverui-1_2-2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16119</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16119" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16119" ref_url="https://www.suse.com/security/cve/CVE-2020-16119" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:1130-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012711.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012771.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013342.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccps_hc_tx_ccid object as a listener after being released. Fixed in Ubuntu Linux kernel 5.4.0-51.56, 5.3.0-68.63, 4.15.0-121.123, 4.4.0-193.224, 3.13.0.182.191 and 3.2.0-149.196.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-19"/>
	<updated date="2022-12-24"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16119/">CVE-2020-16119</cve>
	<bugzilla href="https://bugzilla.suse.com/1177471">SUSE bug 1177471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177742">SUSE bug 1177742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721801" comment="cluster-md-kmp-64kb-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717663" comment="cluster-md-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721588" comment="cluster-md-kmp-default-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721802" comment="cluster-md-kmp-preempt-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721803" comment="dlm-kmp-64kb-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717664" comment="dlm-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721589" comment="dlm-kmp-default-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721804" comment="dlm-kmp-preempt-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721505" comment="dtb-al-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721805" comment="dtb-allwinner-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721806" comment="dtb-altera-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721807" comment="dtb-amd-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721808" comment="dtb-amlogic-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721809" comment="dtb-apm-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721810" comment="dtb-arm-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721811" comment="dtb-broadcom-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721812" comment="dtb-cavium-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721813" comment="dtb-exynos-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721814" comment="dtb-freescale-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721815" comment="dtb-hisilicon-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721816" comment="dtb-lg-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721817" comment="dtb-marvell-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721818" comment="dtb-mediatek-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721819" comment="dtb-nvidia-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721820" comment="dtb-qcom-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721821" comment="dtb-renesas-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721822" comment="dtb-rockchip-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721823" comment="dtb-socionext-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721824" comment="dtb-sprd-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721825" comment="dtb-xilinx-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721506" comment="dtb-zte-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721826" comment="gfs2-kmp-64kb-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717665" comment="gfs2-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721590" comment="gfs2-kmp-default-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721827" comment="gfs2-kmp-preempt-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721544" comment="kernel-64kb-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721545" comment="kernel-64kb-devel-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721828" comment="kernel-64kb-extra-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721829" comment="kernel-64kb-livepatch-devel-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721830" comment="kernel-64kb-optional-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717649" comment="kernel-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717650" comment="kernel-azure-devel-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717666" comment="kernel-azure-extra-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717667" comment="kernel-azure-livepatch-devel-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717668" comment="kernel-azure-optional-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721831" comment="kernel-debug-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721832" comment="kernel-debug-devel-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721833" comment="kernel-debug-livepatch-devel-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721546" comment="kernel-default-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721547" comment="kernel-default-base-5.3.18-150300.59.98.1.150300.18.56.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721834" comment="kernel-default-base-rebuild-5.3.18-150300.59.98.1.150300.18.56.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721548" comment="kernel-default-devel-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721835" comment="kernel-default-extra-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721836" comment="kernel-default-livepatch-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721837" comment="kernel-default-livepatch-devel-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721838" comment="kernel-default-optional-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721549" comment="kernel-devel-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717651" comment="kernel-devel-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721567" comment="kernel-docs-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721839" comment="kernel-docs-html-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721840" comment="kernel-kvmsmall-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721841" comment="kernel-kvmsmall-devel-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721842" comment="kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721550" comment="kernel-macros-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721568" comment="kernel-obs-build-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721843" comment="kernel-obs-qa-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721551" comment="kernel-preempt-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721569" comment="kernel-preempt-devel-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721844" comment="kernel-preempt-extra-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721845" comment="kernel-preempt-livepatch-devel-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721846" comment="kernel-preempt-optional-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721570" comment="kernel-source-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717652" comment="kernel-source-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721847" comment="kernel-source-vanilla-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721571" comment="kernel-syms-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717653" comment="kernel-syms-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721552" comment="kernel-zfcpdump-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721848" comment="kselftests-kmp-64kb-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717669" comment="kselftests-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721849" comment="kselftests-kmp-default-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721850" comment="kselftests-kmp-preempt-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721851" comment="ocfs2-kmp-64kb-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717670" comment="ocfs2-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721591" comment="ocfs2-kmp-default-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721852" comment="ocfs2-kmp-preempt-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721853" comment="reiserfs-kmp-64kb-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717671" comment="reiserfs-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721572" comment="reiserfs-kmp-default-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721854" comment="reiserfs-kmp-preempt-5.3.18-150300.59.98.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16120</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16120" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16120" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16120" ref_url="https://www.suse.com/security/cve/CVE-2020-16120" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007748.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007842.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1906-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W7MTGDUP74HR4XORTRYN7I7MANTKWCGQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2112-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    Overlayfs did not properly perform permission checking when copying up files in an overlayfs and could be exploited from within a user namespace, if, for example, unprivileged user namespaces were allowed. It was possible to have a file not readable by an unprivileged user to be copied to a mountpoint controlled by the user, like a removable device. This was introduced in kernel version 4.19 by commit d1d04ef ("ovl: stack file ops"). This was fixed in kernel version 5.8 by commits 56230d9 ("ovl: verify permissions in ovl_path_open()"), 48bd024 ("ovl: switch to mounter creds in readdir") and 05acefb ("ovl: check permission to open real file"). Additionally, commits 130fdbc ("ovl: pass correct flags for opening real directory") and 292f902 ("ovl: call secutiry hook in ovl_real_ioctl()") in kernel 5.8 might also be desired or necessary. These additional commits introduced a regression in overlay mounts within user namespaces which prevented access to files with ownership outside of the user namespace. This regression was mitigated by subsequent commit b6650da ("ovl: do not fail because of O_NOATIMEi") in kernel 5.11.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16120/">CVE-2020-16120</cve>
	<bugzilla href="https://bugzilla.suse.com/1177470">SUSE bug 1177470</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16121</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16121" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16121" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16121" ref_url="https://www.suse.com/security/cve/CVE-2020-16121" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3909-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008108.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008105.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2292-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CMDG3TCU5LRAC7S5OQFWQ2ZCJ6MQPUSX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2344-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YZ7V5X4VPZ6MTETS6GU4AOZBIWDADE3U/" source="SUSE-SU"/>
    <description>
    PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16121/">CVE-2020-16121</cve>
	<bugzilla href="https://bugzilla.suse.com/1176930">SUSE bug 1176930</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629089" comment="PackageKit-1.1.13-4.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174862" comment="PackageKit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629090" comment="PackageKit-backend-zypp-1.1.13-4.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174863" comment="PackageKit-backend-zypp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684220" comment="PackageKit-gstreamer-plugin-1.1.13-4.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174866" comment="PackageKit-gstreamer-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684221" comment="PackageKit-gtk3-module-1.1.13-4.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174867" comment="PackageKit-gtk3-module is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629092" comment="PackageKit-lang-1.1.13-4.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174868" comment="PackageKit-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629093" comment="libpackagekit-glib2-18-1.1.13-4.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174869" comment="libpackagekit-glib2-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629095" comment="typelib-1_0-PackageKitGlib-1_0-1.1.13-4.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009174873" comment="typelib-1_0-PackageKitGlib-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16125</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16125" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16125" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16125" ref_url="https://www.suse.com/security/cve/CVE-2020-16125" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007777.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1961-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZX3UTGQD6BVLNXN2RQDQJAGIEKRWA7A4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2264-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OSCPFN6UQDWHTSA3DT4W6QWNTQE4X4HE/" source="SUSE-SU"/>
    <description>
    gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16125/">CVE-2020-16125</cve>
	<bugzilla href="https://bugzilla.suse.com/1140851">SUSE bug 1140851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178150">SUSE bug 1178150</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694740" comment="gdm-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151581" comment="gdm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694741" comment="gdm-lang-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151582" comment="gdm-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694742" comment="gdmflexiserver-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151583" comment="gdmflexiserver is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694743" comment="libgdm1-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151584" comment="libgdm1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694744" comment="typelib-1_0-Gdm-1_0-3.34.1-8.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151585" comment="typelib-1_0-Gdm-1_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16145</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16145" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16145" ref_url="https://www.suse.com/security/cve/CVE-2020-16145" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1516-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3WUL4HE7A5MLE433XPBQYBUU6265EYNA/" source="SUSE-SU"/>
    <description>
    Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-16145/">CVE-2020-16145</cve>
	<bugzilla href="https://bugzilla.suse.com/1175135">SUSE bug 1175135</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009718212" comment="roundcubemail-1.5.3-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152670" comment="roundcubemail is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16154</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16154" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16154" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16154" ref_url="https://www.suse.com/security/cve/CVE-2020-16154" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:0074-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/O2R4OBBVU7JBUBEWOTAIN5NEZXBGJK6O/" source="SUSE-SU"/>
    <description>
    The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16154/">CVE-2020-16154</cve>
	<bugzilla href="https://bugzilla.suse.com/1193773">SUSE bug 1193773</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671072" comment="perl-App-cpanminus-1.7045-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009671073" comment="perl-App-cpanminus is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16166</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16166" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16166" ref_url="https://www.suse.com/security/cve/CVE-2020-16166" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2485-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007348.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007374.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007381.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2576-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007393.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007405.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2610-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007408.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007419.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007426.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16166/">CVE-2020-16166</cve>
	<bugzilla href="https://bugzilla.suse.com/1174757">SUSE bug 1174757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16587</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16587" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16587" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16587" ref_url="https://www.suse.com/security/cve/CVE-2020-16587" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2349-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D4FRZPNDH3SM5DRWM4ITYTYRZIOVKUGB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2351-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ESEVYLX65LTFDH2ZVMY2Y4AN2MUHW5M5/" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16587/">CVE-2020-16587</cve>
	<bugzilla href="https://bugzilla.suse.com/1179879">SUSE bug 1179879</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180108">SUSE bug 1180108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180109">SUSE bug 1180109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016588" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16588</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16588" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16588" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16588" ref_url="https://www.suse.com/security/cve/CVE-2020-16588" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2349-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D4FRZPNDH3SM5DRWM4ITYTYRZIOVKUGB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2351-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ESEVYLX65LTFDH2ZVMY2Y4AN2MUHW5M5/" source="SUSE-SU"/>
    <description>
    A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16588/">CVE-2020-16588</cve>
	<bugzilla href="https://bugzilla.suse.com/1179879">SUSE bug 1179879</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180108">SUSE bug 1180108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016589" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16589</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16589" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16589" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16589" ref_url="https://www.suse.com/security/cve/CVE-2020-16589" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2349-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D4FRZPNDH3SM5DRWM4ITYTYRZIOVKUGB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2351-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ESEVYLX65LTFDH2ZVMY2Y4AN2MUHW5M5/" source="SUSE-SU"/>
    <description>
    A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of service via a crafted EXR file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16589/">CVE-2020-16589</cve>
	<bugzilla href="https://bugzilla.suse.com/1179879">SUSE bug 1179879</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180109">SUSE bug 1180109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16590</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16590" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16590" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16590" ref_url="https://www.suse.com/security/cve/CVE-2020-16590" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010497.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1475-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N6RYWEZ5BKTK6UEP6HAB7B466BPC3SMJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3616-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4TQ3DLF5YEQDDJUON6WGBX2HVVM7FOLB/" source="SUSE-SU"/>
    <description>
    A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readelf, via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16590/">CVE-2020-16590</cve>
	<bugzilla href="https://bugzilla.suse.com/1179898">SUSE bug 1179898</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653451" comment="binutils-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653452" comment="binutils-devel-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653455" comment="binutils-devel-32bit-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653458" comment="binutils-gold-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653456" comment="bpftrace-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654065" comment="bpftrace is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653457" comment="bpftrace-tools-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654066" comment="bpftrace-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653562" comment="cross-aarch64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653563" comment="cross-arm-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653564" comment="cross-avr-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653565" comment="cross-epiphany-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238034" comment="cross-epiphany-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653566" comment="cross-hppa-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653567" comment="cross-hppa64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653568" comment="cross-i386-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653569" comment="cross-ia64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653570" comment="cross-m68k-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653571" comment="cross-mips-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653572" comment="cross-ppc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653573" comment="cross-ppc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653574" comment="cross-ppc64le-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653575" comment="cross-riscv64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238035" comment="cross-riscv64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653576" comment="cross-rx-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238036" comment="cross-rx-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653577" comment="cross-s390-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653578" comment="cross-s390x-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653579" comment="cross-sparc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653580" comment="cross-sparc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653581" comment="cross-spu-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653582" comment="cross-x86_64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653453" comment="libctf-nobfd0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653454" comment="libctf0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16591</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16591" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16591" ref_url="https://www.suse.com/security/cve/CVE-2020-16591" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010497.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1475-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N6RYWEZ5BKTK6UEP6HAB7B466BPC3SMJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3616-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4TQ3DLF5YEQDDJUON6WGBX2HVVM7FOLB/" source="SUSE-SU"/>
    <description>
    A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrated in readeif.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16591/">CVE-2020-16591</cve>
	<bugzilla href="https://bugzilla.suse.com/1179899">SUSE bug 1179899</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653451" comment="binutils-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653452" comment="binutils-devel-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653455" comment="binutils-devel-32bit-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653458" comment="binutils-gold-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653456" comment="bpftrace-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654065" comment="bpftrace is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653457" comment="bpftrace-tools-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654066" comment="bpftrace-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653562" comment="cross-aarch64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653563" comment="cross-arm-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653564" comment="cross-avr-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653565" comment="cross-epiphany-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238034" comment="cross-epiphany-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653566" comment="cross-hppa-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653567" comment="cross-hppa64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653568" comment="cross-i386-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653569" comment="cross-ia64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653570" comment="cross-m68k-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653571" comment="cross-mips-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653572" comment="cross-ppc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653573" comment="cross-ppc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653574" comment="cross-ppc64le-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653575" comment="cross-riscv64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238035" comment="cross-riscv64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653576" comment="cross-rx-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238036" comment="cross-rx-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653577" comment="cross-s390-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653578" comment="cross-s390x-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653579" comment="cross-sparc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653580" comment="cross-sparc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653581" comment="cross-spu-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653582" comment="cross-x86_64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653453" comment="libctf-nobfd0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653454" comment="libctf0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16592</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16592" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16592" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16592" ref_url="https://www.suse.com/security/cve/CVE-2020-16592" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010497.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1475-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N6RYWEZ5BKTK6UEP6HAB7B466BPC3SMJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3616-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4TQ3DLF5YEQDDJUON6WGBX2HVVM7FOLB/" source="SUSE-SU"/>
    <description>
    A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-new, that can cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16592/">CVE-2020-16592</cve>
	<bugzilla href="https://bugzilla.suse.com/1179900">SUSE bug 1179900</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653451" comment="binutils-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653452" comment="binutils-devel-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653455" comment="binutils-devel-32bit-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653458" comment="binutils-gold-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653456" comment="bpftrace-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654065" comment="bpftrace is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653457" comment="bpftrace-tools-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654066" comment="bpftrace-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653562" comment="cross-aarch64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653563" comment="cross-arm-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653564" comment="cross-avr-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653565" comment="cross-epiphany-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238034" comment="cross-epiphany-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653566" comment="cross-hppa-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653567" comment="cross-hppa64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653568" comment="cross-i386-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653569" comment="cross-ia64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653570" comment="cross-m68k-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653571" comment="cross-mips-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653572" comment="cross-ppc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653573" comment="cross-ppc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653574" comment="cross-ppc64le-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653575" comment="cross-riscv64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238035" comment="cross-riscv64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653576" comment="cross-rx-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238036" comment="cross-rx-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653577" comment="cross-s390-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653578" comment="cross-s390x-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653579" comment="cross-sparc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653580" comment="cross-sparc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653581" comment="cross-spu-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653582" comment="cross-x86_64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653453" comment="libctf-nobfd0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653454" comment="libctf0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16593</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16593" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16593" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16593" ref_url="https://www.suse.com/security/cve/CVE-2020-16593" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010497.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1475-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N6RYWEZ5BKTK6UEP6HAB7B466BPC3SMJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3616-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4TQ3DLF5YEQDDJUON6WGBX2HVVM7FOLB/" source="SUSE-SU"/>
    <description>
    A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for_symbols, as demonstrated in addr2line, that can cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16593/">CVE-2020-16593</cve>
	<bugzilla href="https://bugzilla.suse.com/1179901">SUSE bug 1179901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653451" comment="binutils-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653452" comment="binutils-devel-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653455" comment="binutils-devel-32bit-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653458" comment="binutils-gold-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653456" comment="bpftrace-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654065" comment="bpftrace is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653457" comment="bpftrace-tools-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654066" comment="bpftrace-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653562" comment="cross-aarch64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653563" comment="cross-arm-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653564" comment="cross-avr-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653565" comment="cross-epiphany-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238034" comment="cross-epiphany-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653566" comment="cross-hppa-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653567" comment="cross-hppa64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653568" comment="cross-i386-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653569" comment="cross-ia64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653570" comment="cross-m68k-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653571" comment="cross-mips-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653572" comment="cross-ppc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653573" comment="cross-ppc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653574" comment="cross-ppc64le-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653575" comment="cross-riscv64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238035" comment="cross-riscv64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653576" comment="cross-rx-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238036" comment="cross-rx-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653577" comment="cross-s390-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653578" comment="cross-s390x-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653579" comment="cross-sparc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653580" comment="cross-sparc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653581" comment="cross-spu-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653582" comment="cross-x86_64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653453" comment="libctf-nobfd0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653454" comment="libctf0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16598</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16598" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16598" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16598" ref_url="https://www.suse.com/security/cve/CVE-2020-16598" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010497.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1475-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N6RYWEZ5BKTK6UEP6HAB7B466BPC3SMJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3616-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4TQ3DLF5YEQDDJUON6WGBX2HVVM7FOLB/" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16598/">CVE-2020-16598</cve>
	<bugzilla href="https://bugzilla.suse.com/1179902">SUSE bug 1179902</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653451" comment="binutils-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653452" comment="binutils-devel-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653455" comment="binutils-devel-32bit-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653458" comment="binutils-gold-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653456" comment="bpftrace-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654065" comment="bpftrace is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653457" comment="bpftrace-tools-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654066" comment="bpftrace-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653562" comment="cross-aarch64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653563" comment="cross-arm-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653564" comment="cross-avr-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653565" comment="cross-epiphany-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238034" comment="cross-epiphany-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653566" comment="cross-hppa-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653567" comment="cross-hppa64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653568" comment="cross-i386-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653569" comment="cross-ia64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653570" comment="cross-m68k-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653571" comment="cross-mips-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653572" comment="cross-ppc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653573" comment="cross-ppc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653574" comment="cross-ppc64le-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653575" comment="cross-riscv64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238035" comment="cross-riscv64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653576" comment="cross-rx-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238036" comment="cross-rx-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653577" comment="cross-s390-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653578" comment="cross-s390x-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653579" comment="cross-sparc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653580" comment="cross-sparc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653581" comment="cross-spu-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653582" comment="cross-x86_64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653453" comment="libctf-nobfd0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653454" comment="libctf0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16599</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16599" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16599" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16599" ref_url="https://www.suse.com/security/cve/CVE-2020-16599" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010497.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1475-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N6RYWEZ5BKTK6UEP6HAB7B466BPC3SMJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3616-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4TQ3DLF5YEQDDJUON6WGBX2HVVM7FOLB/" source="SUSE-SU"/>
    <description>
    A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_symbol_version_string, as demonstrated in nm-new, that can cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-07"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16599/">CVE-2020-16599</cve>
	<bugzilla href="https://bugzilla.suse.com/1179903">SUSE bug 1179903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206080">SUSE bug 1206080</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653451" comment="binutils-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653452" comment="binutils-devel-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653455" comment="binutils-devel-32bit-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653458" comment="binutils-gold-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653456" comment="bpftrace-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654065" comment="bpftrace is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653457" comment="bpftrace-tools-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654066" comment="bpftrace-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653562" comment="cross-aarch64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653563" comment="cross-arm-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653564" comment="cross-avr-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653565" comment="cross-epiphany-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238034" comment="cross-epiphany-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653566" comment="cross-hppa-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653567" comment="cross-hppa64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653568" comment="cross-i386-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653569" comment="cross-ia64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653570" comment="cross-m68k-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653571" comment="cross-mips-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653572" comment="cross-ppc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653573" comment="cross-ppc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653574" comment="cross-ppc64le-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653575" comment="cross-riscv64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238035" comment="cross-riscv64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653576" comment="cross-rx-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238036" comment="cross-rx-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653577" comment="cross-s390-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653578" comment="cross-s390x-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653579" comment="cross-sparc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653580" comment="cross-sparc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653581" comment="cross-spu-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653582" comment="cross-x86_64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653453" comment="libctf-nobfd0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653454" comment="libctf0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202016600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-16600</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-16600" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16600" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-16600" ref_url="https://www.suse.com/security/cve/CVE-2020-16600" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:1341-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GVBNGQ7UFOBASFEEHWPUJV3UG7BWUIRH/" source="SUSE-SU"/>
    <description>
    A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newband_writer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16600/">CVE-2020-16600</cve>
	<bugzilla href="https://bugzilla.suse.com/1190175">SUSE bug 1190175</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651543" comment="mupdf-1.12.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651544" comment="mupdf-devel-static-1.12.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1711</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1711" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1711" ref_url="https://www.suse.com/security/cve/CVE-2020-1711" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006662.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006664.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006868.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1514-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006872.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1523-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006874.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006886.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00007.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server while checking the status of a Logical Address Block (LBA) in an iscsi_co_block_status() routine. A remote user could use this flaw to crash the QEMU process, resulting in a denial of service or potential execution of arbitrary code with privileges of the QEMU process on the host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-1711/">CVE-2020-1711</cve>
	<bugzilla href="https://bugzilla.suse.com/1166240">SUSE bug 1166240</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1712</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1712" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1712" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1712" ref_url="https://www.suse.com/security/cve/CVE-2020-1712" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006718.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:46-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:47-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006454.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:48-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:50-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:98-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-March/014232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:99-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-March/014233.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006452.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006455.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006464.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00014.html" source="SUSE-SU"/>
    <description>
    A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1712/">CVE-2020-1712</cve>
	<bugzilla href="https://bugzilla.suse.com/1162108">SUSE bug 1162108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628876" comment="libsystemd0-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628877" comment="libsystemd0-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628879" comment="libudev1-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628880" comment="libudev1-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628881" comment="systemd-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628882" comment="systemd-32bit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628883" comment="systemd-container-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009239132" comment="systemd-container is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628886" comment="systemd-doc-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625972" comment="systemd-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628888" comment="systemd-lang-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625974" comment="systemd-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628889" comment="systemd-sysvinit-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628890" comment="udev-246.13-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1730</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1730" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1730" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1730" ref_url="https://www.suse.com/security/cve/CVE-2020-1730" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006706.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006707.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0967-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0968-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006692.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00018.html" source="SUSE-SU"/>
    <description>
    A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-1730/">CVE-2020-1730</cve>
	<bugzilla href="https://bugzilla.suse.com/1168699">SUSE bug 1168699</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482409" comment="libssh4-0.8.7-10.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151772" comment="libssh4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009482410" comment="libssh4-32bit-0.8.7-10.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153278" comment="libssh4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1733</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1733" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1733" ref_url="https://www.suse.com/security/cve/CVE-2020-1733" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007550.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask 77 &amp;&amp; mkdir -p &lt;dir&gt;"; this operation does not fail if the directory already exists and is owned by another user. An attacker could take advantage to gain control of the become user as the target directory can be retrieved by iterating '/proc/&lt;pid&gt;/cmdline'.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-1733/">CVE-2020-1733</cve>
	<bugzilla href="https://bugzilla.suse.com/1164140">SUSE bug 1164140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171823">SUSE bug 1171823</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201734" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1734</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1734" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1734" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1734" ref_url="https://www.suse.com/security/cve/CVE-2020-1734" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012332.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012331.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run arbitrary commands by overwriting the ansible facts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-24"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2020-1734/">CVE-2020-1734</cve>
	<bugzilla href="https://bugzilla.suse.com/1164139">SUSE bug 1164139</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1735</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1735" ref_url="https://www.suse.com/security/cve/CVE-2020-1735" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-1735/">CVE-2020-1735</cve>
	<bugzilla href="https://bugzilla.suse.com/1164137">SUSE bug 1164137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1736</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1736" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1736" ref_url="https://www.suse.com/security/cve/CVE-2020-1736" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions before the move. This could lead to the disclosure of sensitive data. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.2/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1736/">CVE-2020-1736</cve>
	<bugzilla href="https://bugzilla.suse.com/1164134">SUSE bug 1164134</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1737</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1737" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1737" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1737" ref_url="https://www.suse.com/security/cve/CVE-2020-1737" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip module as the extracted file(s) are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive anywhere in the file system, using a path traversal. This issue is fixed in 2.10.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1737/">CVE-2020-1737</cve>
	<bugzilla href="https://bugzilla.suse.com/1164138">SUSE bug 1164138</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1738</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1738" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1738" ref_url="https://www.suse.com/security/cve/CVE-2020-1738" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the ansible facts file. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-1738/">CVE-2020-1738</cve>
	<bugzilla href="https://bugzilla.suse.com/1164136">SUSE bug 1164136</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202017380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-17380</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-17380" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17380" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-17380" ref_url="https://www.suse.com/security/cve/CVE-2020-17380" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1942-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012710.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1942-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEKBDJBTGKO53MSKM3SRYVUQDWIJ2N5I/" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() routine in hw/sd/sdhci.c. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code with privileges of the QEMU process on the host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-17380/">CVE-2020-17380</cve>
	<bugzilla href="https://bugzilla.suse.com/1175144">SUSE bug 1175144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182282">SUSE bug 1182282</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500101" comment="qemu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625287" comment="qemu-arm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625288" comment="qemu-audio-alsa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625289" comment="qemu-audio-pa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625290" comment="qemu-audio-spice-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500106" comment="qemu-block-curl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625291" comment="qemu-block-dmg-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625292" comment="qemu-block-gluster-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500107" comment="qemu-block-iscsi-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625293" comment="qemu-block-nfs-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500108" comment="qemu-block-rbd-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500109" comment="qemu-block-ssh-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500110" comment="qemu-chardev-baum-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625294" comment="qemu-chardev-spice-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625295" comment="qemu-extra-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500112" comment="qemu-guest-agent-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625296" comment="qemu-hw-display-qxl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625297" comment="qemu-hw-display-virtio-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625298" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625299" comment="qemu-hw-display-virtio-vga-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625300" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625301" comment="qemu-hw-usb-redirect-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625302" comment="qemu-hw-usb-smartcard-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500119" comment="qemu-ipxe-1.0.0+-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625303" comment="qemu-ivshmem-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500120" comment="qemu-ksm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500121" comment="qemu-kvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500122" comment="qemu-lang-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620964" comment="qemu-microvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625304" comment="qemu-ppc-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625305" comment="qemu-s390x-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500125" comment="qemu-seabios-1.14.0_0_g155821a-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500126" comment="qemu-sgabios-8-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500127" comment="qemu-skiboot-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494310" comment="qemu-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500128" comment="qemu-ui-curses-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625306" comment="qemu-ui-gtk-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625307" comment="qemu-ui-opengl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625308" comment="qemu-ui-spice-app-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625309" comment="qemu-ui-spice-core-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500133" comment="qemu-vgabios-1.14.0_0_g155821a-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625310" comment="qemu-vhost-user-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625311" comment="qemu-x86-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1739</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1739" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1739" ref_url="https://www.suse.com/security/cve/CVE-2020-1739" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-1739/">CVE-2020-1739</cve>
	<bugzilla href="https://bugzilla.suse.com/1164133">SUSE bug 1164133</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1740</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1740" ref_url="https://www.suse.com/security/cve/CVE-2020-1740" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.9/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-1740/">CVE-2020-1740</cve>
	<bugzilla href="https://bugzilla.suse.com/1164135">SUSE bug 1164135</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202017437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-17437</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-17437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17437" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-17437" ref_url="https://www.suse.com/security/cve/CVE-2020-17437" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008407.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008619.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011958.html" source="SUSE-SU"/>
		<reference ref_id="TID000019813" ref_url="https://www.suse.com/support/kb/doc/?id=000019813" source="SUSE-SU"/>
    <description>
    An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-23"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-17437/">CVE-2020-17437</cve>
	<bugzilla href="https://bugzilla.suse.com/1179907">SUSE bug 1179907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179908">SUSE bug 1179908</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628520" comment="iscsiuio-0.7.8.6-30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474403" comment="iscsiuio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628521" comment="libopeniscsiusr0_2_0-2.1.4-30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474405" comment="libopeniscsiusr0_2_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628522" comment="open-iscsi-2.1.4-30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474407" comment="open-iscsi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202017438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-17438</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-17438" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17438" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-17438" ref_url="https://www.suse.com/security/cve/CVE-2020-17438" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008407.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008619.html" source="SUSE-SU"/>
		<reference ref_id="TID000019813" ref_url="https://www.suse.com/support/kb/doc/?id=000019813" source="SUSE-SU"/>
    <description>
    An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails to properly validate the total length of an incoming packet specified in its IP header, as well as the fragmentation offset value specified in the IP header. By crafting a packet with specific values of the IP header length and the fragmentation offset, attackers can write into the .bss section of the program (past the statically allocated buffer that is used for storing the fragmented data) and cause a denial of service in uip_reass() in uip.c, or possibly execute arbitrary code on some target architectures.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-17438/">CVE-2020-17438</cve>
	<bugzilla href="https://bugzilla.suse.com/1179907">SUSE bug 1179907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179908">SUSE bug 1179908</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628520" comment="iscsiuio-0.7.8.6-30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474403" comment="iscsiuio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628521" comment="libopeniscsiusr0_2_0-2.1.4-30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474405" comment="libopeniscsiusr0_2_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628522" comment="open-iscsi-2.1.4-30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009474407" comment="open-iscsi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1746</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1746" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1746" ref_url="https://www.suse.com/security/cve/CVE-2020-1746" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when the ldap_attr and ldap_entry community modules are used. The issue discloses the LDAP bind password to stdout or a log file if a playbook task is written using the bind_pw in the parameters field. The highest threat from this vulnerability is data confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1746/">CVE-2020-1746</cve>
	<bugzilla href="https://bugzilla.suse.com/1165393">SUSE bug 1165393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202017489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-17489</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-17489" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17489" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-17489" ref_url="https://www.suse.com/security/cve/CVE-2020-17489" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3132-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007684.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00028.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visible for a brief moment upon a logout. (If the password were never shown in cleartext, only the password length is revealed.)
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-17489/">CVE-2020-17489</cve>
	<bugzilla href="https://bugzilla.suse.com/1175155">SUSE bug 1175155</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629143" comment="gnome-shell-3.34.5-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151510" comment="gnome-shell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684231" comment="gnome-shell-calendar-3.34.5-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151512" comment="gnome-shell-calendar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629145" comment="gnome-shell-lang-3.34.5-8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151513" comment="gnome-shell-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1749</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1749" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006672.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006671.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006720.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2517-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007374.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007381.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2610-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007408.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007419.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007728.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007924.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007925.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008495.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008612.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008777.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008780.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<bugzilla href="https://bugzilla.suse.com/1165629">SUSE bug 1165629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165631">SUSE bug 1165631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177511">SUSE bug 1177511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177513">SUSE bug 1177513</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202017507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-17507</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-17507" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17507" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-17507" ref_url="https://www.suse.com/security/cve/CVE-2020-17507" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007486.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007489.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009927.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1452-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1500-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1530-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1564-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00105.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2142-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QLSRXEMNPXJ5APSF7LPSU6DIH47XLGMI/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmhandler.cpp has a buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-17507/">CVE-2020-17507</cve>
	<bugzilla href="https://bugzilla.suse.com/1176315">SUSE bug 1176315</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628554" comment="libQt5Concurrent5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152276" comment="libQt5Concurrent5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628557" comment="libQt5Core5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152281" comment="libQt5Core5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628560" comment="libQt5DBus5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152286" comment="libQt5DBus5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628563" comment="libQt5Gui5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152297" comment="libQt5Gui5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628568" comment="libQt5Network5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152308" comment="libQt5Network5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628571" comment="libQt5OpenGL5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152316" comment="libQt5OpenGL5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628577" comment="libQt5PrintSupport5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152329" comment="libQt5PrintSupport5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628580" comment="libQt5Sql5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152341" comment="libQt5Sql5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629186" comment="libQt5Sql5-mysql-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152343" comment="libQt5Sql5-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628581" comment="libQt5Sql5-sqlite-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152347" comment="libQt5Sql5-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628584" comment="libQt5Test5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152356" comment="libQt5Test5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628587" comment="libQt5Widgets5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152380" comment="libQt5Widgets5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628589" comment="libQt5Xml5-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152386" comment="libQt5Xml5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629189" comment="libqt5-qtbase-platformtheme-gtk3-5.12.7-4.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177209" comment="libqt5-qtbase-platformtheme-gtk3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1751</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1751" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1751" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1751" ref_url="https://www.suse.com/security/cve/CVE-2020-1751" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006655.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1751/">CVE-2020-1751</cve>
	<bugzilla href="https://bugzilla.suse.com/1167630">SUSE bug 1167630</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1752</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1752" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1752" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1752" ref_url="https://www.suse.com/security/cve/CVE-2020-1752" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:537-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010665.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006655.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010664.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0467-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00006.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1752/">CVE-2020-1752</cve>
	<bugzilla href="https://bugzilla.suse.com/1167631">SUSE bug 1167631</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1753</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1753" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1753" ref_url="https://www.suse.com/security/cve/CVE-2020-1753" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as passwords and tokens are passed to kubectl from the command line, not using an environment variable or an input configuration file. This will disclose passwords and tokens from process list and no_log directive from debug module would not have any effect making these secrets being disclosed on stdout and log files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1753/">CVE-2020-1753</cve>
	<bugzilla href="https://bugzilla.suse.com/1166389">SUSE bug 1166389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673312" comment="ansible-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673313" comment="ansible-doc-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673314" comment="ansible-test-2.9.21-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202017541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-17541</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-17541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17541" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-17541" ref_url="https://www.suse.com/security/cve/CVE-2020-17541" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1957-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1958-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0892-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5QFMY5PC6YGRRPOTKEDLIS6VQ2KCVUDF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1958-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JEVT5FS4C2453YNMGNJH5GEW4YPAD5DS/" source="SUSE-SU"/>
    <description>
    Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-17541/">CVE-2020-17541</cve>
	<bugzilla href="https://bugzilla.suse.com/1186764">SUSE bug 1186764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497910" comment="libjpeg-turbo-1.5.3-5.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152540" comment="libjpeg-turbo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494039" comment="libjpeg62-62.2.0-5.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152541" comment="libjpeg62 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621058" comment="libjpeg62-32bit-62.2.0-5.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166381" comment="libjpeg62-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494040" comment="libjpeg62-devel-62.2.0-5.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152542" comment="libjpeg62-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621061" comment="libjpeg62-devel-32bit-62.2.0-5.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166384" comment="libjpeg62-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625313" comment="libjpeg62-turbo-1.5.3-5.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166386" comment="libjpeg62-turbo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494041" comment="libjpeg8-8.1.2-5.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152543" comment="libjpeg8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495821" comment="libjpeg8-32bit-8.1.2-5.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152544" comment="libjpeg8-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494042" comment="libjpeg8-devel-8.1.2-5.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166390" comment="libjpeg8-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621067" comment="libjpeg8-devel-32bit-8.1.2-5.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166392" comment="libjpeg8-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494043" comment="libturbojpeg0-8.1.2-5.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152545" comment="libturbojpeg0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621070" comment="libturbojpeg0-32bit-8.1.2-5.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166395" comment="libturbojpeg0-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201759" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1759</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1759" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1759" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1759" ref_url="https://www.suse.com/security/cve/CVE-2020-1759" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006679.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00013.html" source="SUSE-SU"/>
    <description>
    A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-1759/">CVE-2020-1759</cve>
	<bugzilla href="https://bugzilla.suse.com/1166403">SUSE bug 1166403</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694875" comment="librados2-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694876" comment="librbd1-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1760</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1760" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1760" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1760" ref_url="https://www.suse.com/security/cve/CVE-2020-1760" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006691.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00013.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-1760/">CVE-2020-1760</cve>
	<bugzilla href="https://bugzilla.suse.com/1166484">SUSE bug 1166484</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694875" comment="librados2-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694876" comment="librbd1-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202018032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-18032</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-18032" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18032" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-18032" ref_url="https://www.suse.com/security/cve/CVE-2020-18032" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1646-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1651-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/018980.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0757-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PTXOIYNDR72EDFNCBXMS56IU6ZLZOJMB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1651-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GTVENJITKPNO2UD2FTT2WK4SNRNME6PL/" source="SUSE-SU"/>
    <description>
    Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-18032/">CVE-2020-18032</cve>
	<bugzilla href="https://bugzilla.suse.com/1185833">SUSE bug 1185833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493926" comment="graphviz-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167847" comment="graphviz is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493927" comment="graphviz-devel-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167849" comment="graphviz-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625252" comment="graphviz-doc-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167851" comment="graphviz-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501511" comment="graphviz-gd-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167853" comment="graphviz-gd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497898" comment="graphviz-gnome-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167855" comment="graphviz-gnome is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625253" comment="graphviz-guile-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167857" comment="graphviz-guile is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625254" comment="graphviz-gvedit-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167859" comment="graphviz-gvedit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625255" comment="graphviz-java-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167861" comment="graphviz-java is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625256" comment="graphviz-lua-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167863" comment="graphviz-lua is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496550" comment="graphviz-perl-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167865" comment="graphviz-perl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625257" comment="graphviz-php-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167867" comment="graphviz-php is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493928" comment="graphviz-plugins-core-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009254560" comment="graphviz-plugins-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501512" comment="graphviz-python-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167871" comment="graphviz-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625258" comment="graphviz-ruby-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167873" comment="graphviz-ruby is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625259" comment="graphviz-smyrna-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167875" comment="graphviz-smyrna is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009499860" comment="graphviz-tcl-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167877" comment="graphviz-tcl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493929" comment="libgraphviz6-2.40.1-6.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009254561" comment="libgraphviz6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202018898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-18898</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-18898" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18898" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-18898" ref_url="https://www.suse.com/security/cve/CVE-2020-18898" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3598-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-October/025597.html" source="SUSE-SU"/>
    <description>
    A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-18"/>
	<updated date="2022-10-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-18898/">CVE-2020-18898</cve>
	<bugzilla href="https://bugzilla.suse.com/1189780">SUSE bug 1189780</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716317" comment="exiv2-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716318" comment="exiv2-lang-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716207" comment="libexiv2-26-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716319" comment="libexiv2-26-32bit-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716208" comment="libexiv2-devel-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716320" comment="libexiv2-doc-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202018899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-18899</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-18899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18899" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-18899" ref_url="https://www.suse.com/security/cve/CVE-2020-18899" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3598-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-October/025597.html" source="SUSE-SU"/>
    <description>
    An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-18"/>
	<updated date="2022-10-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-18899/">CVE-2020-18899</cve>
	<bugzilla href="https://bugzilla.suse.com/1189636">SUSE bug 1189636</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716317" comment="exiv2-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716318" comment="exiv2-lang-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716207" comment="libexiv2-26-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177206" comment="libexiv2-26 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716319" comment="libexiv2-26-32bit-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230276" comment="libexiv2-26-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716208" comment="libexiv2-devel-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009716320" comment="libexiv2-doc-0.26-150000.6.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230277" comment="libexiv2-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202019131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-19131</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-19131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19131" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-19131" ref_url="https://www.suse.com/security/cve/CVE-2020-19131" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010261.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0480-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/" source="SUSE-SU"/>
    <description>
    Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "invertImage()" function in the component "tiffcrop".
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-19131/">CVE-2020-19131</cve>
	<bugzilla href="https://bugzilla.suse.com/1190312">SUSE bug 1190312</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665431" comment="libtiff-devel-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666516" comment="libtiff-devel-32bit-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665432" comment="libtiff5-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665439" comment="libtiff5-32bit-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665440" comment="tiff-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202019609" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-19609</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-19609" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19609" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-19609" ref_url="https://www.suse.com/security/cve/CVE-2020-19609" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:1341-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GVBNGQ7UFOBASFEEHWPUJV3UG7BWUIRH/" source="SUSE-SU"/>
    <description>
    Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function when parsing TIFF files allowing attackers to cause a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-19609/">CVE-2020-19609</cve>
	<bugzilla href="https://bugzilla.suse.com/1190176">SUSE bug 1190176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651543" comment="mupdf-1.12.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651544" comment="mupdf-devel-static-1.12.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202019667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-19667</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-19667" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19667" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-19667" ref_url="https://www.suse.com/security/cve/CVE-2020-19667" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-19667/">CVE-2020-19667</cve>
	<bugzilla href="https://bugzilla.suse.com/1179103">SUSE bug 1179103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201967" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1967</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1967" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1967" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1967" ref_url="https://www.suse.com/security/cve/CVE-2020-1967" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007183.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0945-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html" source="SUSE-SU"/>
    <description>
    Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-1967/">CVE-2020-1967</cve>
	<bugzilla href="https://bugzilla.suse.com/1169407">SUSE bug 1169407</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1971</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1971" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1971" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1971" ref_url="https://www.suse.com/security/cve/CVE-2020-1971" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:767-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007958.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:20-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008164.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:8-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:9-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3720-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007948.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3732-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3762-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007974.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3763-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007976.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008169.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0062-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008175.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2223-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMYUDIGG7RM42AIH4Q3WW4VZGFRAPLQ7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2236-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YDLYD3JFZSOPG5DPXOHFTMZTUOLPOK5J/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2245-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DET3T3KBOIXDZC2VZ5XGHXVGQ54LOAI5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2269-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SGJECGZC6A7C36WKBWL3FKK6U7IGO4OK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0064-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EIIX5B6YLG6I6J4WR546EWZU23BNUSV6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3MAV3V72VVUTVO6VC6SN5XB5EYX3TJWK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0082-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JQ2RC7AEXMLHMCFO7K3XLJO5WMPQXS7V/" source="SUSE-SU"/>
    <description>
    The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the "-crl_download" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-1971/">CVE-2020-1971</cve>
	<bugzilla href="https://bugzilla.suse.com/1179491">SUSE bug 1179491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196179">SUSE bug 1196179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199303">SUSE bug 1199303</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694861" comment="libopenssl1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177120" comment="libopenssl1_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694862" comment="libopenssl1_1-32bit-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177121" comment="libopenssl1_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694863" comment="openssl-1_1-1.1.1d-11.23.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177122" comment="openssl-1_1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20201983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-1983</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-1983" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1983" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-1983" ref_url="https://www.suse.com/security/cve/CVE-2020-1983" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006785.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14396-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006868.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006869.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1514-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006872.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1516-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006873.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1523-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006874.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008673.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0756-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00001.html" source="SUSE-SU"/>
    <description>
    A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-1983/">CVE-2020-1983</cve>
	<bugzilla href="https://bugzilla.suse.com/1170940">SUSE bug 1170940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629864" comment="libslirp0-4.3.1-1.51 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680725" comment="libslirp0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202019860" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-19860</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-19860" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19860" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-19860" ref_url="https://www.suse.com/security/cve/CVE-2020-19860" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0675-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010330.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0675-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4UGIOR5OPYQTAQRTVNXBBH25LGJ74XJJ/" source="SUSE-SU"/>
    <description>
    When ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a heap out of bounds read vulnerability. An attacker can leak information on the heap by constructing a zone file payload.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-19860/">CVE-2020-19860</cve>
	<bugzilla href="https://bugzilla.suse.com/1195057">SUSE bug 1195057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667683" comment="ldns-1.7.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009280952" comment="ldns is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667413" comment="ldns-devel-1.7.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009280953" comment="ldns-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667414" comment="libldns2-1.7.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009280954" comment="libldns2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667447" comment="perl-DNS-LDNS-1.7.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009280955" comment="perl-DNS-LDNS is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667684" comment="python3-ldns-1.7.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009280956" comment="python3-ldns is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202019861" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-19861</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-19861" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19861" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-19861" ref_url="https://www.suse.com/security/cve/CVE-2020-19861" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0675-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010330.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0675-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4UGIOR5OPYQTAQRTVNXBBH25LGJ74XJJ/" source="SUSE-SU"/>
    <description>
    When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldns_rdf_size(salt_rdf) byte data can be copied, causing heap overflow information leakage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-19861/">CVE-2020-19861</cve>
	<bugzilla href="https://bugzilla.suse.com/1195058">SUSE bug 1195058</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667683" comment="ldns-1.7.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009280952" comment="ldns is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667413" comment="ldns-devel-1.7.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009280953" comment="ldns-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667414" comment="libldns2-1.7.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009280954" comment="libldns2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667447" comment="perl-DNS-LDNS-1.7.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009280955" comment="perl-DNS-LDNS is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667684" comment="python3-ldns-1.7.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009280956" comment="python3-ldns is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202020448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-20448</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-20448" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20448" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-20448" ref_url="https://www.suse.com/security/cve/CVE-2020-20448" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    FFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c, which allows a remote malicious user to cause a Denial of Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20448/">CVE-2020-20448</cve>
	<bugzilla href="https://bugzilla.suse.com/1186660">SUSE bug 1186660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202020451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-20451</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-20451" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20451" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-20451" ref_url="https://www.suse.com/security/cve/CVE-2020-20451" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20451/">CVE-2020-20451</cve>
	<bugzilla href="https://bugzilla.suse.com/1186658">SUSE bug 1186658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202020891" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-20891</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-20891" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20891" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-20891" ref_url="https://www.suse.com/security/cve/CVE-2020-20891" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013405.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3521-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/" source="SUSE-SU"/>
    <description>
    Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20891/">CVE-2020-20891</cve>
	<bugzilla href="https://bugzilla.suse.com/1190718">SUSE bug 1190718</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652760" comment="ffmpeg-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652849" comment="ffmpeg-private-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652850" comment="libavcodec-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652744" comment="libavcodec57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652851" comment="libavcodec57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652852" comment="libavdevice-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652761" comment="libavdevice57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652853" comment="libavdevice57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652854" comment="libavfilter-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652762" comment="libavfilter6-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652855" comment="libavfilter6-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652856" comment="libavformat-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652745" comment="libavformat57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652857" comment="libavformat57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652757" comment="libavresample-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652758" comment="libavresample3-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652748" comment="libavresample3-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652749" comment="libavutil-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652750" comment="libavutil55-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652858" comment="libavutil55-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652751" comment="libpostproc-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652752" comment="libpostproc54-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652859" comment="libpostproc54-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652753" comment="libswresample-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652754" comment="libswresample2-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652860" comment="libswresample2-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652755" comment="libswscale-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652756" comment="libswscale4-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652861" comment="libswscale4-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202020892" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-20892</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-20892" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20892" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-20892" ref_url="https://www.suse.com/security/cve/CVE-2020-20892" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013405.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3521-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/" source="SUSE-SU"/>
    <description>
    An issue was discovered in function filter_frame in libavfilter/vf_lenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a division by zero.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20892/">CVE-2020-20892</cve>
	<bugzilla href="https://bugzilla.suse.com/1190719">SUSE bug 1190719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652760" comment="ffmpeg-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652849" comment="ffmpeg-private-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652850" comment="libavcodec-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652744" comment="libavcodec57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652851" comment="libavcodec57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652852" comment="libavdevice-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652761" comment="libavdevice57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652853" comment="libavdevice57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652854" comment="libavfilter-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652762" comment="libavfilter6-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652855" comment="libavfilter6-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652856" comment="libavformat-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652745" comment="libavformat57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652857" comment="libavformat57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652757" comment="libavresample-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652758" comment="libavresample3-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652748" comment="libavresample3-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652749" comment="libavutil-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652750" comment="libavutil55-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652858" comment="libavutil55-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652751" comment="libpostproc-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652752" comment="libpostproc54-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652859" comment="libpostproc54-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652753" comment="libswresample-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652754" comment="libswresample2-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652860" comment="libswresample2-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652755" comment="libswscale-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652756" comment="libswscale4-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652861" comment="libswscale4-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202020895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-20895</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-20895" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20895" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-20895" ref_url="https://www.suse.com/security/cve/CVE-2020-20895" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013405.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3521-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22028. Reason: This candidate is a duplicate of CVE-2020-22028. Notes: All CVE users should reference CVE-2020-22028 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20895/">CVE-2020-20895</cve>
	<bugzilla href="https://bugzilla.suse.com/1190722">SUSE bug 1190722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652760" comment="ffmpeg-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652849" comment="ffmpeg-private-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652850" comment="libavcodec-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652744" comment="libavcodec57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652851" comment="libavcodec57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652852" comment="libavdevice-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652761" comment="libavdevice57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652853" comment="libavdevice57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652854" comment="libavfilter-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652762" comment="libavfilter6-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652855" comment="libavfilter6-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652856" comment="libavformat-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652745" comment="libavformat57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652857" comment="libavformat57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652757" comment="libavresample-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652758" comment="libavresample3-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652748" comment="libavresample3-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652749" comment="libavutil-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652750" comment="libavutil55-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652858" comment="libavutil55-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652751" comment="libpostproc-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652752" comment="libpostproc54-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652859" comment="libpostproc54-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652753" comment="libswresample-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652754" comment="libswresample2-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652860" comment="libswresample2-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652755" comment="libswscale-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652756" comment="libswscale4-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652861" comment="libswscale4-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202020896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-20896</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-20896" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20896" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-20896" ref_url="https://www.suse.com/security/cve/CVE-2020-20896" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013405.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3521-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/" source="SUSE-SU"/>
    <description>
    An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a Null pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20896/">CVE-2020-20896</cve>
	<bugzilla href="https://bugzilla.suse.com/1190723">SUSE bug 1190723</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652760" comment="ffmpeg-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652849" comment="ffmpeg-private-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652850" comment="libavcodec-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652744" comment="libavcodec57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652851" comment="libavcodec57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652852" comment="libavdevice-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652761" comment="libavdevice57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652853" comment="libavdevice57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652854" comment="libavfilter-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652762" comment="libavfilter6-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652855" comment="libavfilter6-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652856" comment="libavformat-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652745" comment="libavformat57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652857" comment="libavformat57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652757" comment="libavresample-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652758" comment="libavresample3-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652748" comment="libavresample3-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652749" comment="libavutil-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652750" comment="libavutil55-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652858" comment="libavutil55-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652751" comment="libpostproc-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652752" comment="libpostproc54-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652859" comment="libpostproc54-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652753" comment="libswresample-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652754" comment="libswresample2-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652860" comment="libswresample2-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652755" comment="libswscale-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652756" comment="libswscale4-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652861" comment="libswscale4-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202020899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-20899</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-20899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20899" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-20899" ref_url="https://www.suse.com/security/cve/CVE-2020-20899" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013405.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3521-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22036. Reason: This candidate is a duplicate of CVE-2020-22036. Notes: All CVE users should reference CVE-2020-22036 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20899/">CVE-2020-20899</cve>
	<bugzilla href="https://bugzilla.suse.com/1190726">SUSE bug 1190726</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652760" comment="ffmpeg-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652849" comment="ffmpeg-private-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652850" comment="libavcodec-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652744" comment="libavcodec57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652851" comment="libavcodec57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652852" comment="libavdevice-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652761" comment="libavdevice57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652853" comment="libavdevice57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652854" comment="libavfilter-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652762" comment="libavfilter6-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652855" comment="libavfilter6-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652856" comment="libavformat-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652745" comment="libavformat57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652857" comment="libavformat57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652757" comment="libavresample-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652758" comment="libavresample3-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652748" comment="libavresample3-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652749" comment="libavutil-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652750" comment="libavutil55-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652858" comment="libavutil55-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652751" comment="libpostproc-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652752" comment="libpostproc54-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652859" comment="libpostproc54-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652753" comment="libswresample-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652754" comment="libswresample2-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652860" comment="libswresample2-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652755" comment="libswscale-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652756" comment="libswscale4-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652861" comment="libswscale4-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202020902" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-20902</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-20902" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20902" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-20902" ref_url="https://www.suse.com/security/cve/CVE-2020-20902" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013405.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3521-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/" source="SUSE-SU"/>
    <description>
    A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in FFmpeg 4.2.1 during computation of the denominator of pseudo-normalized correlation R'(0), that could result in disclosure of information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20902/">CVE-2020-20902</cve>
	<bugzilla href="https://bugzilla.suse.com/1190729">SUSE bug 1190729</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652760" comment="ffmpeg-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652849" comment="ffmpeg-private-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652850" comment="libavcodec-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652744" comment="libavcodec57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652851" comment="libavcodec57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652852" comment="libavdevice-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652761" comment="libavdevice57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652853" comment="libavdevice57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652854" comment="libavfilter-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652762" comment="libavfilter6-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652855" comment="libavfilter6-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652856" comment="libavformat-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652745" comment="libavformat57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652857" comment="libavformat57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652757" comment="libavresample-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652758" comment="libavresample3-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652748" comment="libavresample3-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652749" comment="libavutil-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652750" comment="libavutil55-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652858" comment="libavutil55-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652751" comment="libpostproc-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652752" comment="libpostproc54-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652859" comment="libpostproc54-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652753" comment="libswresample-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652754" comment="libswresample2-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652860" comment="libswresample2-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652755" comment="libswscale-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652756" comment="libswscale4-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652861" comment="libswscale4-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202021041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-21041</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-21041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21041" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-21041" ref_url="https://www.suse.com/security/cve/CVE-2020-21041" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-21041/">CVE-2020-21041</cve>
	<bugzilla href="https://bugzilla.suse.com/1186406">SUSE bug 1186406</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202021529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-21529</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-21529" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21529" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-21529" ref_url="https://www.suse.com/security/cve/CVE-2020-21529" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009685.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1439-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JLSTM3B2XXVZAOO3A7DAIVZCM7BWWB5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1458-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G42543RXBU4MHD2R5PW7KL3I42JAB5VA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1481-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2LJVPVAWYSJP4T7SCIWWVBLSRWKCK2EH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3584-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EBZZA2GBLUHRWOSJZPQSU2KHSYN4PFJK/" source="SUSE-SU"/>
    <description>
    fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-21529/">CVE-2020-21529</cve>
	<bugzilla href="https://bugzilla.suse.com/1190618">SUSE bug 1190618</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653583" comment="transfig-3.2.8b-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172240" comment="transfig is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202021530" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-21530</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-21530" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21530" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-21530" ref_url="https://www.suse.com/security/cve/CVE-2020-21530" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009685.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1439-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JLSTM3B2XXVZAOO3A7DAIVZCM7BWWB5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1458-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G42543RXBU4MHD2R5PW7KL3I42JAB5VA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1481-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2LJVPVAWYSJP4T7SCIWWVBLSRWKCK2EH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3584-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EBZZA2GBLUHRWOSJZPQSU2KHSYN4PFJK/" source="SUSE-SU"/>
    <description>
    fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-21530/">CVE-2020-21530</cve>
	<bugzilla href="https://bugzilla.suse.com/1190615">SUSE bug 1190615</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653583" comment="transfig-3.2.8b-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172240" comment="transfig is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202021531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-21531</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-21531" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21531" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-21531" ref_url="https://www.suse.com/security/cve/CVE-2020-21531" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009685.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1439-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JLSTM3B2XXVZAOO3A7DAIVZCM7BWWB5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1458-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G42543RXBU4MHD2R5PW7KL3I42JAB5VA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1481-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2LJVPVAWYSJP4T7SCIWWVBLSRWKCK2EH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3584-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EBZZA2GBLUHRWOSJZPQSU2KHSYN4PFJK/" source="SUSE-SU"/>
    <description>
    fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-21531/">CVE-2020-21531</cve>
	<bugzilla href="https://bugzilla.suse.com/1190617">SUSE bug 1190617</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653583" comment="transfig-3.2.8b-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172240" comment="transfig is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202021532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-21532</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-21532" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21532" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-21532" ref_url="https://www.suse.com/security/cve/CVE-2020-21532" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009685.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1439-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JLSTM3B2XXVZAOO3A7DAIVZCM7BWWB5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1458-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G42543RXBU4MHD2R5PW7KL3I42JAB5VA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1481-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2LJVPVAWYSJP4T7SCIWWVBLSRWKCK2EH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3584-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EBZZA2GBLUHRWOSJZPQSU2KHSYN4PFJK/" source="SUSE-SU"/>
    <description>
    fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-21532/">CVE-2020-21532</cve>
	<bugzilla href="https://bugzilla.suse.com/1190616">SUSE bug 1190616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653583" comment="transfig-3.2.8b-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172240" comment="transfig is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202021533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-21533</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-21533" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21533" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-21533" ref_url="https://www.suse.com/security/cve/CVE-2020-21533" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009685.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1439-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JLSTM3B2XXVZAOO3A7DAIVZCM7BWWB5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1458-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G42543RXBU4MHD2R5PW7KL3I42JAB5VA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1481-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2LJVPVAWYSJP4T7SCIWWVBLSRWKCK2EH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3584-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EBZZA2GBLUHRWOSJZPQSU2KHSYN4PFJK/" source="SUSE-SU"/>
    <description>
    fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-21533/">CVE-2020-21533</cve>
	<bugzilla href="https://bugzilla.suse.com/1190612">SUSE bug 1190612</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653583" comment="transfig-3.2.8b-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172240" comment="transfig is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202021534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-21534</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-21534" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21534" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-21534" ref_url="https://www.suse.com/security/cve/CVE-2020-21534" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009685.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1439-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JLSTM3B2XXVZAOO3A7DAIVZCM7BWWB5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1458-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G42543RXBU4MHD2R5PW7KL3I42JAB5VA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1481-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2LJVPVAWYSJP4T7SCIWWVBLSRWKCK2EH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3584-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EBZZA2GBLUHRWOSJZPQSU2KHSYN4PFJK/" source="SUSE-SU"/>
    <description>
    fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-21534/">CVE-2020-21534</cve>
	<bugzilla href="https://bugzilla.suse.com/1190611">SUSE bug 1190611</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653583" comment="transfig-3.2.8b-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172240" comment="transfig is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202021535" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-21535</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-21535" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21535" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-21535" ref_url="https://www.suse.com/security/cve/CVE-2020-21535" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009685.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1439-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JLSTM3B2XXVZAOO3A7DAIVZCM7BWWB5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1458-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G42543RXBU4MHD2R5PW7KL3I42JAB5VA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1481-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2LJVPVAWYSJP4T7SCIWWVBLSRWKCK2EH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3584-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EBZZA2GBLUHRWOSJZPQSU2KHSYN4PFJK/" source="SUSE-SU"/>
    <description>
    fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-21535/">CVE-2020-21535</cve>
	<bugzilla href="https://bugzilla.suse.com/1190607">SUSE bug 1190607</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653583" comment="transfig-3.2.8b-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172240" comment="transfig is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202021680" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-21680</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-21680" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21680" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-21680" ref_url="https://www.suse.com/security/cve/CVE-2020-21680" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009682.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1439-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JLSTM3B2XXVZAOO3A7DAIVZCM7BWWB5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1458-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G42543RXBU4MHD2R5PW7KL3I42JAB5VA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1481-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2LJVPVAWYSJP4T7SCIWWVBLSRWKCK2EH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3584-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EBZZA2GBLUHRWOSJZPQSU2KHSYN4PFJK/" source="SUSE-SU"/>
    <description>
    A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-21680/">CVE-2020-21680</cve>
	<bugzilla href="https://bugzilla.suse.com/1189343">SUSE bug 1189343</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653583" comment="transfig-3.2.8b-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172240" comment="transfig is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202021681" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-21681</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-21681" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21681" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-21681" ref_url="https://www.suse.com/security/cve/CVE-2020-21681" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009682.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1439-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JLSTM3B2XXVZAOO3A7DAIVZCM7BWWB5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1458-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G42543RXBU4MHD2R5PW7KL3I42JAB5VA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1481-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2LJVPVAWYSJP4T7SCIWWVBLSRWKCK2EH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3584-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EBZZA2GBLUHRWOSJZPQSU2KHSYN4PFJK/" source="SUSE-SU"/>
    <description>
    A global buffer overflow in the set_color component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-21681/">CVE-2020-21681</cve>
	<bugzilla href="https://bugzilla.suse.com/1189345">SUSE bug 1189345</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653583" comment="transfig-3.2.8b-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172240" comment="transfig is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202021682" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-21682</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-21682" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21682" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-21682" ref_url="https://www.suse.com/security/cve/CVE-2020-21682" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009682.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1439-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JLSTM3B2XXVZAOO3A7DAIVZCM7BWWB5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1458-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G42543RXBU4MHD2R5PW7KL3I42JAB5VA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1481-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2LJVPVAWYSJP4T7SCIWWVBLSRWKCK2EH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3584-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EBZZA2GBLUHRWOSJZPQSU2KHSYN4PFJK/" source="SUSE-SU"/>
    <description>
    A global buffer overflow in the set_fill component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-21682/">CVE-2020-21682</cve>
	<bugzilla href="https://bugzilla.suse.com/1189346">SUSE bug 1189346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653583" comment="transfig-3.2.8b-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172240" comment="transfig is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202021683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-21683</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-21683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21683" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-21683" ref_url="https://www.suse.com/security/cve/CVE-2020-21683" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009682.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1439-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JLSTM3B2XXVZAOO3A7DAIVZCM7BWWB5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1458-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G42543RXBU4MHD2R5PW7KL3I42JAB5VA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1481-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2LJVPVAWYSJP4T7SCIWWVBLSRWKCK2EH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3584-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EBZZA2GBLUHRWOSJZPQSU2KHSYN4PFJK/" source="SUSE-SU"/>
    <description>
    A global buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-21683/">CVE-2020-21683</cve>
	<bugzilla href="https://bugzilla.suse.com/1189325">SUSE bug 1189325</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653583" comment="transfig-3.2.8b-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172240" comment="transfig is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202021688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-21688</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-21688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21688" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-21688" ref_url="https://www.suse.com/security/cve/CVE-2020-21688" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009387.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2919-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHYNSW2TAJSSTZPOYXQXGZDI6LYBWIT4/" source="SUSE-SU"/>
    <description>
    A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-21688/">CVE-2020-21688</cve>
	<bugzilla href="https://bugzilla.suse.com/1189348">SUSE bug 1189348</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631148" comment="ffmpeg-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631287" comment="ffmpeg-private-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631288" comment="libavcodec-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631132" comment="libavcodec57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631289" comment="libavcodec57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631290" comment="libavdevice-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631149" comment="libavdevice57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631291" comment="libavdevice57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631292" comment="libavfilter-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631150" comment="libavfilter6-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631293" comment="libavfilter6-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631294" comment="libavformat-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631133" comment="libavformat57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631295" comment="libavformat57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631145" comment="libavresample-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631146" comment="libavresample3-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631136" comment="libavresample3-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631137" comment="libavutil-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631138" comment="libavutil55-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631296" comment="libavutil55-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631139" comment="libpostproc-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631140" comment="libpostproc54-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631297" comment="libpostproc54-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631141" comment="libswresample-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631142" comment="libswresample2-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631298" comment="libswresample2-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631143" comment="libswscale-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631144" comment="libswscale4-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631299" comment="libswscale4-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202021697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-21697</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-21697" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21697" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-21697" ref_url="https://www.suse.com/security/cve/CVE-2020-21697" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009387.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2919-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHYNSW2TAJSSTZPOYXQXGZDI6LYBWIT4/" source="SUSE-SU"/>
    <description>
    A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a crafted avi file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-21697/">CVE-2020-21697</cve>
	<bugzilla href="https://bugzilla.suse.com/1189350">SUSE bug 1189350</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631148" comment="ffmpeg-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631287" comment="ffmpeg-private-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631288" comment="libavcodec-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631132" comment="libavcodec57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631289" comment="libavcodec57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631290" comment="libavdevice-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631149" comment="libavdevice57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631291" comment="libavdevice57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631292" comment="libavfilter-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631150" comment="libavfilter6-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631293" comment="libavfilter6-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631294" comment="libavformat-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631133" comment="libavformat57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631295" comment="libavformat57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631145" comment="libavresample-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631146" comment="libavresample3-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631136" comment="libavresample3-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631137" comment="libavutil-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631138" comment="libavutil55-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631296" comment="libavutil55-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631139" comment="libpostproc-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631140" comment="libpostproc54-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631297" comment="libpostproc54-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631141" comment="libswresample-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631142" comment="libswresample2-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631298" comment="libswresample2-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631143" comment="libswscale-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631144" comment="libswscale4-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631299" comment="libswscale4-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202021913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-21913</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-21913" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21913" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-21913" ref_url="https://www.suse.com/security/cve/CVE-2020-21913" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2085-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012204.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2229-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012159.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012161.html" source="SUSE-SU"/>
    <description>
    International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-08"/>
	<updated date="2022-12-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-21913/">CVE-2020-21913</cve>
	<bugzilla href="https://bugzilla.suse.com/1193951">SUSE bug 1193951</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707453" comment="icu-65.1-150200.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009163213" comment="icu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707444" comment="libicu-devel-65.1-150200.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152556" comment="libicu-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707500" comment="libicu-devel-32bit-65.1-150200.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009163218" comment="libicu-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707501" comment="libicu-doc-65.1-150200.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009163220" comment="libicu-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707445" comment="libicu-suse65_1-65.1-150200.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710085" comment="libicu-suse65_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707502" comment="libicu-suse65_1-32bit-65.1-150200.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710086" comment="libicu-suse65_1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707450" comment="libicu60_2-60.2-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281166" comment="libicu60_2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707503" comment="libicu60_2-32bit-60.2-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281167" comment="libicu60_2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707451" comment="libicu60_2-bedata-60.2-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281168" comment="libicu60_2-bedata is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707452" comment="libicu60_2-ledata-60.2-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281169" comment="libicu60_2-ledata is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707446" comment="libicu65_1-bedata-65.1-150200.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710087" comment="libicu65_1-bedata is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707447" comment="libicu65_1-ledata-65.1-150200.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710088" comment="libicu65_1-ledata is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022015" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22015</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22015" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22015" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22015" ref_url="https://www.suse.com/security/cve/CVE-2020-22015" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user obtain sensitive information, cause a Denial of Service, or execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22015/">CVE-2020-22015</cve>
	<bugzilla href="https://bugzilla.suse.com/1186596">SUSE bug 1186596</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022016" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22016</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22016" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22016" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22016" ref_url="https://www.suse.com/security/cve/CVE-2020-22016" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might lead to memory corruption and other potential consequences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-22016/">CVE-2020-22016</cve>
	<bugzilla href="https://bugzilla.suse.com/1186598">SUSE bug 1186598</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022017" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22017</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22017" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22017" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22017" ref_url="https://www.suse.com/security/cve/CVE-2020-22017" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which might lead to memory corruption and other potential consequences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22017/">CVE-2020-22017</cve>
	<bugzilla href="https://bugzilla.suse.com/1186600">SUSE bug 1186600</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22019</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22019" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22019" ref_url="https://www.suse.com/security/cve/CVE-2020-22019" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a remote malicious user cause a Denial of Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22019/">CVE-2020-22019</cve>
	<bugzilla href="https://bugzilla.suse.com/1186597">SUSE bug 1186597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22020</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22020" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22020" ref_url="https://www.suse.com/security/cve/CVE-2020-22020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could let a remote malicious user cause a Denial of Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22020/">CVE-2020-22020</cve>
	<bugzilla href="https://bugzilla.suse.com/1186587">SUSE bug 1186587</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22021</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22021" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22021" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22021" ref_url="https://www.suse.com/security/cve/CVE-2020-22021" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remote malicious user cause a Denial of Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22021/">CVE-2020-22021</cve>
	<bugzilla href="https://bugzilla.suse.com/1186586">SUSE bug 1186586</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22022</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22022" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22022" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22022" ref_url="https://www.suse.com/security/cve/CVE-2020-22022" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which might lead to memory corruption and other potential consequences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22022/">CVE-2020-22022</cve>
	<bugzilla href="https://bugzilla.suse.com/1186603">SUSE bug 1186603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022023" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22023</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22023" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22023" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22023" ref_url="https://www.suse.com/security/cve/CVE-2020-22023" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, which might lead to memory corruption and other potential consequences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22023/">CVE-2020-22023</cve>
	<bugzilla href="https://bugzilla.suse.com/1186604">SUSE bug 1186604</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22025</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22025" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22025" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22025" ref_url="https://www.suse.com/security/cve/CVE-2020-22025" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to memory corruption and other potential consequences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22025/">CVE-2020-22025</cve>
	<bugzilla href="https://bugzilla.suse.com/1186605">SUSE bug 1186605</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22026</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22026" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22026" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22026" ref_url="https://www.suse.com/security/cve/CVE-2020-22026" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which could let a remote malicious user cause a Denial of Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22026/">CVE-2020-22026</cve>
	<bugzilla href="https://bugzilla.suse.com/1186583">SUSE bug 1186583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22031</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22031" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22031" ref_url="https://www.suse.com/security/cve/CVE-2020-22031" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, which might lead to memory corruption and other potential consequences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22031/">CVE-2020-22031</cve>
	<bugzilla href="https://bugzilla.suse.com/1186613">SUSE bug 1186613</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22032</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22032" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22032" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22032" ref_url="https://www.suse.com/security/cve/CVE-2020-22032" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which might lead to memory corruption and other potential consequences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22032/">CVE-2020-22032</cve>
	<bugzilla href="https://bugzilla.suse.com/1186614">SUSE bug 1186614</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022033" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22033</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22033" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22033" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22033" ref_url="https://www.suse.com/security/cve/CVE-2020-22033" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, which could let a remote malicious user cause a Denial of Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22033/">CVE-2020-22033</cve>
	<bugzilla href="https://bugzilla.suse.com/1186615">SUSE bug 1186615</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022034" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22034</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22034" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22034" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22034" ref_url="https://www.suse.com/security/cve/CVE-2020-22034" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memory corruption and other potential consequences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22034/">CVE-2020-22034</cve>
	<bugzilla href="https://bugzilla.suse.com/1186616">SUSE bug 1186616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22037</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22037" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22037" ref_url="https://www.suse.com/security/cve/CVE-2020-22037" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013405.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3521-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/" source="SUSE-SU"/>
    <description>
    A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22037/">CVE-2020-22037</cve>
	<bugzilla href="https://bugzilla.suse.com/1186756">SUSE bug 1186756</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652760" comment="ffmpeg-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652849" comment="ffmpeg-private-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652850" comment="libavcodec-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652744" comment="libavcodec57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652851" comment="libavcodec57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652852" comment="libavdevice-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652761" comment="libavdevice57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652853" comment="libavdevice57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652854" comment="libavfilter-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652762" comment="libavfilter6-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652855" comment="libavfilter6-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652856" comment="libavformat-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652745" comment="libavformat57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652857" comment="libavformat57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652757" comment="libavresample-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652758" comment="libavresample3-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652748" comment="libavresample3-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652749" comment="libavutil-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652750" comment="libavutil55-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652858" comment="libavutil55-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652751" comment="libpostproc-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652752" comment="libpostproc54-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652859" comment="libpostproc54-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652753" comment="libswresample-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652754" comment="libswresample2-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652860" comment="libswresample2-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652755" comment="libswscale-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652756" comment="libswscale4-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652861" comment="libswscale4-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22038</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22038" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22038" ref_url="https://www.suse.com/security/cve/CVE-2020-22038" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22038/">CVE-2020-22038</cve>
	<bugzilla href="https://bugzilla.suse.com/1186757">SUSE bug 1186757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22039</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22039" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22039" ref_url="https://www.suse.com/security/cve/CVE-2020-22039" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22039/">CVE-2020-22039</cve>
	<bugzilla href="https://bugzilla.suse.com/1186758">SUSE bug 1186758</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22042</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22042" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22042" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22042" ref_url="https://www.suse.com/security/cve/CVE-2020-22042" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009540.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013405.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3293-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2AYA6VEHMLTAF6FDL4C6CPC73YV5SVJY/" source="SUSE-SU"/>
    <description>
    A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_filter_inouts function in libavfilter/graphparser.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22042/">CVE-2020-22042</cve>
	<bugzilla href="https://bugzilla.suse.com/1186761">SUSE bug 1186761</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634434" comment="ffmpeg-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634529" comment="ffmpeg-private-devel-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634530" comment="libavcodec-devel-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634415" comment="libavcodec57-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634531" comment="libavcodec57-32bit-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634532" comment="libavdevice-devel-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634435" comment="libavdevice57-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634533" comment="libavdevice57-32bit-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634534" comment="libavfilter-devel-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634436" comment="libavfilter6-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634535" comment="libavfilter6-32bit-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634536" comment="libavformat-devel-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634416" comment="libavformat57-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634537" comment="libavformat57-32bit-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634428" comment="libavresample-devel-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634429" comment="libavresample3-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634419" comment="libavresample3-32bit-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634420" comment="libavutil-devel-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634421" comment="libavutil55-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634538" comment="libavutil55-32bit-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634422" comment="libpostproc-devel-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634423" comment="libpostproc54-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634539" comment="libpostproc54-32bit-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634424" comment="libswresample-devel-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634425" comment="libswresample2-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634540" comment="libswresample2-32bit-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634426" comment="libswscale-devel-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634427" comment="libswscale4-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009634541" comment="libswscale4-32bit-3.4.2-11.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022043" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22043</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22043" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22043" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22043" ref_url="https://www.suse.com/security/cve/CVE-2020-22043" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22043/">CVE-2020-22043</cve>
	<bugzilla href="https://bugzilla.suse.com/1186762">SUSE bug 1186762</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22044</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22044" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22044" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22044" ref_url="https://www.suse.com/security/cve/CVE-2020-22044" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2322-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/" source="SUSE-SU"/>
    <description>
    A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22044/">CVE-2020-22044</cve>
	<bugzilla href="https://bugzilla.suse.com/1186763">SUSE bug 1186763</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615906" comment="ffmpeg-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625358" comment="ffmpeg-private-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625359" comment="libavcodec-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615885" comment="libavcodec57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625119" comment="libavcodec57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625360" comment="libavdevice-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615907" comment="libavdevice57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625123" comment="libavdevice57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625361" comment="libavfilter-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615908" comment="libavfilter6-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625127" comment="libavfilter6-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625362" comment="libavformat-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615886" comment="libavformat57-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625131" comment="libavformat57-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625363" comment="libavresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625364" comment="libavresample3-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625135" comment="libavresample3-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615887" comment="libavutil-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615888" comment="libavutil55-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625139" comment="libavutil55-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615889" comment="libpostproc-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615890" comment="libpostproc54-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625143" comment="libpostproc54-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615891" comment="libswresample-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615892" comment="libswresample2-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625147" comment="libswresample2-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615893" comment="libswscale-devel-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615894" comment="libswscale4-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625151" comment="libswscale4-32bit-3.4.2-11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022046" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22046</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22046" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22046" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22046" ref_url="https://www.suse.com/security/cve/CVE-2020-22046" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009387.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2919-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHYNSW2TAJSSTZPOYXQXGZDI6LYBWIT4/" source="SUSE-SU"/>
    <description>
    A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22046/">CVE-2020-22046</cve>
	<bugzilla href="https://bugzilla.suse.com/1186849">SUSE bug 1186849</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631148" comment="ffmpeg-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631287" comment="ffmpeg-private-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631288" comment="libavcodec-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631132" comment="libavcodec57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631289" comment="libavcodec57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631290" comment="libavdevice-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631149" comment="libavdevice57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631291" comment="libavdevice57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631292" comment="libavfilter-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631150" comment="libavfilter6-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631293" comment="libavfilter6-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631294" comment="libavformat-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631133" comment="libavformat57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631295" comment="libavformat57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631145" comment="libavresample-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631146" comment="libavresample3-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631136" comment="libavresample3-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631137" comment="libavutil-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631138" comment="libavutil55-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631296" comment="libavutil55-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631139" comment="libpostproc-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631140" comment="libpostproc54-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631297" comment="libpostproc54-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631141" comment="libswresample-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631142" comment="libswresample2-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631298" comment="libswresample2-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631143" comment="libswscale-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631144" comment="libswscale4-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631299" comment="libswscale4-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22048</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22048" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22048" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22048" ref_url="https://www.suse.com/security/cve/CVE-2020-22048" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009387.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2919-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHYNSW2TAJSSTZPOYXQXGZDI6LYBWIT4/" source="SUSE-SU"/>
    <description>
    A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_frame_pool_get function in framepool.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22048/">CVE-2020-22048</cve>
	<bugzilla href="https://bugzilla.suse.com/1186859">SUSE bug 1186859</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631148" comment="ffmpeg-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631287" comment="ffmpeg-private-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631288" comment="libavcodec-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631132" comment="libavcodec57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631289" comment="libavcodec57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631290" comment="libavdevice-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631149" comment="libavdevice57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631291" comment="libavdevice57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631292" comment="libavfilter-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631150" comment="libavfilter6-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631293" comment="libavfilter6-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631294" comment="libavformat-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631133" comment="libavformat57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631295" comment="libavformat57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631145" comment="libavresample-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631146" comment="libavresample3-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631136" comment="libavresample3-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631137" comment="libavutil-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631138" comment="libavutil55-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631296" comment="libavutil55-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631139" comment="libpostproc-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631140" comment="libpostproc54-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631297" comment="libpostproc54-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631141" comment="libswresample-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631142" comment="libswresample2-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631298" comment="libswresample2-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631143" comment="libswscale-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631144" comment="libswscale4-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631299" comment="libswscale4-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22049</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22049" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22049" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22049" ref_url="https://www.suse.com/security/cve/CVE-2020-22049" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009387.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2919-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHYNSW2TAJSSTZPOYXQXGZDI6LYBWIT4/" source="SUSE-SU"/>
    <description>
    A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvdec.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22049/">CVE-2020-22049</cve>
	<bugzilla href="https://bugzilla.suse.com/1186861">SUSE bug 1186861</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631148" comment="ffmpeg-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631287" comment="ffmpeg-private-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631288" comment="libavcodec-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631132" comment="libavcodec57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631289" comment="libavcodec57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631290" comment="libavdevice-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631149" comment="libavdevice57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631291" comment="libavdevice57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631292" comment="libavfilter-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631150" comment="libavfilter6-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631293" comment="libavfilter6-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631294" comment="libavformat-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631133" comment="libavformat57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631295" comment="libavformat57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631145" comment="libavresample-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631146" comment="libavresample3-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631136" comment="libavresample3-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631137" comment="libavutil-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631138" comment="libavutil55-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631296" comment="libavutil55-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631139" comment="libpostproc-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631140" comment="libpostproc54-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631297" comment="libpostproc54-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631141" comment="libswresample-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631142" comment="libswresample2-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631298" comment="libswresample2-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631143" comment="libswscale-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631144" comment="libswscale4-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631299" comment="libswscale4-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202022054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-22054</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-22054" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22054" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-22054" ref_url="https://www.suse.com/security/cve/CVE-2020-22054" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009387.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2919-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHYNSW2TAJSSTZPOYXQXGZDI6LYBWIT4/" source="SUSE-SU"/>
    <description>
    A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_dict_set function in dict.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22054/">CVE-2020-22054</cve>
	<bugzilla href="https://bugzilla.suse.com/1186863">SUSE bug 1186863</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631148" comment="ffmpeg-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631287" comment="ffmpeg-private-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631288" comment="libavcodec-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631132" comment="libavcodec57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631289" comment="libavcodec57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631290" comment="libavdevice-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631149" comment="libavdevice57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631291" comment="libavdevice57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631292" comment="libavfilter-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631150" comment="libavfilter6-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631293" comment="libavfilter6-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631294" comment="libavformat-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631133" comment="libavformat57-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631295" comment="libavformat57-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631145" comment="libavresample-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631146" comment="libavresample3-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631136" comment="libavresample3-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631137" comment="libavutil-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631138" comment="libavutil55-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631296" comment="libavutil55-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631139" comment="libpostproc-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631140" comment="libpostproc54-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631297" comment="libpostproc54-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631141" comment="libswresample-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631142" comment="libswresample2-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631298" comment="libswresample2-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631143" comment="libswscale-devel-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631144" comment="libswscale4-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631299" comment="libswscale4-32bit-3.4.2-11.8.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202023903" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-23903</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-23903" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-23903" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-23903" ref_url="https://www.suse.com/security/cve/CVE-2020-23903" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009808.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1538-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MVNURRS2JE5OAOZLI3BVLEQCWIGU65MY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3860-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/M3JTMWLYWFOOWVMDAUX2VBB5ZULOV3LY/" source="SUSE-SU"/>
    <description>
    A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-23903/">CVE-2020-23903</cve>
	<bugzilla href="https://bugzilla.suse.com/1192580">SUSE bug 1192580</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009656414" comment="libspeex1-1.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658869" comment="libspeex1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009656461" comment="libspeex1-32bit-1.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658870" comment="libspeex1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009656727" comment="speex-1.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658871" comment="speex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009656415" comment="speex-devel-1.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658872" comment="speex-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24119</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24119" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24119" ref_url="https://www.suse.com/security/cve/CVE-2020-24119" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0813-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V2GCFGL5HHPU3GIC7XYIPIMYFFLH2M4U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0826-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UWDYSXHR43QUBRLPE6NYJWEL7D2AOPPX/" source="SUSE-SU"/>
    <description>
    A heap buffer overflow read was discovered in upx 4.0.0, because the check in p_lx_elf.cpp is not perfect.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-24119/">CVE-2020-24119</cve>
	<bugzilla href="https://bugzilla.suse.com/1186238">SUSE bug 1186238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009511072" comment="upx-3.96-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165780" comment="upx is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24352</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24352" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24352" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24352" ref_url="https://www.suse.com/security/cve/CVE-2020-24352" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2877-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007532.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in QEMU through 5.1.0. An out-of-bounds memory access was found in the ATI VGA device implementation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati_2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-24352/">CVE-2020-24352</cve>
	<bugzilla href="https://bugzilla.suse.com/1175370">SUSE bug 1175370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188609">SUSE bug 1188609</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24370</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24370" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24370" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24370" ref_url="https://www.suse.com/security/cve/CVE-2020-24370" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:254-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:257-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009489.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009490.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009491.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009492.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0962-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OOVDNMRFDTKUTT25LOX5ABPHFFAREA4V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2196-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EASBVV4MIBIGZHO5CD23ITJBJVVHVDEU/" source="SUSE-SU"/>
    <description>
    ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-24370/">CVE-2020-24370</cve>
	<bugzilla href="https://bugzilla.suse.com/1175448">SUSE bug 1175448</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494048" comment="liblua5_3-5-5.3.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244414" comment="liblua5_3-5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494049" comment="liblua5_3-5-32bit-5.3.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244415" comment="liblua5_3-5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494050" comment="lua53-5.3.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244416" comment="lua53 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494051" comment="lua53-devel-5.3.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244417" comment="lua53-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621417" comment="lua53-doc-5.3.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244418" comment="lua53-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24371</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24371" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24371" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24371" ref_url="https://www.suse.com/security/cve/CVE-2020-24371" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:254-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:257-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009489.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009490.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009491.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009492.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0962-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OOVDNMRFDTKUTT25LOX5ABPHFFAREA4V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2196-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EASBVV4MIBIGZHO5CD23ITJBJVVHVDEU/" source="SUSE-SU"/>
    <description>
    lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-24371/">CVE-2020-24371</cve>
	<bugzilla href="https://bugzilla.suse.com/1175449">SUSE bug 1175449</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494048" comment="liblua5_3-5-5.3.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244414" comment="liblua5_3-5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494049" comment="liblua5_3-5-32bit-5.3.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244415" comment="liblua5_3-5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494050" comment="lua53-5.3.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244416" comment="lua53 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494051" comment="lua53-devel-5.3.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244417" comment="lua53-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621417" comment="lua53-doc-5.3.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244418" comment="lua53-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024455" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24455</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24455" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24455" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24455" ref_url="https://www.suse.com/security/cve/CVE-2020-24455" source="SUSE CVE"/>
    <description>
    Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-24455/">CVE-2020-24455</cve>
	<bugzilla href="https://bugzilla.suse.com/1184895">SUSE bug 1184895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628898" comment="libtss2-esys0-2.4.5-1.11 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695701" comment="libtss2-esys0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628900" comment="libtss2-mu0-2.4.5-1.11 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695702" comment="libtss2-mu0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628902" comment="libtss2-sys0-2.4.5-1.11 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695703" comment="libtss2-sys0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24489</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24489" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24489" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24489" ref_url="https://www.suse.com/security/cve/CVE-2020-24489" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14758-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1930-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0876-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LVSPIXHZZESTI3IJTF7URWDUHHXIRWBP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1933-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JL4WBLDZZMRKCJPRBNYNFPGJBJE5OQZO/" source="SUSE-SU"/>
    <description>
    Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24489/">CVE-2020-24489</cve>
	<bugzilla href="https://bugzilla.suse.com/1179839">SUSE bug 1179839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192359">SUSE bug 1192359</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199300">SUSE bug 1199300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201731">SUSE bug 1201731</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494035" comment="ucode-intel-20210525-7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24490</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24490" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24490" ref_url="https://www.suse.com/security/cve/CVE-2020-24490" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2980-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007798.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007842.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007856.html" source="SUSE-SU"/>
		<reference ref_id="TID000019735" ref_url="https://www.suse.com/support/kb/doc/?id=000019735" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2112-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux kernel versions that support BlueZ.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24490/">CVE-2020-24490</cve>
	<bugzilla href="https://bugzilla.suse.com/1177726">SUSE bug 1177726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177727">SUSE bug 1177727</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729187" comment="sca-patterns-base-1.5.0-150300.10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729422" comment="sca-patterns-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729188" comment="sca-patterns-hae-1.5.1-150300.10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729423" comment="sca-patterns-hae is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729189" comment="sca-patterns-sle11-1.5.1-150300.18.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623504" comment="sca-patterns-sle11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729190" comment="sca-patterns-sle12-1.5.1-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729424" comment="sca-patterns-sle12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729191" comment="sca-patterns-sle15-1.5.1-150300.14.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729425" comment="sca-patterns-sle15 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729192" comment="sca-patterns-suma-1.5.0-150300.9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729426" comment="sca-patterns-suma is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729193" comment="sca-server-report-1.5.1-150300.11.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009729427" comment="sca-server-report is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24504</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24504" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24504" ref_url="https://www.suse.com/security/cve/CVE-2020-24504" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:31-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:36-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0131-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0056-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6QFPACQDVZMSNEBMXPO5WA2LCCPKDKR2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0131-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JZDQSQYHYML6BZRVAEZ7TDW2LFGCJEZO/" source="SUSE-SU"/>
    <description>
    Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-24504/">CVE-2020-24504</cve>
	<bugzilla href="https://bugzilla.suse.com/1182404">SUSE bug 1182404</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663141" comment="cluster-md-kmp-64kb-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663207" comment="cluster-md-kmp-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662956" comment="cluster-md-kmp-default-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663142" comment="cluster-md-kmp-preempt-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663143" comment="dlm-kmp-64kb-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663208" comment="dlm-kmp-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662957" comment="dlm-kmp-default-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663144" comment="dlm-kmp-preempt-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663145" comment="dtb-al-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663146" comment="dtb-allwinner-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663147" comment="dtb-altera-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663148" comment="dtb-amd-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663149" comment="dtb-amlogic-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663150" comment="dtb-apm-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663151" comment="dtb-arm-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663152" comment="dtb-broadcom-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663153" comment="dtb-cavium-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663154" comment="dtb-exynos-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663155" comment="dtb-freescale-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663156" comment="dtb-hisilicon-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663157" comment="dtb-lg-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663158" comment="dtb-marvell-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663159" comment="dtb-mediatek-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663160" comment="dtb-nvidia-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663161" comment="dtb-qcom-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663162" comment="dtb-renesas-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663163" comment="dtb-rockchip-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663164" comment="dtb-socionext-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663165" comment="dtb-sprd-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663166" comment="dtb-xilinx-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663167" comment="dtb-zte-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663168" comment="gfs2-kmp-64kb-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663209" comment="gfs2-kmp-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662958" comment="gfs2-kmp-default-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663169" comment="gfs2-kmp-preempt-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662903" comment="kernel-64kb-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662904" comment="kernel-64kb-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663170" comment="kernel-64kb-extra-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663171" comment="kernel-64kb-livepatch-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663172" comment="kernel-64kb-optional-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662938" comment="kernel-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662939" comment="kernel-azure-devel-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663210" comment="kernel-azure-extra-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663211" comment="kernel-azure-livepatch-devel-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663212" comment="kernel-azure-optional-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663173" comment="kernel-debug-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663174" comment="kernel-debug-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663175" comment="kernel-debug-livepatch-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662905" comment="kernel-default-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662906" comment="kernel-default-base-5.3.18-59.40.1.18.25.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663176" comment="kernel-default-base-rebuild-5.3.18-59.40.1.18.25.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662907" comment="kernel-default-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663177" comment="kernel-default-extra-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663178" comment="kernel-default-livepatch-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663179" comment="kernel-default-livepatch-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663180" comment="kernel-default-optional-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662908" comment="kernel-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662940" comment="kernel-devel-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662928" comment="kernel-docs-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663181" comment="kernel-docs-html-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663182" comment="kernel-kvmsmall-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663183" comment="kernel-kvmsmall-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663184" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662909" comment="kernel-macros-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662929" comment="kernel-obs-build-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663185" comment="kernel-obs-qa-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662910" comment="kernel-preempt-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662930" comment="kernel-preempt-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663186" comment="kernel-preempt-extra-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663187" comment="kernel-preempt-livepatch-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663188" comment="kernel-preempt-optional-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662931" comment="kernel-source-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662941" comment="kernel-source-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663189" comment="kernel-source-vanilla-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662932" comment="kernel-syms-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662942" comment="kernel-syms-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662911" comment="kernel-zfcpdump-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663190" comment="kselftests-kmp-64kb-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663213" comment="kselftests-kmp-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663191" comment="kselftests-kmp-default-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663192" comment="kselftests-kmp-preempt-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663193" comment="ocfs2-kmp-64kb-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663214" comment="ocfs2-kmp-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662959" comment="ocfs2-kmp-default-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663194" comment="ocfs2-kmp-preempt-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663195" comment="reiserfs-kmp-64kb-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663215" comment="reiserfs-kmp-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662933" comment="reiserfs-kmp-default-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663196" comment="reiserfs-kmp-preempt-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24511</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24511" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24511" ref_url="https://www.suse.com/security/cve/CVE-2020-24511" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14758-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1930-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0876-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LVSPIXHZZESTI3IJTF7URWDUHHXIRWBP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1933-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JL4WBLDZZMRKCJPRBNYNFPGJBJE5OQZO/" source="SUSE-SU"/>
    <description>
    Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24511/">CVE-2020-24511</cve>
	<bugzilla href="https://bugzilla.suse.com/1179836">SUSE bug 1179836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192360">SUSE bug 1192360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199300">SUSE bug 1199300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201731">SUSE bug 1201731</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494035" comment="ucode-intel-20210525-7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24512</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24512" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24512" ref_url="https://www.suse.com/security/cve/CVE-2020-24512" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14758-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1930-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0876-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LVSPIXHZZESTI3IJTF7URWDUHHXIRWBP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1933-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JL4WBLDZZMRKCJPRBNYNFPGJBJE5OQZO/" source="SUSE-SU"/>
    <description>
    Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-21"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24512/">CVE-2020-24512</cve>
	<bugzilla href="https://bugzilla.suse.com/1179837">SUSE bug 1179837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192360">SUSE bug 1192360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199300">SUSE bug 1199300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201731">SUSE bug 1201731</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494035" comment="ucode-intel-20210525-7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24513</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24513" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24513" ref_url="https://www.suse.com/security/cve/CVE-2020-24513" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14758-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1930-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0876-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LVSPIXHZZESTI3IJTF7URWDUHHXIRWBP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1933-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JL4WBLDZZMRKCJPRBNYNFPGJBJE5OQZO/" source="SUSE-SU"/>
    <description>
    Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24513/">CVE-2020-24513</cve>
	<bugzilla href="https://bugzilla.suse.com/1179833">SUSE bug 1179833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192360">SUSE bug 1192360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199300">SUSE bug 1199300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201731">SUSE bug 1201731</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494035" comment="ucode-intel-20210525-7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24586</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24586" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24586" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24586" ref_url="https://www.suse.com/security/cve/CVE-2020-24586" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:537-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008974.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2406-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009203.html" source="SUSE-SU"/>
		<reference ref_id="TID000020244" ref_url="https://www.suse.com/support/kb/doc/?id=000020244" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0843-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QHZZYSYX2W3FJK73UGT72F2DQ37IKCJY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0947-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/M3WU4VH2HXVC3VLST5RWUW7LUFNSUEIN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24586/">CVE-2020-24586</cve>
	<bugzilla href="https://bugzilla.suse.com/1185859">SUSE bug 1185859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192868">SUSE bug 1192868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24587</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24587" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24587" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24587" ref_url="https://www.suse.com/security/cve/CVE-2020-24587" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:537-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008974.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2406-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009203.html" source="SUSE-SU"/>
		<reference ref_id="TID000020244" ref_url="https://www.suse.com/support/kb/doc/?id=000020244" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0843-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QHZZYSYX2W3FJK73UGT72F2DQ37IKCJY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0947-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/M3WU4VH2HXVC3VLST5RWUW7LUFNSUEIN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24587/">CVE-2020-24587</cve>
	<bugzilla href="https://bugzilla.suse.com/1185859">SUSE bug 1185859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185862">SUSE bug 1185862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192868">SUSE bug 1192868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024588" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24588</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24588" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24588" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24588" ref_url="https://www.suse.com/security/cve/CVE-2020-24588" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:537-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2406-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2422-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009203.html" source="SUSE-SU"/>
		<reference ref_id="TID000020244" ref_url="https://www.suse.com/support/kb/doc/?id=000020244" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0843-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QHZZYSYX2W3FJK73UGT72F2DQ37IKCJY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0947-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/M3WU4VH2HXVC3VLST5RWUW7LUFNSUEIN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2427-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HJIMD6XIKYMKE35TUYXKKYPX4737LEVU/" source="SUSE-SU"/>
    <description>
    The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-24588/">CVE-2020-24588</cve>
	<bugzilla href="https://bugzilla.suse.com/1185861">SUSE bug 1185861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192868">SUSE bug 1192868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199701">SUSE bug 1199701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625875" comment="kernel-debug-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625696" comment="kernel-default-man-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625876" comment="kernel-kvmsmall-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625877" comment="kernel-vanilla-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625878" comment="kernel-vanilla-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625879" comment="kernel-vanilla-devel-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625880" comment="kernel-vanilla-livepatch-devel-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625881" comment="kernel-zfcpdump-man-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24654</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24654" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24654" ref_url="https://www.suse.com/security/cve/CVE-2020-24654" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1310-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00046.html" source="SUSE-SU"/>
    <description>
    In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as demonstrated by a write operation to a user's home directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24654/">CVE-2020-24654</cve>
	<bugzilla href="https://bugzilla.suse.com/1175857">SUSE bug 1175857</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694715" comment="ark-20.04.2-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154016" comment="ark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694716" comment="ark-lang-20.04.2-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009289271" comment="ark-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694717" comment="libkerfuffle20-20.04.2-bp153.2.25 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291475" comment="libkerfuffle20 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24659</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24659" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24659" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24659" ref_url="https://www.suse.com/security/cve/CVE-2020-24659" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007530.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:561-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007620.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:564-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2864-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007605.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1743-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00060.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application's error handling path, where the gnutls_deinit function is called after detecting a handshake failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-24659/">CVE-2020-24659</cve>
	<bugzilla href="https://bugzilla.suse.com/1176181">SUSE bug 1176181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178057">SUSE bug 1178057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628489" comment="gnutls-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628491" comment="libgnutls30-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177128" comment="libgnutls30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628492" comment="libgnutls30-32bit-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009235745" comment="libgnutls30-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24977</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24977" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24977" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24977" ref_url="https://www.suse.com/security/cve/CVE-2020-24977" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007415.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007417.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007409.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2612-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008797.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1465-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00061.html" source="SUSE-SU"/>
    <description>
    GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24977/">CVE-2020-24977</cve>
	<bugzilla href="https://bugzilla.suse.com/1176179">SUSE bug 1176179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191860">SUSE bug 1191860</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202024994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-24994</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-24994" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24994" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-24994" ref_url="https://www.suse.com/security/cve/CVE-2020-24994" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1664-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008803.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0773-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RSOO525LAGINT6Q7P6QLOLGYVE43LSBA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1664-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GYONME5VDBAM5FSXOCS4YFULDEBSTWDL/" source="SUSE-SU"/>
    <description>
    Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-24994/">CVE-2020-24994</cve>
	<bugzilla href="https://bugzilla.suse.com/1184153">SUSE bug 1184153</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495784" comment="libass-devel-0.14.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153843" comment="libass-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495785" comment="libass9-0.14.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177230" comment="libass9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620163" comment="libass9-32bit-0.14.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348105" comment="libass9-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025085" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25085</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25085" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25085" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25085" ref_url="https://www.suse.com/security/cve/CVE-2020-25085" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008916.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1942-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009241.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1043-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1942-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEKBDJBTGKO53MSKM3SRYVUQDWIJ2N5I/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2591-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W3DOLLXJN6UCIAFW2F6437T6CGXJTVQO/" source="SUSE-SU"/>
    <description>
    QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-25085/">CVE-2020-25085</cve>
	<bugzilla href="https://bugzilla.suse.com/1176681">SUSE bug 1176681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182282">SUSE bug 1182282</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500101" comment="qemu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625287" comment="qemu-arm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625288" comment="qemu-audio-alsa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625401" comment="qemu-audio-oss-3.1.1.1-9.30.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266838" comment="qemu-audio-oss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625289" comment="qemu-audio-pa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625290" comment="qemu-audio-spice-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500106" comment="qemu-block-curl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625291" comment="qemu-block-dmg-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625292" comment="qemu-block-gluster-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500107" comment="qemu-block-iscsi-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625293" comment="qemu-block-nfs-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500108" comment="qemu-block-rbd-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500109" comment="qemu-block-ssh-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500110" comment="qemu-chardev-baum-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625294" comment="qemu-chardev-spice-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625295" comment="qemu-extra-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500112" comment="qemu-guest-agent-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625296" comment="qemu-hw-display-qxl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625297" comment="qemu-hw-display-virtio-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625298" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625299" comment="qemu-hw-display-virtio-vga-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625300" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625301" comment="qemu-hw-usb-redirect-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625302" comment="qemu-hw-usb-smartcard-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500119" comment="qemu-ipxe-1.0.0+-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625303" comment="qemu-ivshmem-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500120" comment="qemu-ksm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500121" comment="qemu-kvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500122" comment="qemu-lang-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620964" comment="qemu-microvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625304" comment="qemu-ppc-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625305" comment="qemu-s390x-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500125" comment="qemu-seabios-1.14.0_0_g155821a-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500126" comment="qemu-sgabios-8-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500127" comment="qemu-skiboot-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494310" comment="qemu-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500128" comment="qemu-ui-curses-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625306" comment="qemu-ui-gtk-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625307" comment="qemu-ui-opengl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625308" comment="qemu-ui-spice-app-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625309" comment="qemu-ui-spice-core-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500133" comment="qemu-vgabios-1.14.0_0_g155821a-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625310" comment="qemu-vhost-user-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625311" comment="qemu-x86-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25097</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25097" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25097" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25097" ref_url="https://www.suse.com/security/cve/CVE-2020-25097" source="SUSE CVE"/>
		<reference ref_id="GHSA-jvf6-h9gj-pmj6" ref_url="https://github.com/squid-cache/squid/security/advisories//GHSA-jvf6-h9gj-pmj6" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008917.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1961-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011543.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0879-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/E33JWP5CXQF3EVKKDRECX4457F2ILQP2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1961-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PR56WJLXVU76BKBW5SFENNPKF5TJSS5K/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to perform HTTP Request Smuggling and access services otherwise forbidden by the security controls. This occurs for certain uri_whitespace configuration settings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25097/">CVE-2020-25097</cve>
	<bugzilla href="https://bugzilla.suse.com/1183436">SUSE bug 1183436</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009499923" comment="squid-4.15-5.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25125</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25125" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25125" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25125" ref_url="https://www.suse.com/security/cve/CVE-2020-25125" source="SUSE CVE"/>
    <description>
    GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPGP key, and this key has AEAD preferences. The overflow is caused by a g10/key-check.c error. NOTE: GnuPG 2.3.x is unaffected. GnuPG 2.2.23 is a fixed version.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25125/">CVE-2020-25125</cve>
	<bugzilla href="https://bugzilla.suse.com/1176034">SUSE bug 1176034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628414" comment="dirmngr-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695558" comment="dirmngr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628415" comment="gpg2-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151446" comment="gpg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628416" comment="gpg2-lang-2.2.27-1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151447" comment="gpg2-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2521</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2521" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2521" ref_url="https://www.suse.com/security/cve/CVE-2020-2521" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1586-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2020-2521/">CVE-2020-2521</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25211</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25211" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25211" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25211" ref_url="https://www.suse.com/security/cve/CVE-2020-25211" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008292.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008305.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0241-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GZRN6BW22C4S3GVCJVPHDT4HHTLVGVZE/" source="SUSE-SU"/>
    <description>
    In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, aka CID-1cc5ef91d2ff.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-25211/">CVE-2020-25211</cve>
	<bugzilla href="https://bugzilla.suse.com/1176395">SUSE bug 1176395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192356">SUSE bug 1192356</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25212</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25212" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25212" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007544.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007545.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2908-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2981-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007601.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007706.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007712.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007711.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007707.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007708.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3210-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007728.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007721.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3225-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-November/016787.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007842.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1682-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2112-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<bugzilla href="https://bugzilla.suse.com/1176381">SUSE bug 1176381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176382">SUSE bug 1176382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177027">SUSE bug 1177027</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25219</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25219" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25219" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25219" ref_url="https://www.suse.com/security/cve/CVE-2020-25219" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007543.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007540.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1676-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00033.html" source="SUSE-SU"/>
    <description>
    url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25219/">CVE-2020-25219</cve>
	<bugzilla href="https://bugzilla.suse.com/1176410">SUSE bug 1176410</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628839" comment="libproxy1-0.4.15-12.41 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151762" comment="libproxy1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684239" comment="libproxy1-config-gnome3-0.4.15-12.72 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151763" comment="libproxy1-config-gnome3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694867" comment="libproxy1-config-kde-0.4.15-12.72 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154112" comment="libproxy1-config-kde is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684240" comment="libproxy1-networkmanager-0.4.15-12.72 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151765" comment="libproxy1-networkmanager is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694868" comment="libproxy1-pacrunner-webkit-0.4.15-12.72 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151766" comment="libproxy1-pacrunner-webkit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025284" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25284</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25284" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25284" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25284" ref_url="https://www.suse.com/security/cve/CVE-2020-25284" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007544.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007545.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2908-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1586-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checking for access to rbd devices, which could be leveraged by local attackers to map or unmap rbd block devices, aka CID-f44d04e696fe.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25284/">CVE-2020-25284</cve>
	<bugzilla href="https://bugzilla.suse.com/1176482">SUSE bug 1176482</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25285</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25285" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25285" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25285" ref_url="https://www.suse.com/security/cve/CVE-2020-25285" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007748.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007842.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1906-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W7MTGDUP74HR4XORTRYN7I7MANTKWCGQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2112-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by local attackers to corrupt memory, cause a NULL pointer dereference, or possibly have unspecified other impact, aka CID-17743798d812.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25285/">CVE-2020-25285</cve>
	<bugzilla href="https://bugzilla.suse.com/1176485">SUSE bug 1176485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25592</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25592" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25592" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25592" ref_url="https://www.suse.com/security/cve/CVE-2020-25592" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007718.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14537-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007715.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14562-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14564-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3171-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007719.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007716.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3250-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007714.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007729.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008281.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008329.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008325.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009063.html" source="SUSE-SU"/>
		<reference ref_id="TID000019775" ref_url="https://www.suse.com/support/kb/doc/?id=000019775" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0899-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6E3YAO2VV3WBUS7PMAT26ZYDS3AXW5VL/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2106-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MU6P3NIODW6ZMC4HZLBROO6ZEOD5KAUX/" source="SUSE-SU"/>
    <description>
    In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25592/">CVE-2020-25592</cve>
	<bugzilla href="https://bugzilla.suse.com/1178319">SUSE bug 1178319</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498301" comment="python2-distro-1.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623274" comment="python2-distro is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494057" comment="python3-distro-1.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623275" comment="python3-distro is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025595" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25595</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25595" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25595" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25595" ref_url="https://www.suse.com/security/cve/CVE-2020-25595" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007511.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1608-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xen's MSI handling have been identified that act on unsanitized values read back from device hardware registers. While devices strictly compliant with PCI specifications shouldn't be able to affect these registers, experience shows that it's very common for devices to have out-of-spec "backdoor" operations that can affect the result of these reads. A not fully trusted guest may be able to crash Xen, leading to a Denial of Service (DoS) for the entire system. Privilege escalation and information leaks cannot be excluded. All versions of Xen supporting PCI passthrough are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only guests with passed through PCI devices may be able to leverage the vulnerability. Only systems passing through devices with out-of-spec ("backdoor") functionality can cause issues. Experience shows that such out-of-spec functionality is common; unless you have reason to believe that your device does not have such functionality, it's better to assume that it does.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25595/">CVE-2020-25595</cve>
	<bugzilla href="https://bugzilla.suse.com/1176344">SUSE bug 1176344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25596</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25596" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25596" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25596" ref_url="https://www.suse.com/security/cve/CVE-2020-25596" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007511.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1608-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a #GP fault, and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel-privilege #GP fault (typically fatal) rather than a user-privilege #GP fault (usually converted into SIGSEGV/etc.). Malicious or buggy userspace can crash the guest kernel, resulting in a VM Denial of Service. All versions of Xen from 3.2 onwards are vulnerable. Only x86 systems are vulnerable. ARM platforms are not vulnerable. Only x86 systems that support the SYSENTER instruction in 64bit mode are vulnerable. This is believed to be Intel, Centaur, and Shanghai CPUs. AMD and Hygon CPUs are not believed to be vulnerable. Only x86 PV guests can exploit the vulnerability. x86 PVH / HVM guests cannot exploit the vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25596/">CVE-2020-25596</cve>
	<bugzilla href="https://bugzilla.suse.com/1176345">SUSE bug 1176345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25597</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25597" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25597" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25597" ref_url="https://www.suse.com/security/cve/CVE-2020-25597" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007511.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1608-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. There is mishandling of the constraint that once-valid event channels may not turn invalid. Logic in the handling of event channel operations in Xen assumes that an event channel, once valid, will not become invalid over the life time of a guest. However, operations like the resetting of all event channels may involve decreasing one of the bounds checked when determining validity. This may lead to bug checks triggering, crashing the host. An unprivileged guest may be able to crash Xen, leading to a Denial of Service (DoS) for the entire system. All Xen versions from 4.4 onwards are vulnerable. Xen versions 4.3 and earlier are not vulnerable. Only systems with untrusted guests permitted to create more than the default number of event channels are vulnerable. This number depends on the architecture and type of guest. For 32-bit x86 PV guests, this is 1023; for 64-bit x86 PV guests, and for all ARM guests, this number is 4095. Systems where untrusted guests are limited to fewer than this number are not vulnerable. Note that xl and libxl limit max_event_channels to 1023 by default, so systems using exclusively xl, libvirt+libxl, or their own toolstack based on libxl, and not explicitly setting max_event_channels, are not vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25597/">CVE-2020-25597</cve>
	<bugzilla href="https://bugzilla.suse.com/1176346">SUSE bug 1176346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25598</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25598" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25598" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25598" ref_url="https://www.suse.com/security/cve/CVE-2020-25598" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007499.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1608-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEM_acquire_resource error path. The RCU (Read, Copy, Update) mechanism is a synchronisation primitive. A buggy error path in the XENMEM_acquire_resource exits without releasing an RCU reference, which is conceptually similar to forgetting to unlock a spinlock. A buggy or malicious HVM stubdomain can cause an RCU reference to be leaked. This causes subsequent administration operations, (e.g., CPU offline) to livelock, resulting in a host Denial of Service. The buggy codepath has been present since Xen 4.12. Xen 4.14 and later are vulnerable to the DoS. The side effects are believed to be benign on Xen 4.12 and 4.13, but patches are provided nevertheless. The vulnerability can generally only be exploited by x86 HVM VMs, as these are generally the only type of VM that have a Qemu stubdomain. x86 PV and PVH domains, as well as ARM VMs, typically don't use a stubdomain. Only VMs using HVM stubdomains can exploit the vulnerability. VMs using PV stubdomains, or with emulators running in dom0, cannot exploit the vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25598/">CVE-2020-25598</cve>
	<bugzilla href="https://bugzilla.suse.com/1176341">SUSE bug 1176341</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25599</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25599" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25599" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25599" ref_url="https://www.suse.com/security/cve/CVE-2020-25599" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007511.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1608-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. There are evtchn_reset() race conditions. Uses of EVTCHNOP_reset (potentially by a guest on itself) or XEN_DOMCTL_soft_reset (by itself covered by XSA-77) can lead to the violation of various internal assumptions. This may lead to out of bounds memory accesses or triggering of bug checks. In particular, x86 PV guests may be able to elevate their privilege to that of the host. Host and guest crashes are also possible, leading to a Denial of Service (DoS). Information leaks cannot be ruled out. All Xen versions from 4.5 onwards are vulnerable. Xen versions 4.4 and earlier are not vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25599/">CVE-2020-25599</cve>
	<bugzilla href="https://bugzilla.suse.com/1176349">SUSE bug 1176349</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25600</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25600" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25600" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25600" ref_url="https://www.suse.com/security/cve/CVE-2020-25600" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007511.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1608-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32-bit x86 domains. The so called 2-level event channel model imposes different limits on the number of usable event channels for 32-bit x86 domains vs 64-bit or Arm (either bitness) ones. 32-bit x86 domains can use only 1023 channels, due to limited space in their shared (between guest and Xen) information structure, whereas all other domains can use up to 4095 in this model. The recording of the respective limit during domain initialization, however, has occurred at a time where domains are still deemed to be 64-bit ones, prior to actually honoring respective domain properties. At the point domains get recognized as 32-bit ones, the limit didn't get updated accordingly. Due to this misbehavior in Xen, 32-bit domains (including Domain 0) servicing other domains may observe event channel allocations to succeed when they should really fail. Subsequent use of such event channels would then possibly lead to corruption of other parts of the shared info structure. An unprivileged guest may cause another domain, in particular Domain 0, to misbehave. This may lead to a Denial of Service (DoS) for the entire system. All Xen versions from 4.4 onwards are vulnerable. Xen versions 4.3 and earlier are not vulnerable. Only x86 32-bit domains servicing other domains are vulnerable. Arm systems, as well as x86 64-bit domains, are not vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25600/">CVE-2020-25600</cve>
	<bugzilla href="https://bugzilla.suse.com/1176348">SUSE bug 1176348</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25601</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25601" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25601" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25601" ref_url="https://www.suse.com/security/cve/CVE-2020-25601" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007511.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1608-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchn_reset() / evtchn_destroy(). In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these (when resetting all event channels or when cleaning up after the guest) may take extended periods of time. So far, there was no arrangement for preemption at suitable intervals, allowing a CPU to spend an almost unbounded amount of time in the processing of these operations. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system. All Xen versions are vulnerable in principle. Whether versions 4.3 and older are vulnerable depends on underlying hardware characteristics.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25601/">CVE-2020-25601</cve>
	<bugzilla href="https://bugzilla.suse.com/1176350">SUSE bug 1176350</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25602</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25602" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25602" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25602" ref_url="https://www.suse.com/security/cve/CVE-2020-25602" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007499.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1608-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25602/">CVE-2020-25602</cve>
	<bugzilla href="https://bugzilla.suse.com/1176339">SUSE bug 1176339</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025603" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25603</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25603" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25603" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25603" ref_url="https://www.suse.com/security/cve/CVE-2020-25603" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007511.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1608-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing/allocating an event channel. Event channels control structures can be accessed lockless as long as the port is considered to be valid. Such a sequence is missing an appropriate memory barrier (e.g., smp_*mb()) to prevent both the compiler and CPU from re-ordering access. A malicious guest may be able to cause a hypervisor crash resulting in a Denial of Service (DoS). Information leak and privilege escalation cannot be excluded. Systems running all versions of Xen are affected. Whether a system is vulnerable will depend on the CPU and compiler used to build Xen. For all systems, the presence and the scope of the vulnerability depend on the precise re-ordering performed by the compiler used to build Xen. We have not been able to survey compilers; consequently we cannot say which compiler(s) might produce vulnerable code (with which code generation options). GCC documentation clearly suggests that re-ordering is possible. Arm systems will also be vulnerable if the CPU is able to re-order memory access. Please consult your CPU vendor. x86 systems are only vulnerable if a compiler performs re-ordering.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25603/">CVE-2020-25603</cve>
	<bugzilla href="https://bugzilla.suse.com/1176347">SUSE bug 1176347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025604" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25604</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25604" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25604" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25604" ref_url="https://www.suse.com/security/cve/CVE-2020-25604" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007511.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1608-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers between x86 HVM vCPUs. When migrating timers of x86 HVM guests between its vCPUs, the locking model used allows for a second vCPU of the same guest (also operating on the timers) to release a lock that it didn't acquire. The most likely effect of the issue is a hang or crash of the hypervisor, i.e., a Denial of Service (DoS). All versions of Xen are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only x86 HVM guests can leverage the vulnerability. x86 PV and PVH cannot leverage the vulnerability. Only guests with more than one vCPU can exploit the vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25604/">CVE-2020-25604</cve>
	<bugzilla href="https://bugzilla.suse.com/1176343">SUSE bug 1176343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25613</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25613" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25613" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25613" ref_url="https://www.suse.com/security/cve/CVE-2020-25613" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008549.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009790.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0471-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RPFN4SV4JCJUNCQC4PQZ6VEJN63VN2FS/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigorously. An attacker may potentially exploit this issue to bypass a reverse proxy (which also has a poor header check), which may lead to an HTTP Request Smuggling attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25613/">CVE-2020-25613</cve>
	<bugzilla href="https://bugzilla.suse.com/1177125">SUSE bug 1177125</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25632</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25632" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25632" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25632" ref_url="https://www.suse.com/security/cve/CVE-2020-25632" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0681-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008423.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14659-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-March/018162.html" source="SUSE-SU"/>
		<reference ref_id="TID000019892" ref_url="https://www.suse.com/support/kb/doc/?id=000019892" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0462-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XXPYL42MSKRB4D7LRFMW7PBGGLKSJKPS/" source="SUSE-SU"/>
    <description>
    A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed or a bypass of Secure Boot protections. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25632/">CVE-2020-25632</cve>
	<bugzilla href="https://bugzilla.suse.com/1176711">SUSE bug 1176711</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628504" comment="grub2-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628505" comment="grub2-arm64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623763" comment="grub2-arm64-efi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628506" comment="grub2-i386-pc-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628507" comment="grub2-powerpc-ieee1275-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623765" comment="grub2-powerpc-ieee1275 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628509" comment="grub2-snapper-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628510" comment="grub2-systemd-sleep-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628511" comment="grub2-x86_64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25637</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25637" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25637" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25637" ref_url="https://www.suse.com/security/cve/CVE-2020-25637" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2969-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2970-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3037-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3038-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3039-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007687.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00072.html" source="SUSE-SU"/>
    <description>
    A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects the polkit access control driver. Specifically, clients connecting to the read-write socket with limited ACL permissions could use this flaw to crash the libvirt daemon, resulting in a denial of service, or potentially escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25637/">CVE-2020-25637</cve>
	<bugzilla href="https://bugzilla.suse.com/1174955">SUSE bug 1174955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177155">SUSE bug 1177155</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629873" comment="libvirt-bash-completion-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266806" comment="libvirt-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629874" comment="libvirt-client-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629875" comment="libvirt-daemon-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629876" comment="libvirt-daemon-config-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629878" comment="libvirt-daemon-driver-interface-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629881" comment="libvirt-daemon-driver-network-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629882" comment="libvirt-daemon-driver-nodedev-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629883" comment="libvirt-daemon-driver-nwfilter-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629884" comment="libvirt-daemon-driver-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629885" comment="libvirt-daemon-driver-secret-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629886" comment="libvirt-daemon-driver-storage-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629887" comment="libvirt-daemon-driver-storage-core-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161274" comment="libvirt-daemon-driver-storage-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629888" comment="libvirt-daemon-driver-storage-disk-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161275" comment="libvirt-daemon-driver-storage-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629889" comment="libvirt-daemon-driver-storage-iscsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161276" comment="libvirt-daemon-driver-storage-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629890" comment="libvirt-daemon-driver-storage-iscsi-direct-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631621" comment="libvirt-daemon-driver-storage-iscsi-direct is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629891" comment="libvirt-daemon-driver-storage-logical-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161277" comment="libvirt-daemon-driver-storage-logical is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629892" comment="libvirt-daemon-driver-storage-mpath-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161278" comment="libvirt-daemon-driver-storage-mpath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629893" comment="libvirt-daemon-driver-storage-rbd-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161279" comment="libvirt-daemon-driver-storage-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629894" comment="libvirt-daemon-driver-storage-scsi-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161280" comment="libvirt-daemon-driver-storage-scsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629897" comment="libvirt-daemon-qemu-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628913" comment="libvirt-libs-7.1.0-4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161281" comment="libvirt-libs is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25639</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25639" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25639" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25639" ref_url="https://www.suse.com/security/cve/CVE-2020-25639" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008288.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008292.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008305.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008354.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7EJISS2OPKUSJFJ2BG5ZWHA2Z6H3VQB/" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25639/">CVE-2020-25639</cve>
	<bugzilla href="https://bugzilla.suse.com/1176846">SUSE bug 1176846</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25641</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25641" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25641" ref_url="https://www.suse.com/security/cve/CVE-2020-25641" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007544.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007545.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2980-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007842.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2112-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop, causing a denial of service. This flaw allows a local attacker with basic privileges to issue requests to a block device, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25641/">CVE-2020-25641</cve>
	<bugzilla href="https://bugzilla.suse.com/1177121">SUSE bug 1177121</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25643</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25643" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25643" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25643" ref_url="https://www.suse.com/security/cve/CVE-2020-25643" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007544.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007545.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2980-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007842.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2112-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25643/">CVE-2020-25643</cve>
	<bugzilla href="https://bugzilla.suse.com/1177206">SUSE bug 1177206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177226">SUSE bug 1177226</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25645</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25645" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25645" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2980-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2981-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007601.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007798.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3400-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007803.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3449-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007816.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007842.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007924.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007925.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008495.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008612.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1682-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2112-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<bugzilla href="https://bugzilla.suse.com/1177511">SUSE bug 1177511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177513">SUSE bug 1177513</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025647" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25647</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25647" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25647" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25647" ref_url="https://www.suse.com/security/cve/CVE-2020-25647" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0681-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008423.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14659-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-March/018162.html" source="SUSE-SU"/>
		<reference ref_id="TID000019892" ref_url="https://www.suse.com/support/kb/doc/?id=000019892" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0462-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XXPYL42MSKRB4D7LRFMW7PBGGLKSJKPS/" source="SUSE-SU"/>
    <description>
    A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution allowing a bypass of the Secure Boot mechanism. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25647/">CVE-2020-25647</cve>
	<bugzilla href="https://bugzilla.suse.com/1177883">SUSE bug 1177883</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628504" comment="grub2-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628505" comment="grub2-arm64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623763" comment="grub2-arm64-efi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628506" comment="grub2-i386-pc-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628507" comment="grub2-powerpc-ieee1275-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623765" comment="grub2-powerpc-ieee1275 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628509" comment="grub2-snapper-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628510" comment="grub2-systemd-sleep-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628511" comment="grub2-x86_64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25648</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25648" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25648" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25648" ref_url="https://www.suse.com/security/cve/CVE-2020-25648" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009654.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009674.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25648/">CVE-2020-25648</cve>
	<bugzilla href="https://bugzilla.suse.com/1177917">SUSE bug 1177917</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632974" comment="libfreebl3-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632957" comment="libfreebl3-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632975" comment="libfreebl3-hmac-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632959" comment="libfreebl3-hmac-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244409" comment="libfreebl3-hmac-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632976" comment="libsoftokn3-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632961" comment="libsoftokn3-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632977" comment="libsoftokn3-hmac-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632963" comment="libsoftokn3-hmac-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244411" comment="libsoftokn3-hmac-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632978" comment="mozilla-nspr-4.32-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152084" comment="mozilla-nspr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632965" comment="mozilla-nspr-32bit-4.32-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152812" comment="mozilla-nspr-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632979" comment="mozilla-nspr-devel-4.32-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152085" comment="mozilla-nspr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632980" comment="mozilla-nss-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632968" comment="mozilla-nss-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632981" comment="mozilla-nss-certs-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632970" comment="mozilla-nss-certs-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632982" comment="mozilla-nss-devel-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632983" comment="mozilla-nss-sysinit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633200" comment="mozilla-nss-sysinit-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632984" comment="mozilla-nss-tools-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025649" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25649</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25649" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25649" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25649" ref_url="https://www.suse.com/security/cve/CVE-2020-25649" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008253.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011022.html" source="SUSE-SU"/>
    <description>
    A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-25649/">CVE-2020-25649</cve>
	<bugzilla href="https://bugzilla.suse.com/1177616">SUSE bug 1177616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679451" comment="jackson-annotations-2.13.0-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683869" comment="jackson-annotations is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679452" comment="jackson-annotations-javadoc-2.13.0-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683870" comment="jackson-annotations-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679580" comment="jackson-bom-2.13.0-150200.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683871" comment="jackson-bom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679453" comment="jackson-core-2.13.0-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683872" comment="jackson-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679454" comment="jackson-core-javadoc-2.13.0-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683873" comment="jackson-core-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679455" comment="jackson-databind-2.13.0-150200.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342652" comment="jackson-databind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679456" comment="jackson-databind-javadoc-2.13.0-150200.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342653" comment="jackson-databind-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680193" comment="jackson-dataformat-cbor-2.13.0-150200.3.3.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683874" comment="jackson-dataformat-cbor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680705" comment="jackson-dataformat-smile-2.13.0-150200.3.3.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683875" comment="jackson-dataformat-smile is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680706" comment="jackson-dataformats-binary-2.13.0-150200.3.3.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683876" comment="jackson-dataformats-binary is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680707" comment="jackson-dataformats-binary-javadoc-2.13.0-150200.3.3.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683877" comment="jackson-dataformats-binary-javadoc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25650</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25650" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25650" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25650" ref_url="https://www.suse.com/security/cve/CVE-2020-25650" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009312.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2614-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UU4MAHRZUXACEK4PTFMFULLO5A7INQM5/" source="SUSE-SU"/>
    <description>
    A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine. Any unprivileged local guest user with access to the UNIX domain socket path `/run/spice-vdagentd/spice-vdagent-sock` could use this flaw to perform a memory denial of service for spice-vdagentd or even other processes in the VM system. The highest threat from this vulnerability is to system availability. This flaw affects spice-vdagent versions 0.20 and previous versions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25650/">CVE-2020-25650</cve>
	<bugzilla href="https://bugzilla.suse.com/1177780">SUSE bug 1177780</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626231" comment="spice-vdagent-0.21.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171081" comment="spice-vdagent is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25651</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25651" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25651" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25651" ref_url="https://www.suse.com/security/cve/CVE-2020-25651" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009312.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2614-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UU4MAHRZUXACEK4PTFMFULLO5A7INQM5/" source="SUSE-SU"/>
    <description>
    A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in the client connection of an illegitimate local user in the VM system. Active file transfers from other users could also be interrupted, resulting in a denial of service. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25651/">CVE-2020-25651</cve>
	<bugzilla href="https://bugzilla.suse.com/1177781">SUSE bug 1177781</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626231" comment="spice-vdagent-0.21.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171081" comment="spice-vdagent is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25652</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25652" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25652" ref_url="https://www.suse.com/security/cve/CVE-2020-25652" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009312.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2614-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UU4MAHRZUXACEK4PTFMFULLO5A7INQM5/" source="SUSE-SU"/>
    <description>
    A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket in `/run/spice-vdagentd/spice-vdagent-sock`. Any unprivileged local guest user could use this flaw to prevent legitimate agents from connecting to the spice-vdagentd daemon, resulting in a denial of service. The highest threat from this vulnerability is to system availability. This flaw affects spice-vdagent versions 0.20 and prior.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25652/">CVE-2020-25652</cve>
	<bugzilla href="https://bugzilla.suse.com/1177782">SUSE bug 1177782</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626231" comment="spice-vdagent-0.21.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171081" comment="spice-vdagent is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025653" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25653</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25653" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25653" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25653" ref_url="https://www.suse.com/security/cve/CVE-2020-25653" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009312.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2614-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UU4MAHRZUXACEK4PTFMFULLO5A7INQM5/" source="SUSE-SU"/>
    <description>
    A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest user to become the active agent for spice-vdagentd, possibly resulting in a denial of service or information leakage from the host. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25653/">CVE-2020-25653</cve>
	<bugzilla href="https://bugzilla.suse.com/1177783">SUSE bug 1177783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626231" comment="spice-vdagent-0.21.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171081" comment="spice-vdagent is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025656" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25656</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25656" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25656" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25656" ref_url="https://www.suse.com/security/cve/CVE-2020-25656" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007748.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007842.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1906-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W7MTGDUP74HR4XORTRYN7I7MANTKWCGQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2112-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25656/">CVE-2020-25656</cve>
	<bugzilla href="https://bugzilla.suse.com/1177766">SUSE bug 1177766</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025657" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25657</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25657" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25657" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25657" ref_url="https://www.suse.com/security/cve/CVE-2020-25657" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2562-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2691-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011812.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:2562-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NA4Y6CGBLBMV65UJ765OZDE4RW2SLYUP/" source="SUSE-SU"/>
    <description>
    A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-28"/>
	<updated date="2022-09-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25657/">CVE-2020-25657</cve>
	<bugzilla href="https://bugzilla.suse.com/1178829">SUSE bug 1178829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699889" comment="python-M2Crypto-doc-0.35.2-150000.3.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009702052" comment="python-M2Crypto-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698637" comment="python2-M2Crypto-0.35.2-150000.3.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009702568" comment="python2-M2Crypto is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698529" comment="python3-M2Crypto-0.35.2-150000.3.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009702053" comment="python3-M2Crypto is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25658</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25658" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25658" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25658" ref_url="https://www.suse.com/security/cve/CVE-2020-25658" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012870.html" source="SUSE-SU"/>
    <description>
    A flaw was found in python-rsa, where it is vulnerable to Bleichenbacher timing attacks. This flaw allows an attacker, via the RSA decryption API, to decrypt parts of the ciphertext encrypted with RSA. The highest threat from this vulnerability is to confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-13"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25658/">CVE-2020-25658</cve>
	<bugzilla href="https://bugzilla.suse.com/1178676">SUSE bug 1178676</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009719096" comment="python2-rsa-3.4.2-150000.3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479909" comment="python2-rsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721522" comment="python3-rsa-3.4.2-150000.3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479910" comment="python3-rsa is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25659</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25659" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25659" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25659" ref_url="https://www.suse.com/security/cve/CVE-2020-25659" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:750-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007932.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007933.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:763-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007935.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008603.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:99-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2126-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011618.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011619.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3592-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007905.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007919.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6HSP2RSDCASVO7P7KBUV5GDZ6SYI6L7I/" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25659/">CVE-2020-25659</cve>
	<bugzilla href="https://bugzilla.suse.com/1178168">SUSE bug 1178168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628987" comment="python3-cryptography-2.8-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238251" comment="python3-cryptography is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025660" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25660</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25660" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25660" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25660" ref_url="https://www.suse.com/security/cve/CVE-2020-25660" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007879.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007880.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007881.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007882.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3459-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3473-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3539-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007875.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2057-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SYSOMAWYA2XHVHZ46F322TCUWNWMG4GU/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2082-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VWM64T57Y7IVDW2JWVLZSHPUKMYGWGAH/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus. This flaw allows an attacker with access to the Ceph cluster network to authenticate with the Ceph service via a packet sniffer and perform actions allowed by the Ceph service. This issue is a reintroduction of CVE-2018-1128, affecting the msgr2 protocol. The msgr 2 protocol is used for all communication except older clients that do not support the msgr2 protocol. The msgr1 protocol is not affected. The highest threat from this vulnerability is to confidentiality, integrity, and system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25660/">CVE-2020-25660</cve>
	<bugzilla href="https://bugzilla.suse.com/1177843">SUSE bug 1177843</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694875" comment="librados2-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694876" comment="librbd1-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25664</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25664" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25664" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25664" ref_url="https://www.suse.com/security/cve/CVE-2020-25664" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with a low impact to data integrity. This flaw affects ImageMagick versions prior to 6.9.10-68 and 7.0.8-68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-25664/">CVE-2020-25664</cve>
	<bugzilla href="https://bugzilla.suse.com/1179202">SUSE bug 1179202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179346">SUSE bug 1179346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25665</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25665" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25665" ref_url="https://www.suse.com/security/cve/CVE-2020-25665" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytes_per_row in the call to AcquireQuantumMemory(). This could cause impact to reliability. This flaw affects ImageMagick versions prior to 7.0.8-68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25665/">CVE-2020-25665</cve>
	<bugzilla href="https://bugzilla.suse.com/1179208">SUSE bug 1179208</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025666" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25666</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25666" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25666" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25666" ref_url="https://www.suse.com/security/cve/CVE-2020-25666" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    There are 4 places in HistogramCompare() in MagickCore/histogram.c where an integer overflow is possible during simple math calculations. This occurs in the rgb values and `count` value for a color. The patch uses casts to `ssize_t` type for these calculations, instead of `int`. This flaw could impact application reliability in the event that ImageMagick processes a crafted input file. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25666/">CVE-2020-25666</cve>
	<bugzilla href="https://bugzilla.suse.com/1179212">SUSE bug 1179212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25668</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25668" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25668" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007848.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007924.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3651-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007930.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3698-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007937.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007938.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1906-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W7MTGDUP74HR4XORTRYN7I7MANTKWCGQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2112-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2260-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZYES3O2NEKKQXQ3R5CZOH5YCWJ3TJSKH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<bugzilla href="https://bugzilla.suse.com/1178123">SUSE bug 1178123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196914">SUSE bug 1196914</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25669</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25669" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25669" ref_url="https://www.suse.com/security/cve/CVE-2020-25669" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007937.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007938.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007978.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2034-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7GIP2AYRG3VCHD6CCU4URBF5KVBKIT63/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2161-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ICEKZTGIQ6MSKDFOTIOJ2RLWAWJFPSYA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2260-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZYES3O2NEKKQXQ3R5CZOH5YCWJ3TJSKH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkbd_disconnect, there is still an alias in sunkbd_reinit causing Use After Free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25669/">CVE-2020-25669</cve>
	<bugzilla href="https://bugzilla.suse.com/1178182">SUSE bug 1178182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25670</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25670" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25670" ref_url="https://www.suse.com/security/cve/CVE-2020-25670" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1210-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1211-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1248-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008777.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010183.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0579-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6PH44XSVUZTRLJSGALUUATIQLKQWL4C5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0758-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BUQVIATUWQNZFSV6IFJENJSRWJSP2QHF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free which might lead to privilege escalations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25670/">CVE-2020-25670</cve>
	<bugzilla href="https://bugzilla.suse.com/1178181">SUSE bug 1178181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194680">SUSE bug 1194680</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25671</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25671" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25671" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25671" ref_url="https://www.suse.com/security/cve/CVE-2020-25671" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1210-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1211-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1248-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008777.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010183.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0579-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6PH44XSVUZTRLJSGALUUATIQLKQWL4C5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0758-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BUQVIATUWQNZFSV6IFJENJSRWJSP2QHF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege escalations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25671/">CVE-2020-25671</cve>
	<bugzilla href="https://bugzilla.suse.com/1178181">SUSE bug 1178181</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25672</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25672" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25672" ref_url="https://www.suse.com/security/cve/CVE-2020-25672" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1210-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1211-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1248-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008777.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010183.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0579-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6PH44XSVUZTRLJSGALUUATIQLKQWL4C5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0758-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BUQVIATUWQNZFSV6IFJENJSRWJSP2QHF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    A memory leak vulnerability was found in Linux kernel in llcp_sock_connect
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25672/">CVE-2020-25672</cve>
	<bugzilla href="https://bugzilla.suse.com/1178181">SUSE bug 1178181</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25673</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25673" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25673" ref_url="https://www.suse.com/security/cve/CVE-2020-25673" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1210-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1211-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1248-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008777.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010183.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0579-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6PH44XSVUZTRLJSGALUUATIQLKQWL4C5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0758-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BUQVIATUWQNZFSV6IFJENJSRWJSP2QHF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25673/">CVE-2020-25673</cve>
	<bugzilla href="https://bugzilla.suse.com/1178181">SUSE bug 1178181</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25674</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25674" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25674" ref_url="https://www.suse.com/security/cve/CVE-2020-25674" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    WriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit condition that can allow an out-of-bounds READ via heap-buffer-overflow. This occurs because it is possible for the colormap to have less than 256 valid values but the loop condition will loop 256 times, attempting to pass invalid colormap data to the event logger. The patch replaces the hardcoded 256 value with a call to MagickMin() to ensure the proper value is used. This could impact application availability when a specially crafted input file is processed by ImageMagick. This flaw affects ImageMagick versions prior to 7.0.8-68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25674/">CVE-2020-25674</cve>
	<bugzilla href="https://bugzilla.suse.com/1179223">SUSE bug 1179223</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25675</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25675" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25675" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25675" ref_url="https://www.suse.com/security/cve/CVE-2020-25675" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    In the CropImage() and CropImageToTiles() routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offsets was causing undefined behavior in the form of integer overflow and out-of-range values as reported by UndefinedBehaviorSanitizer. Such issues could cause a negative impact to application availability or other problems related to undefined behavior, in cases where ImageMagick processes untrusted input data. The upstream patch introduces functionality to constrain the pixel offsets and prevent these issues. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25675/">CVE-2020-25675</cve>
	<bugzilla href="https://bugzilla.suse.com/1179240">SUSE bug 1179240</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25676</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25676" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25676" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25676" ref_url="https://www.suse.com/security/cve/CVE-2020-25676" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor() function. These calculations produced undefined behavior in the form of out-of-range and integer overflows, as identified by UndefinedBehaviorSanitizer. These instances of undefined behavior could be triggered by an attacker who is able to supply a crafted input file to be processed by ImageMagick. These issues could impact application availability or potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25676/">CVE-2020-25676</cve>
	<bugzilla href="https://bugzilla.suse.com/1179244">SUSE bug 1179244</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25678</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25678" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25678" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25678" ref_url="https://www.suse.com/security/cve/CVE-2020-25678" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008603.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:99-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008721.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0544-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SNSWJAZ3F5NDFCU63NISQ76JHRYOI25U/" source="SUSE-SU"/>
    <description>
    A flaw was found in Ceph where Ceph stores mgr module passwords in clear text. This issue can be found by searching the mgr logs for Grafana and dashboard, with passwords visible. The highest threat from this vulnerability is to confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25678/">CVE-2020-25678</cve>
	<bugzilla href="https://bugzilla.suse.com/1178905">SUSE bug 1178905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694875" comment="librados2-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694876" comment="librbd1-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025681" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25681</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25681" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25681" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25681" ref_url="https://www.suse.com/security/cve/CVE-2020-25681" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008222.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008226.html" source="SUSE-SU"/>
		<reference ref_id="TID000019824" ref_url="https://www.suse.com/support/kb/doc/?id=000019824" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0124-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GY5KV2WHBZG4XCWVKZOU4DFCHSMBT5KV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6B57K75B7OP43O3RNF2Q6TTLL4DZ6KPE/" source="SUSE-SU"/>
    <description>
    A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with arbitrary data in a heap memory segment, possibly executing code on the machine. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25681/">CVE-2020-25681</cve>
	<bugzilla href="https://bugzilla.suse.com/1177077">SUSE bug 1177077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025682" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25682</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25682" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25682" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25682" ref_url="https://www.suse.com/security/cve/CVE-2020-25682" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008222.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008226.html" source="SUSE-SU"/>
		<reference ref_id="TID000019824" ref_url="https://www.suse.com/support/kb/doc/?id=000019824" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0124-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GY5KV2WHBZG4XCWVKZOU4DFCHSMBT5KV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6B57K75B7OP43O3RNF2Q6TTLL4DZ6KPE/" source="SUSE-SU"/>
    <description>
    A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. An attacker on the network, who can create valid DNS replies, could use this flaw to cause an overflow with arbitrary data in a heap-allocated memory, possibly executing code on the machine. The flaw is in the rfc1035.c:extract_name() function, which writes data to the memory pointed by name assuming MAXDNAME*2 bytes are available in the buffer. However, in some code execution paths, it is possible extract_name() gets passed an offset from the base buffer, thus reducing, in practice, the number of available bytes that can be written in the buffer. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25682/">CVE-2020-25682</cve>
	<bugzilla href="https://bugzilla.suse.com/1177077">SUSE bug 1177077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25683</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25683" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25683" ref_url="https://www.suse.com/security/cve/CVE-2020-25683" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008222.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008226.html" source="SUSE-SU"/>
		<reference ref_id="TID000019824" ref_url="https://www.suse.com/support/kb/doc/?id=000019824" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0124-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GY5KV2WHBZG4XCWVKZOU4DFCHSMBT5KV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6B57K75B7OP43O3RNF2Q6TTLL4DZ6KPE/" source="SUSE-SU"/>
    <description>
    A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap-allocated memory. This flaw is caused by the lack of length checks in rfc1035.c:extract_name(), which could be abused to make the code execute memcpy() with a negative size in get_rdata() and cause a crash in dnsmasq, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25683/">CVE-2020-25683</cve>
	<bugzilla href="https://bugzilla.suse.com/1177077">SUSE bug 1177077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025684" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25684</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25684" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25684" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25684" ref_url="https://www.suse.com/security/cve/CVE-2020-25684" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008222.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008226.html" source="SUSE-SU"/>
		<reference ref_id="TID000019824" ref_url="https://www.suse.com/support/kb/doc/?id=000019824" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0124-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GY5KV2WHBZG4XCWVKZOU4DFCHSMBT5KV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6B57K75B7OP43O3RNF2Q6TTLL4DZ6KPE/" source="SUSE-SU"/>
    <description>
    A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to retrieve the exact forwarded query, substantially reducing the number of attempts an attacker on the network would have to perform to forge a reply and get it accepted by dnsmasq. This issue contrasts with RFC5452, which specifies a query's attributes that all must be used to match a reply. This flaw allows an attacker to perform a DNS Cache Poisoning attack. If chained with CVE-2020-25685 or CVE-2020-25686, the attack complexity of a successful attack is reduced. The highest threat from this vulnerability is to data integrity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-25684/">CVE-2020-25684</cve>
	<bugzilla href="https://bugzilla.suse.com/1177077">SUSE bug 1177077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25685</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25685" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25685" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25685" ref_url="https://www.suse.com/security/cve/CVE-2020-25685" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008222.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008226.html" source="SUSE-SU"/>
		<reference ref_id="TID000019824" ref_url="https://www.suse.com/support/kb/doc/?id=000019824" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0124-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GY5KV2WHBZG4XCWVKZOU4DFCHSMBT5KV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6B57K75B7OP43O3RNF2Q6TTLL4DZ6KPE/" source="SUSE-SU"/>
    <description>
    A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak hash (CRC32 when dnsmasq is compiled without DNSSEC, SHA-1 when it is) this flaw allows an off-path attacker to find several different domains all having the same hash, substantially reducing the number of attempts they would have to perform to forge a reply and get it accepted by dnsmasq. This is in contrast with RFC5452, which specifies that the query name is one of the attributes of a query that must be used to match a reply. This flaw could be abused to perform a DNS Cache Poisoning attack. If chained with CVE-2020-25684 the attack complexity of a successful attack is reduced. The highest threat from this vulnerability is to data integrity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-25685/">CVE-2020-25685</cve>
	<bugzilla href="https://bugzilla.suse.com/1177077">SUSE bug 1177077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25686</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25686" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25686" ref_url="https://www.suse.com/security/cve/CVE-2020-25686" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008222.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008226.html" source="SUSE-SU"/>
		<reference ref_id="TID000019824" ref_url="https://www.suse.com/support/kb/doc/?id=000019824" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0124-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GY5KV2WHBZG4XCWVKZOU4DFCHSMBT5KV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6B57K75B7OP43O3RNF2Q6TTLL4DZ6KPE/" source="SUSE-SU"/>
    <description>
    A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default, a maximum of 150 pending queries can be sent to upstream servers, so there can be at most 150 queries for the same name. This flaw allows an off-path attacker on the network to substantially reduce the number of attempts that it would have to perform to forge a reply and have it accepted by dnsmasq. This issue is mentioned in the "Birthday Attacks" section of RFC5452. If chained with CVE-2020-25684, the attack complexity of a successful attack is reduced. The highest threat from this vulnerability is to data integrity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-25686/">CVE-2020-25686</cve>
	<bugzilla href="https://bugzilla.suse.com/1177077">SUSE bug 1177077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25687</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25687" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25687" ref_url="https://www.suse.com/security/cve/CVE-2020-25687" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008222.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008226.html" source="SUSE-SU"/>
		<reference ref_id="TID000019824" ref_url="https://www.suse.com/support/kb/doc/?id=000019824" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0124-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GY5KV2WHBZG4XCWVKZOU4DFCHSMBT5KV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0129-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6B57K75B7OP43O3RNF2Q6TTLL4DZ6KPE/" source="SUSE-SU"/>
    <description>
    A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. This flaw allows a remote attacker, who can create valid DNS replies, to cause an overflow in a heap-allocated memory. This flaw is caused by the lack of length checks in rfc1035.c:extract_name(), which could be abused to make the code execute memcpy() with a negative size in sort_rrset() and cause a crash in dnsmasq, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25687/">CVE-2020-25687</cve>
	<bugzilla href="https://bugzilla.suse.com/1177077">SUSE bug 1177077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694733" comment="dnsmasq-2.78-7.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25692</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25692" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25692" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25692" ref_url="https://www.suse.com/security/cve/CVE-2020-25692" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007771.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:675-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007772.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:677-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007773.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007774.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007790.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:698-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:705-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:707-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007868.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:709-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007869.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:8-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:9-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007759.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007765.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3314-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007768.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007764.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1918-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3VC65YBN4WMTACGDQE7SGD2ZBAJBKS3O/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1920-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/P5OV5ACOVPOXU3LAYTZRU6RI5XRK4L6W/" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25692/">CVE-2020-25692</cve>
	<bugzilla href="https://bugzilla.suse.com/1178387">SUSE bug 1178387</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25694</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25694" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25694" ref_url="https://www.suse.com/security/cve/CVE-2020-25694" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3425-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007818.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3464-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3476-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3477-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007917.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0175-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008245.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2018-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/POYD3IAUBQT7S6ZQCAA74X6IBDUAZLMP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2019-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G6VHIJFOQOSKIFV42ZSMOTHSA5DC24KC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2028-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L5R6PO3JMYKK4HQNK7WZVASGEFWHGSV5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2029-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IKSTAWI2GC3DK7OVNMCBYUONUED4FQJM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0337-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQQBNVIVAXDZCJPFZE43ZEZ3C6DSC3WG/" source="SUSE-SU"/>
    <description>
    A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25694/">CVE-2020-25694</cve>
	<bugzilla href="https://bugzilla.suse.com/1178667">SUSE bug 1178667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179870">SUSE bug 1179870</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628833" comment="libpq5-13.2-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25695</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25695" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25695" ref_url="https://www.suse.com/security/cve/CVE-2020-25695" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3425-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007818.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3464-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3476-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3477-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007917.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0175-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008245.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2018-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/POYD3IAUBQT7S6ZQCAA74X6IBDUAZLMP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2019-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G6VHIJFOQOSKIFV42ZSMOTHSA5DC24KC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2028-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L5R6PO3JMYKK4HQNK7WZVASGEFWHGSV5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2029-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IKSTAWI2GC3DK7OVNMCBYUONUED4FQJM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0337-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQQBNVIVAXDZCJPFZE43ZEZ3C6DSC3WG/" source="SUSE-SU"/>
    <description>
    A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25695/">CVE-2020-25695</cve>
	<bugzilla href="https://bugzilla.suse.com/1178666">SUSE bug 1178666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628833" comment="libpq5-13.2-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25696</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25696" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25696" ref_url="https://www.suse.com/security/cve/CVE-2020-25696" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3425-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007818.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3464-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3476-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3477-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007917.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0175-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008245.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2018-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/POYD3IAUBQT7S6ZQCAA74X6IBDUAZLMP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2019-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G6VHIJFOQOSKIFV42ZSMOTHSA5DC24KC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2028-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L5R6PO3JMYKK4HQNK7WZVASGEFWHGSV5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2029-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IKSTAWI2GC3DK7OVNMCBYUONUED4FQJM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0337-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQQBNVIVAXDZCJPFZE43ZEZ3C6DSC3WG/" source="SUSE-SU"/>
    <description>
    A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If an interactive psql session uses \gset when querying a compromised server, the attacker can execute arbitrary code as the operating system account running psql. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25696/">CVE-2020-25696</cve>
	<bugzilla href="https://bugzilla.suse.com/1178668">SUSE bug 1178668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179870">SUSE bug 1179870</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628833" comment="libpq5-13.2-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25704</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25704" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25704" ref_url="https://www.suse.com/security/cve/CVE-2020-25704" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007848.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007937.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007938.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007962.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1906-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W7MTGDUP74HR4XORTRYN7I7MANTKWCGQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2034-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7GIP2AYRG3VCHD6CCU4URBF5KVBKIT63/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2112-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2260-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZYES3O2NEKKQXQ3R5CZOH5YCWJ3TJSKH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25704/">CVE-2020-25704</cve>
	<bugzilla href="https://bugzilla.suse.com/1178393">SUSE bug 1178393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25705</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25705" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705" source="SUSE CVE"/>
		<reference ref_id="SADDNS-BLOG" ref_url="https://www.suse.com/c/suse-releases-fix-for-saddns-vulnerability/" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007842.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007848.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3651-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007930.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007977.html" source="SUSE-SU"/>
		<reference ref_id="TID000019786" ref_url="https://www.suse.com/support/kb/doc/?id=000019786" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2034-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7GIP2AYRG3VCHD6CCU4URBF5KVBKIT63/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2112-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2161-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ICEKZTGIQ6MSKDFOTIOJ2RLWAWJFPSYA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well on the Linux Based Products (RUGGEDCOM RM1224: All versions between v5.0 and v6.4, SCALANCE M-800: All versions between v5.0 and v6.4, SCALANCE S615: All versions between v5.0 and v6.4, SCALANCE SC-600: All versions prior to v2.1.3, SCALANCE W1750D: v8.3.0.1, v8.6.0, and v8.7.0, SIMATIC Cloud Connect 7: All versions, SIMATIC MV500 Family: All versions, SIMATIC NET CP 1243-1 (incl. SIPLUS variants): Versions 3.1.39 and later, SIMATIC NET CP 1243-7 LTE EU: Version
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<bugzilla href="https://bugzilla.suse.com/1175721">SUSE bug 1175721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178782">SUSE bug 1178782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178783">SUSE bug 1178783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191790">SUSE bug 1191790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25707</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25707" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25707" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25707" ref_url="https://www.suse.com/security/cve/CVE-2020-25707" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14774-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-August/019812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008916.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1894-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1895-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1942-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008990.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1043-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1942-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEKBDJBTGKO53MSKM3SRYVUQDWIJ2N5I/" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate is a duplicate of CVE-2020-28916
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25707/">CVE-2020-25707</cve>
	<bugzilla href="https://bugzilla.suse.com/1178683">SUSE bug 1178683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179468">SUSE bug 1179468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500101" comment="qemu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625287" comment="qemu-arm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625288" comment="qemu-audio-alsa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625289" comment="qemu-audio-pa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625290" comment="qemu-audio-spice-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500106" comment="qemu-block-curl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625291" comment="qemu-block-dmg-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625292" comment="qemu-block-gluster-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500107" comment="qemu-block-iscsi-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625293" comment="qemu-block-nfs-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500108" comment="qemu-block-rbd-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500109" comment="qemu-block-ssh-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500110" comment="qemu-chardev-baum-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625294" comment="qemu-chardev-spice-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625295" comment="qemu-extra-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500112" comment="qemu-guest-agent-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625296" comment="qemu-hw-display-qxl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625297" comment="qemu-hw-display-virtio-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625298" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625299" comment="qemu-hw-display-virtio-vga-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625300" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625301" comment="qemu-hw-usb-redirect-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625302" comment="qemu-hw-usb-smartcard-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500119" comment="qemu-ipxe-1.0.0+-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625303" comment="qemu-ivshmem-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500120" comment="qemu-ksm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500121" comment="qemu-kvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500122" comment="qemu-lang-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620964" comment="qemu-microvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625304" comment="qemu-ppc-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625305" comment="qemu-s390x-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500125" comment="qemu-seabios-1.14.0_0_g155821a-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500126" comment="qemu-sgabios-8-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500127" comment="qemu-skiboot-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494310" comment="qemu-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500128" comment="qemu-ui-curses-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625306" comment="qemu-ui-gtk-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625307" comment="qemu-ui-opengl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625308" comment="qemu-ui-spice-app-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625309" comment="qemu-ui-spice-core-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500133" comment="qemu-vgabios-1.14.0_0_g155821a-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625310" comment="qemu-vhost-user-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625311" comment="qemu-x86-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25708</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25708" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25708" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25708" ref_url="https://www.suse.com/security/cve/CVE-2020-25708" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007873.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007885.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2025-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RE5HT53OIOVH6753LHKM4XRKGN6GM3K6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2097-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WZC6Q36DSCUZTCIKGNLVYAKNWAL4N775/" source="SUSE-SU"/>
    <description>
    A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25708/">CVE-2020-25708</cve>
	<bugzilla href="https://bugzilla.suse.com/1178682">SUSE bug 1178682</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694892" comment="libvncclient0-0.9.10-bp153.2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25709</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25709" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25709" ref_url="https://www.suse.com/security/cve/CVE-2020-25709" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:22-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:23-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:24-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008211.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:26-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008214.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:50-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:51-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008286.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0128-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008215.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008207.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0102-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HXI5DVBGML6XRCQGGMOYKQFUJDZ2JPS6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0107-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DU5LAY3LI5VYENQTLYA5AGNA47GQHI2B/" source="SUSE-SU"/>
    <description>
    A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25709/">CVE-2020-25709</cve>
	<bugzilla href="https://bugzilla.suse.com/1178909">SUSE bug 1178909</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25710</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25710" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25710" ref_url="https://www.suse.com/security/cve/CVE-2020-25710" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:22-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:23-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:24-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:25-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008211.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:26-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008214.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:50-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:51-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008286.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0128-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008215.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008207.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0102-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HXI5DVBGML6XRCQGGMOYKQFUJDZ2JPS6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0107-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DU5LAY3LI5VYENQTLYA5AGNA47GQHI2B/" source="SUSE-SU"/>
    <description>
    A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25710/">CVE-2020-25710</cve>
	<bugzilla href="https://bugzilla.suse.com/1178909">SUSE bug 1178909</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25712</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25712" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25712" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25712" ref_url="https://www.suse.com/security/cve/CVE-2020-25712" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007898.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3586-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3588-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007896.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3589-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007897.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2147-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HP4SY5GPVDDNTXYVZ6YALLHT7B5RVDBJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LJUVPABDGLSKQJMNPJUJBYOQTIDGD67K/" source="SUSE-SU"/>
    <description>
    A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25712/">CVE-2020-25712</cve>
	<bugzilla href="https://bugzilla.suse.com/1174908">SUSE bug 1174908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177596">SUSE bug 1177596</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629053" comment="xorg-x11-server-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629054" comment="xorg-x11-server-extra-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684245" comment="xorg-x11-server-wayland-1.20.3-22.5.30.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177168" comment="xorg-x11-server-wayland is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25713</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25713" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25713" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25713" ref_url="https://www.suse.com/security/cve/CVE-2020-25713" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:2895-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011990.html" source="SUSE-SU"/>
    <description>
    A malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_common.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-26"/>
	<updated date="2022-08-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25713/">CVE-2020-25713</cve>
	<bugzilla href="https://bugzilla.suse.com/1178593">SUSE bug 1178593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178903">SUSE bug 1178903</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705850" comment="libraptor-devel-2.0.15-150200.9.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009299308" comment="libraptor-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705851" comment="libraptor2-0-2.0.15-150200.9.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151673" comment="libraptor2-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706469" comment="libraptor2-0-32bit-2.0.15-150200.9.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009299309" comment="libraptor2-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705852" comment="raptor-2.0.15-150200.9.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009299310" comment="raptor is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025717" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25717</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25717" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25717" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25717" ref_url="https://www.suse.com/security/cve/CVE-2020-25717" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:28-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:29-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009716.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009714.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009724.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009729.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009750.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009748.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010209.html" source="SUSE-SU"/>
		<reference ref_id="TID000020533" ref_url="https://www.suse.com/support/kb/doc/?id=000020533" source="SUSE-SU"/>
		<reference ref_id="TID000020593" ref_url="https://www.suse.com/support/kb/doc/?id=000020593" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1471-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6W4QSQCTUGSIZCTRT4FGJNMRLZDUZS6Y/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3647-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/36K5HNX67LYX5XOVQRL3MSIC5YSJ5M5W/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3650-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7ZU5FWTEOBTHR7WNP3HEICT3NJTBNV2V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3662-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DJMHDQABDOOUGOYNHF2X56XA57GXYYSN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3674-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZYEHJEQQ7LEL2T775B7QLR3IFR6LJGLZ/" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25717/">CVE-2020-25717</cve>
	<bugzilla href="https://bugzilla.suse.com/1192284">SUSE bug 1192284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192505">SUSE bug 1192505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192601">SUSE bug 1192601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192849">SUSE bug 1192849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193011">SUSE bug 1193011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194049">SUSE bug 1194049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194307">SUSE bug 1194307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195815">SUSE bug 1195815</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196344">SUSE bug 1196344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196717">SUSE bug 1196717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196920">SUSE bug 1196920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205061">SUSE bug 1205061</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661310" comment="ctdb-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661806" comment="ctdb-pcp-pmda-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233089" comment="ctdb-pcp-pmda is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661807" comment="ctdb-tests-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654738" comment="ldb-tools-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152723" comment="ldb-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661380" comment="libdcerpc-binding0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661381" comment="libdcerpc-binding0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661808" comment="libdcerpc-binding0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623625" comment="libdcerpc-binding0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661382" comment="libdcerpc-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661383" comment="libdcerpc-samr-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661384" comment="libdcerpc-samr0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661809" comment="libdcerpc-samr0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661810" comment="libdcerpc-samr0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623626" comment="libdcerpc-samr0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661385" comment="libdcerpc0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661386" comment="libdcerpc0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661811" comment="libdcerpc0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623627" comment="libdcerpc0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654746" comment="libldb-devel-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152732" comment="libldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654747" comment="libldb2-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291435" comment="libldb2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654748" comment="libldb2-32bit-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291436" comment="libldb2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661387" comment="libndr-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661388" comment="libndr-krb5pac-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661389" comment="libndr-krb5pac0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661390" comment="libndr-krb5pac0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661812" comment="libndr-krb5pac0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623628" comment="libndr-krb5pac0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661391" comment="libndr-nbt-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661392" comment="libndr-nbt0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661393" comment="libndr-nbt0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661813" comment="libndr-nbt0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623629" comment="libndr-nbt0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661394" comment="libndr-standard-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661395" comment="libndr-standard0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661396" comment="libndr-standard0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661814" comment="libndr-standard0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623630" comment="libndr-standard0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661512" comment="libndr0-4.11.14+git.313.d4e302805e1-4.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661329" comment="libndr0-32bit-4.11.14+git.313.d4e302805e1-4.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661397" comment="libndr1-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661398" comment="libndr1-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661815" comment="libndr1-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655384" comment="libndr1-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661399" comment="libnetapi-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661816" comment="libnetapi-devel-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009287505" comment="libnetapi-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661817" comment="libnetapi-devel-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623632" comment="libnetapi-devel-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661400" comment="libnetapi0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661401" comment="libnetapi0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661818" comment="libnetapi0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623633" comment="libnetapi0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661402" comment="libsamba-credentials-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661403" comment="libsamba-credentials0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661404" comment="libsamba-credentials0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661819" comment="libsamba-credentials0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623634" comment="libsamba-credentials0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661405" comment="libsamba-errors-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661406" comment="libsamba-errors0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661407" comment="libsamba-errors0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661820" comment="libsamba-errors0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623635" comment="libsamba-errors0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661408" comment="libsamba-hostconfig-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661409" comment="libsamba-hostconfig0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661410" comment="libsamba-hostconfig0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661821" comment="libsamba-hostconfig0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623636" comment="libsamba-hostconfig0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661411" comment="libsamba-passdb-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661412" comment="libsamba-passdb0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661413" comment="libsamba-passdb0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661822" comment="libsamba-passdb0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623637" comment="libsamba-passdb0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661414" comment="libsamba-policy-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661001" comment="libsamba-policy-python-devel-4.9.5+git.477.8163dd03413-3.61.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266817" comment="libsamba-policy-python-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661415" comment="libsamba-policy-python3-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266818" comment="libsamba-policy-python3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009660622" comment="libsamba-policy0-4.9.5+git.477.8163dd03413-3.61.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152746" comment="libsamba-policy0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661002" comment="libsamba-policy0-32bit-4.9.5+git.477.8163dd03413-3.61.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152747" comment="libsamba-policy0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661416" comment="libsamba-policy0-python3-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661823" comment="libsamba-policy0-python3-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266820" comment="libsamba-policy0-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661824" comment="libsamba-policy0-python3-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623639" comment="libsamba-policy0-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661417" comment="libsamba-util-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661418" comment="libsamba-util0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661419" comment="libsamba-util0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661825" comment="libsamba-util0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623640" comment="libsamba-util0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661420" comment="libsamdb-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661421" comment="libsamdb0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661422" comment="libsamdb0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661826" comment="libsamdb0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623641" comment="libsamdb0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661423" comment="libsmbclient-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661424" comment="libsmbclient0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661827" comment="libsmbclient0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661828" comment="libsmbclient0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623642" comment="libsmbclient0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661425" comment="libsmbconf-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661426" comment="libsmbconf0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661427" comment="libsmbconf0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661829" comment="libsmbconf0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623643" comment="libsmbconf0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661428" comment="libsmbldap-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661429" comment="libsmbldap2-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661430" comment="libsmbldap2-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661830" comment="libsmbldap2-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623644" comment="libsmbldap2-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661431" comment="libtevent-util-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661432" comment="libtevent-util0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661433" comment="libtevent-util0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661831" comment="libtevent-util0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623645" comment="libtevent-util0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661434" comment="libwbclient-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661435" comment="libwbclient0-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661436" comment="libwbclient0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661832" comment="libwbclient0-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623646" comment="libwbclient0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654799" comment="python3-ldb-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247520" comment="python3-ldb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655373" comment="python3-ldb-32bit-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247521" comment="python3-ldb-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654800" comment="python3-ldb-devel-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247522" comment="python3-ldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661437" comment="samba-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661450" comment="samba-ad-dc-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266821" comment="samba-ad-dc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661833" comment="samba-ad-dc-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266822" comment="samba-ad-dc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661834" comment="samba-ad-dc-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623647" comment="samba-ad-dc-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661438" comment="samba-ceph-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009162650" comment="samba-ceph is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661439" comment="samba-client-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661835" comment="samba-client-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661836" comment="samba-client-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623648" comment="samba-client-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661440" comment="samba-core-devel-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661837" comment="samba-doc-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661441" comment="samba-dsdb-modules-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177163" comment="samba-dsdb-modules is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661442" comment="samba-gpupdate-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655385" comment="samba-gpupdate is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661443" comment="samba-ldb-ldap-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655386" comment="samba-ldb-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661444" comment="samba-libs-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661445" comment="samba-libs-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661838" comment="samba-libs-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623649" comment="samba-libs-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009660644" comment="samba-libs-python-4.9.5+git.477.8163dd03413-3.61.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266823" comment="samba-libs-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661003" comment="samba-libs-python-32bit-4.9.5+git.477.8163dd03413-3.61.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266824" comment="samba-libs-python-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661446" comment="samba-libs-python3-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661839" comment="samba-libs-python3-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266826" comment="samba-libs-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661840" comment="samba-libs-python3-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623651" comment="samba-libs-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009660646" comment="samba-python-4.9.5+git.477.8163dd03413-3.61.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152777" comment="samba-python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661447" comment="samba-python3-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661841" comment="samba-test-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661448" comment="samba-winbind-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661449" comment="samba-winbind-32bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009661842" comment="samba-winbind-64bit-4.13.13+git.539.fdbc44a8598-3.20.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623652" comment="samba-winbind-64bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25718</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25718" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25718" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25718" ref_url="https://www.suse.com/security/cve/CVE-2020-25718" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009716.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010209.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3647-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/36K5HNX67LYX5XOVQRL3MSIC5YSJ5M5W/" source="SUSE-SU"/>
    <description>
    A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller). This would allow an RODC to print administrator tickets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25718/">CVE-2020-25718</cve>
	<bugzilla href="https://bugzilla.suse.com/1192246">SUSE bug 1192246</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654904" comment="ctdb-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655346" comment="ctdb-pcp-pmda-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233089" comment="ctdb-pcp-pmda is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655347" comment="ctdb-tests-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654738" comment="ldb-tools-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152723" comment="ldb-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654739" comment="libdcerpc-binding0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654740" comment="libdcerpc-binding0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655348" comment="libdcerpc-binding0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623625" comment="libdcerpc-binding0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654741" comment="libdcerpc-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654742" comment="libdcerpc-samr-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654743" comment="libdcerpc-samr0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655349" comment="libdcerpc-samr0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655350" comment="libdcerpc-samr0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623626" comment="libdcerpc-samr0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654744" comment="libdcerpc0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654745" comment="libdcerpc0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655351" comment="libdcerpc0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623627" comment="libdcerpc0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654746" comment="libldb-devel-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152732" comment="libldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654747" comment="libldb2-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291435" comment="libldb2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654748" comment="libldb2-32bit-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291436" comment="libldb2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654749" comment="libndr-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654750" comment="libndr-krb5pac-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654751" comment="libndr-krb5pac0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654752" comment="libndr-krb5pac0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655352" comment="libndr-krb5pac0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623628" comment="libndr-krb5pac0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654753" comment="libndr-nbt-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654754" comment="libndr-nbt0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654755" comment="libndr-nbt0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655353" comment="libndr-nbt0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623629" comment="libndr-nbt0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654756" comment="libndr-standard-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654757" comment="libndr-standard0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654758" comment="libndr-standard0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655354" comment="libndr-standard0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623630" comment="libndr-standard0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654759" comment="libndr1-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654760" comment="libndr1-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655355" comment="libndr1-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655384" comment="libndr1-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654761" comment="libnetapi-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655356" comment="libnetapi-devel-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009287505" comment="libnetapi-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655357" comment="libnetapi-devel-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623632" comment="libnetapi-devel-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654762" comment="libnetapi0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654763" comment="libnetapi0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655358" comment="libnetapi0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623633" comment="libnetapi0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654764" comment="libsamba-credentials-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654765" comment="libsamba-credentials0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654766" comment="libsamba-credentials0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655359" comment="libsamba-credentials0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623634" comment="libsamba-credentials0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654767" comment="libsamba-errors-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654768" comment="libsamba-errors0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654769" comment="libsamba-errors0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655360" comment="libsamba-errors0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623635" comment="libsamba-errors0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654770" comment="libsamba-hostconfig-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654771" comment="libsamba-hostconfig0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654772" comment="libsamba-hostconfig0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655361" comment="libsamba-hostconfig0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623636" comment="libsamba-hostconfig0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654773" comment="libsamba-passdb-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654774" comment="libsamba-passdb0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654775" comment="libsamba-passdb0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655362" comment="libsamba-passdb0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623637" comment="libsamba-passdb0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654776" comment="libsamba-policy-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654777" comment="libsamba-policy-python3-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266818" comment="libsamba-policy-python3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654778" comment="libsamba-policy0-python3-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655363" comment="libsamba-policy0-python3-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266820" comment="libsamba-policy0-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655364" comment="libsamba-policy0-python3-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623639" comment="libsamba-policy0-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654779" comment="libsamba-util-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654780" comment="libsamba-util0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654781" comment="libsamba-util0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655365" comment="libsamba-util0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623640" comment="libsamba-util0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654782" comment="libsamdb-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654783" comment="libsamdb0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654784" comment="libsamdb0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655366" comment="libsamdb0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623641" comment="libsamdb0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654785" comment="libsmbclient-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654786" comment="libsmbclient0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655367" comment="libsmbclient0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655368" comment="libsmbclient0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623642" comment="libsmbclient0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654787" comment="libsmbconf-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654788" comment="libsmbconf0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654789" comment="libsmbconf0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655369" comment="libsmbconf0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623643" comment="libsmbconf0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654790" comment="libsmbldap-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654791" comment="libsmbldap2-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654792" comment="libsmbldap2-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655370" comment="libsmbldap2-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623644" comment="libsmbldap2-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654793" comment="libtevent-util-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654794" comment="libtevent-util0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654795" comment="libtevent-util0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655371" comment="libtevent-util0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623645" comment="libtevent-util0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654796" comment="libwbclient-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654797" comment="libwbclient0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654798" comment="libwbclient0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655372" comment="libwbclient0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623646" comment="libwbclient0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654799" comment="python3-ldb-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247520" comment="python3-ldb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655373" comment="python3-ldb-32bit-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247521" comment="python3-ldb-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654800" comment="python3-ldb-devel-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247522" comment="python3-ldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654801" comment="samba-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654815" comment="samba-ad-dc-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266821" comment="samba-ad-dc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655374" comment="samba-ad-dc-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266822" comment="samba-ad-dc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655375" comment="samba-ad-dc-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623647" comment="samba-ad-dc-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654802" comment="samba-ceph-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009162650" comment="samba-ceph is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654803" comment="samba-client-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655376" comment="samba-client-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655377" comment="samba-client-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623648" comment="samba-client-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654804" comment="samba-core-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655378" comment="samba-doc-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654805" comment="samba-dsdb-modules-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177163" comment="samba-dsdb-modules is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654806" comment="samba-gpupdate-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655385" comment="samba-gpupdate is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654807" comment="samba-ldb-ldap-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655386" comment="samba-ldb-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654808" comment="samba-libs-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654809" comment="samba-libs-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655379" comment="samba-libs-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623649" comment="samba-libs-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654810" comment="samba-libs-python3-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655380" comment="samba-libs-python3-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266826" comment="samba-libs-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655381" comment="samba-libs-python3-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623651" comment="samba-libs-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654811" comment="samba-python3-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655382" comment="samba-test-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654812" comment="samba-winbind-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654813" comment="samba-winbind-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655383" comment="samba-winbind-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623652" comment="samba-winbind-64bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025719" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25719</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25719" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25719" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25719" ref_url="https://www.suse.com/security/cve/CVE-2020-25719" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009716.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010209.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3647-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/36K5HNX67LYX5XOVQRL3MSIC5YSJ5M5W/" source="SUSE-SU"/>
    <description>
    A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25719/">CVE-2020-25719</cve>
	<bugzilla href="https://bugzilla.suse.com/1192247">SUSE bug 1192247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654904" comment="ctdb-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655346" comment="ctdb-pcp-pmda-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233089" comment="ctdb-pcp-pmda is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655347" comment="ctdb-tests-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654738" comment="ldb-tools-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152723" comment="ldb-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654739" comment="libdcerpc-binding0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654740" comment="libdcerpc-binding0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655348" comment="libdcerpc-binding0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623625" comment="libdcerpc-binding0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654741" comment="libdcerpc-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654742" comment="libdcerpc-samr-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654743" comment="libdcerpc-samr0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655349" comment="libdcerpc-samr0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655350" comment="libdcerpc-samr0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623626" comment="libdcerpc-samr0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654744" comment="libdcerpc0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654745" comment="libdcerpc0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655351" comment="libdcerpc0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623627" comment="libdcerpc0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654746" comment="libldb-devel-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152732" comment="libldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654747" comment="libldb2-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291435" comment="libldb2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654748" comment="libldb2-32bit-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291436" comment="libldb2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654749" comment="libndr-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654750" comment="libndr-krb5pac-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654751" comment="libndr-krb5pac0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654752" comment="libndr-krb5pac0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655352" comment="libndr-krb5pac0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623628" comment="libndr-krb5pac0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654753" comment="libndr-nbt-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654754" comment="libndr-nbt0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654755" comment="libndr-nbt0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655353" comment="libndr-nbt0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623629" comment="libndr-nbt0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654756" comment="libndr-standard-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654757" comment="libndr-standard0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654758" comment="libndr-standard0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655354" comment="libndr-standard0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623630" comment="libndr-standard0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654759" comment="libndr1-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654760" comment="libndr1-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655355" comment="libndr1-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655384" comment="libndr1-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654761" comment="libnetapi-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655356" comment="libnetapi-devel-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009287505" comment="libnetapi-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655357" comment="libnetapi-devel-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623632" comment="libnetapi-devel-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654762" comment="libnetapi0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654763" comment="libnetapi0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655358" comment="libnetapi0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623633" comment="libnetapi0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654764" comment="libsamba-credentials-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654765" comment="libsamba-credentials0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654766" comment="libsamba-credentials0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655359" comment="libsamba-credentials0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623634" comment="libsamba-credentials0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654767" comment="libsamba-errors-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654768" comment="libsamba-errors0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654769" comment="libsamba-errors0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655360" comment="libsamba-errors0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623635" comment="libsamba-errors0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654770" comment="libsamba-hostconfig-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654771" comment="libsamba-hostconfig0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654772" comment="libsamba-hostconfig0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655361" comment="libsamba-hostconfig0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623636" comment="libsamba-hostconfig0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654773" comment="libsamba-passdb-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654774" comment="libsamba-passdb0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654775" comment="libsamba-passdb0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655362" comment="libsamba-passdb0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623637" comment="libsamba-passdb0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654776" comment="libsamba-policy-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654777" comment="libsamba-policy-python3-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266818" comment="libsamba-policy-python3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654778" comment="libsamba-policy0-python3-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655363" comment="libsamba-policy0-python3-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266820" comment="libsamba-policy0-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655364" comment="libsamba-policy0-python3-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623639" comment="libsamba-policy0-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654779" comment="libsamba-util-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654780" comment="libsamba-util0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654781" comment="libsamba-util0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655365" comment="libsamba-util0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623640" comment="libsamba-util0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654782" comment="libsamdb-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654783" comment="libsamdb0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654784" comment="libsamdb0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655366" comment="libsamdb0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623641" comment="libsamdb0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654785" comment="libsmbclient-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654786" comment="libsmbclient0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655367" comment="libsmbclient0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655368" comment="libsmbclient0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623642" comment="libsmbclient0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654787" comment="libsmbconf-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654788" comment="libsmbconf0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654789" comment="libsmbconf0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655369" comment="libsmbconf0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623643" comment="libsmbconf0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654790" comment="libsmbldap-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654791" comment="libsmbldap2-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654792" comment="libsmbldap2-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655370" comment="libsmbldap2-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623644" comment="libsmbldap2-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654793" comment="libtevent-util-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654794" comment="libtevent-util0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654795" comment="libtevent-util0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655371" comment="libtevent-util0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623645" comment="libtevent-util0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654796" comment="libwbclient-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654797" comment="libwbclient0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654798" comment="libwbclient0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655372" comment="libwbclient0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623646" comment="libwbclient0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654799" comment="python3-ldb-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247520" comment="python3-ldb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655373" comment="python3-ldb-32bit-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247521" comment="python3-ldb-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654800" comment="python3-ldb-devel-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247522" comment="python3-ldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654801" comment="samba-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654815" comment="samba-ad-dc-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266821" comment="samba-ad-dc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655374" comment="samba-ad-dc-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266822" comment="samba-ad-dc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655375" comment="samba-ad-dc-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623647" comment="samba-ad-dc-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654802" comment="samba-ceph-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009162650" comment="samba-ceph is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654803" comment="samba-client-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655376" comment="samba-client-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655377" comment="samba-client-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623648" comment="samba-client-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654804" comment="samba-core-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655378" comment="samba-doc-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654805" comment="samba-dsdb-modules-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177163" comment="samba-dsdb-modules is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654806" comment="samba-gpupdate-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655385" comment="samba-gpupdate is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654807" comment="samba-ldb-ldap-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655386" comment="samba-ldb-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654808" comment="samba-libs-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654809" comment="samba-libs-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655379" comment="samba-libs-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623649" comment="samba-libs-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654810" comment="samba-libs-python3-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655380" comment="samba-libs-python3-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266826" comment="samba-libs-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655381" comment="samba-libs-python3-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623651" comment="samba-libs-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654811" comment="samba-python3-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655382" comment="samba-test-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654812" comment="samba-winbind-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654813" comment="samba-winbind-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655383" comment="samba-winbind-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623652" comment="samba-winbind-64bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25721</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25721" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25721" ref_url="https://www.suse.com/security/cve/CVE-2020-25721" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009716.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010209.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3647-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/36K5HNX67LYX5XOVQRL3MSIC5YSJ5M5W/" source="SUSE-SU"/>
    <description>
    Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID (and samAccountName) in issued tickets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.6/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-25721/">CVE-2020-25721</cve>
	<bugzilla href="https://bugzilla.suse.com/1192505">SUSE bug 1192505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195833">SUSE bug 1195833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654904" comment="ctdb-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655346" comment="ctdb-pcp-pmda-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233089" comment="ctdb-pcp-pmda is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655347" comment="ctdb-tests-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654738" comment="ldb-tools-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152723" comment="ldb-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654739" comment="libdcerpc-binding0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654740" comment="libdcerpc-binding0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655348" comment="libdcerpc-binding0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623625" comment="libdcerpc-binding0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654741" comment="libdcerpc-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654742" comment="libdcerpc-samr-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654743" comment="libdcerpc-samr0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655349" comment="libdcerpc-samr0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655350" comment="libdcerpc-samr0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623626" comment="libdcerpc-samr0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654744" comment="libdcerpc0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654745" comment="libdcerpc0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655351" comment="libdcerpc0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623627" comment="libdcerpc0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654746" comment="libldb-devel-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152732" comment="libldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654747" comment="libldb2-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291435" comment="libldb2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654748" comment="libldb2-32bit-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291436" comment="libldb2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654749" comment="libndr-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654750" comment="libndr-krb5pac-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654751" comment="libndr-krb5pac0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654752" comment="libndr-krb5pac0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655352" comment="libndr-krb5pac0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623628" comment="libndr-krb5pac0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654753" comment="libndr-nbt-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654754" comment="libndr-nbt0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654755" comment="libndr-nbt0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655353" comment="libndr-nbt0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623629" comment="libndr-nbt0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654756" comment="libndr-standard-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654757" comment="libndr-standard0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654758" comment="libndr-standard0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655354" comment="libndr-standard0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623630" comment="libndr-standard0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654759" comment="libndr1-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654760" comment="libndr1-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655355" comment="libndr1-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655384" comment="libndr1-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654761" comment="libnetapi-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655356" comment="libnetapi-devel-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009287505" comment="libnetapi-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655357" comment="libnetapi-devel-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623632" comment="libnetapi-devel-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654762" comment="libnetapi0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654763" comment="libnetapi0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655358" comment="libnetapi0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623633" comment="libnetapi0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654764" comment="libsamba-credentials-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654765" comment="libsamba-credentials0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654766" comment="libsamba-credentials0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655359" comment="libsamba-credentials0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623634" comment="libsamba-credentials0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654767" comment="libsamba-errors-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654768" comment="libsamba-errors0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654769" comment="libsamba-errors0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655360" comment="libsamba-errors0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623635" comment="libsamba-errors0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654770" comment="libsamba-hostconfig-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654771" comment="libsamba-hostconfig0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654772" comment="libsamba-hostconfig0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655361" comment="libsamba-hostconfig0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623636" comment="libsamba-hostconfig0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654773" comment="libsamba-passdb-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654774" comment="libsamba-passdb0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654775" comment="libsamba-passdb0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655362" comment="libsamba-passdb0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623637" comment="libsamba-passdb0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654776" comment="libsamba-policy-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654777" comment="libsamba-policy-python3-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266818" comment="libsamba-policy-python3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654778" comment="libsamba-policy0-python3-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655363" comment="libsamba-policy0-python3-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266820" comment="libsamba-policy0-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655364" comment="libsamba-policy0-python3-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623639" comment="libsamba-policy0-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654779" comment="libsamba-util-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654780" comment="libsamba-util0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654781" comment="libsamba-util0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655365" comment="libsamba-util0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623640" comment="libsamba-util0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654782" comment="libsamdb-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654783" comment="libsamdb0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654784" comment="libsamdb0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655366" comment="libsamdb0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623641" comment="libsamdb0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654785" comment="libsmbclient-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654786" comment="libsmbclient0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655367" comment="libsmbclient0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655368" comment="libsmbclient0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623642" comment="libsmbclient0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654787" comment="libsmbconf-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654788" comment="libsmbconf0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654789" comment="libsmbconf0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655369" comment="libsmbconf0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623643" comment="libsmbconf0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654790" comment="libsmbldap-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654791" comment="libsmbldap2-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654792" comment="libsmbldap2-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655370" comment="libsmbldap2-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623644" comment="libsmbldap2-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654793" comment="libtevent-util-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654794" comment="libtevent-util0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654795" comment="libtevent-util0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655371" comment="libtevent-util0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623645" comment="libtevent-util0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654796" comment="libwbclient-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654797" comment="libwbclient0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654798" comment="libwbclient0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655372" comment="libwbclient0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623646" comment="libwbclient0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654799" comment="python3-ldb-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247520" comment="python3-ldb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655373" comment="python3-ldb-32bit-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247521" comment="python3-ldb-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654800" comment="python3-ldb-devel-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247522" comment="python3-ldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654801" comment="samba-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654815" comment="samba-ad-dc-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266821" comment="samba-ad-dc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655374" comment="samba-ad-dc-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266822" comment="samba-ad-dc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655375" comment="samba-ad-dc-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623647" comment="samba-ad-dc-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654802" comment="samba-ceph-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009162650" comment="samba-ceph is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654803" comment="samba-client-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655376" comment="samba-client-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655377" comment="samba-client-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623648" comment="samba-client-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654804" comment="samba-core-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655378" comment="samba-doc-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654805" comment="samba-dsdb-modules-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177163" comment="samba-dsdb-modules is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654806" comment="samba-gpupdate-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655385" comment="samba-gpupdate is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654807" comment="samba-ldb-ldap-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655386" comment="samba-ldb-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654808" comment="samba-libs-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654809" comment="samba-libs-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655379" comment="samba-libs-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623649" comment="samba-libs-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654810" comment="samba-libs-python3-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655380" comment="samba-libs-python3-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266826" comment="samba-libs-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655381" comment="samba-libs-python3-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623651" comment="samba-libs-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654811" comment="samba-python3-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655382" comment="samba-test-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654812" comment="samba-winbind-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654813" comment="samba-winbind-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655383" comment="samba-winbind-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623652" comment="samba-winbind-64bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25722</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25722" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25722" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25722" ref_url="https://www.suse.com/security/cve/CVE-2020-25722" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009716.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010209.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3647-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/36K5HNX67LYX5XOVQRL3MSIC5YSJ5M5W/" source="SUSE-SU"/>
    <description>
    Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25722/">CVE-2020-25722</cve>
	<bugzilla href="https://bugzilla.suse.com/1192283">SUSE bug 1192283</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654904" comment="ctdb-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655346" comment="ctdb-pcp-pmda-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233089" comment="ctdb-pcp-pmda is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655347" comment="ctdb-tests-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654738" comment="ldb-tools-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152723" comment="ldb-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654739" comment="libdcerpc-binding0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654740" comment="libdcerpc-binding0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655348" comment="libdcerpc-binding0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623625" comment="libdcerpc-binding0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654741" comment="libdcerpc-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654742" comment="libdcerpc-samr-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654743" comment="libdcerpc-samr0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655349" comment="libdcerpc-samr0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655350" comment="libdcerpc-samr0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623626" comment="libdcerpc-samr0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654744" comment="libdcerpc0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654745" comment="libdcerpc0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655351" comment="libdcerpc0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623627" comment="libdcerpc0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654746" comment="libldb-devel-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152732" comment="libldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654747" comment="libldb2-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291435" comment="libldb2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654748" comment="libldb2-32bit-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291436" comment="libldb2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654749" comment="libndr-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654750" comment="libndr-krb5pac-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654751" comment="libndr-krb5pac0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654752" comment="libndr-krb5pac0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655352" comment="libndr-krb5pac0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623628" comment="libndr-krb5pac0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654753" comment="libndr-nbt-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654754" comment="libndr-nbt0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654755" comment="libndr-nbt0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655353" comment="libndr-nbt0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623629" comment="libndr-nbt0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654756" comment="libndr-standard-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654757" comment="libndr-standard0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654758" comment="libndr-standard0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655354" comment="libndr-standard0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623630" comment="libndr-standard0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654759" comment="libndr1-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654760" comment="libndr1-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655355" comment="libndr1-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655384" comment="libndr1-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654761" comment="libnetapi-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655356" comment="libnetapi-devel-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009287505" comment="libnetapi-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655357" comment="libnetapi-devel-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623632" comment="libnetapi-devel-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654762" comment="libnetapi0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654763" comment="libnetapi0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655358" comment="libnetapi0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623633" comment="libnetapi0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654764" comment="libsamba-credentials-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654765" comment="libsamba-credentials0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654766" comment="libsamba-credentials0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655359" comment="libsamba-credentials0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623634" comment="libsamba-credentials0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654767" comment="libsamba-errors-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654768" comment="libsamba-errors0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654769" comment="libsamba-errors0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655360" comment="libsamba-errors0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623635" comment="libsamba-errors0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654770" comment="libsamba-hostconfig-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654771" comment="libsamba-hostconfig0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654772" comment="libsamba-hostconfig0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655361" comment="libsamba-hostconfig0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623636" comment="libsamba-hostconfig0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654773" comment="libsamba-passdb-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654774" comment="libsamba-passdb0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654775" comment="libsamba-passdb0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655362" comment="libsamba-passdb0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623637" comment="libsamba-passdb0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654776" comment="libsamba-policy-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654777" comment="libsamba-policy-python3-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266818" comment="libsamba-policy-python3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654778" comment="libsamba-policy0-python3-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655363" comment="libsamba-policy0-python3-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266820" comment="libsamba-policy0-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655364" comment="libsamba-policy0-python3-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623639" comment="libsamba-policy0-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654779" comment="libsamba-util-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654780" comment="libsamba-util0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654781" comment="libsamba-util0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655365" comment="libsamba-util0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623640" comment="libsamba-util0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654782" comment="libsamdb-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654783" comment="libsamdb0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654784" comment="libsamdb0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655366" comment="libsamdb0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623641" comment="libsamdb0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654785" comment="libsmbclient-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654786" comment="libsmbclient0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655367" comment="libsmbclient0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655368" comment="libsmbclient0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623642" comment="libsmbclient0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654787" comment="libsmbconf-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654788" comment="libsmbconf0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654789" comment="libsmbconf0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655369" comment="libsmbconf0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623643" comment="libsmbconf0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654790" comment="libsmbldap-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654791" comment="libsmbldap2-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654792" comment="libsmbldap2-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655370" comment="libsmbldap2-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623644" comment="libsmbldap2-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654793" comment="libtevent-util-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654794" comment="libtevent-util0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654795" comment="libtevent-util0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655371" comment="libtevent-util0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623645" comment="libtevent-util0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654796" comment="libwbclient-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654797" comment="libwbclient0-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654798" comment="libwbclient0-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655372" comment="libwbclient0-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623646" comment="libwbclient0-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654799" comment="python3-ldb-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247520" comment="python3-ldb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655373" comment="python3-ldb-32bit-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247521" comment="python3-ldb-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654800" comment="python3-ldb-devel-2.2.2-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247522" comment="python3-ldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654801" comment="samba-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654815" comment="samba-ad-dc-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266821" comment="samba-ad-dc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655374" comment="samba-ad-dc-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266822" comment="samba-ad-dc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655375" comment="samba-ad-dc-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623647" comment="samba-ad-dc-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654802" comment="samba-ceph-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009162650" comment="samba-ceph is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654803" comment="samba-client-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655376" comment="samba-client-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655377" comment="samba-client-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623648" comment="samba-client-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654804" comment="samba-core-devel-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655378" comment="samba-doc-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654805" comment="samba-dsdb-modules-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177163" comment="samba-dsdb-modules is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654806" comment="samba-gpupdate-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655385" comment="samba-gpupdate is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654807" comment="samba-ldb-ldap-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655386" comment="samba-ldb-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654808" comment="samba-libs-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654809" comment="samba-libs-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655379" comment="samba-libs-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623649" comment="samba-libs-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654810" comment="samba-libs-python3-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655380" comment="samba-libs-python3-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266826" comment="samba-libs-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655381" comment="samba-libs-python3-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623651" comment="samba-libs-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654811" comment="samba-python3-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655382" comment="samba-test-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654812" comment="samba-winbind-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654813" comment="samba-winbind-32bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009655383" comment="samba-winbind-64bit-4.13.13+git.528.140935f8d6a-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623652" comment="samba-winbind-64bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202025723" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-25723</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-25723" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25723" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-25723" ref_url="https://www.suse.com/security/cve/CVE-2020-25723" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008646.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008671.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008673.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008910.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008916.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1894-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1895-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1942-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008990.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0600-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ATYM36RK6JXDXZ33F2KFHZHDZ3F3YD24/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1043-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1942-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEKBDJBTGKO53MSKM3SRYVUQDWIJ2N5I/" source="SUSE-SU"/>
    <description>
    A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25723/">CVE-2020-25723</cve>
	<bugzilla href="https://bugzilla.suse.com/1178934">SUSE bug 1178934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178935">SUSE bug 1178935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500101" comment="qemu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625287" comment="qemu-arm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625288" comment="qemu-audio-alsa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625289" comment="qemu-audio-pa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625290" comment="qemu-audio-spice-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500106" comment="qemu-block-curl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625291" comment="qemu-block-dmg-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625292" comment="qemu-block-gluster-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500107" comment="qemu-block-iscsi-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625293" comment="qemu-block-nfs-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500108" comment="qemu-block-rbd-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500109" comment="qemu-block-ssh-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500110" comment="qemu-chardev-baum-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625294" comment="qemu-chardev-spice-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625295" comment="qemu-extra-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500112" comment="qemu-guest-agent-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625296" comment="qemu-hw-display-qxl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625297" comment="qemu-hw-display-virtio-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625298" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625299" comment="qemu-hw-display-virtio-vga-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625300" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625301" comment="qemu-hw-usb-redirect-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625302" comment="qemu-hw-usb-smartcard-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500119" comment="qemu-ipxe-1.0.0+-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625303" comment="qemu-ivshmem-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500120" comment="qemu-ksm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500121" comment="qemu-kvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500122" comment="qemu-lang-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620964" comment="qemu-microvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625304" comment="qemu-ppc-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625305" comment="qemu-s390x-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500125" comment="qemu-seabios-1.14.0_0_g155821a-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500126" comment="qemu-sgabios-8-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500127" comment="qemu-skiboot-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494310" comment="qemu-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500128" comment="qemu-ui-curses-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625306" comment="qemu-ui-gtk-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625307" comment="qemu-ui-opengl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625308" comment="qemu-ui-spice-app-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625309" comment="qemu-ui-spice-core-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500133" comment="qemu-vgabios-1.14.0_0_g155821a-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625310" comment="qemu-vhost-user-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625311" comment="qemu-x86-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2574</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2574" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2574" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2574" ref_url="https://www.suse.com/security/cve/CVE-2020-2574" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006539.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0523-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006549.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006654.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00007.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.46 and prior, 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-2574/">CVE-2020-2574</cve>
	<bugzilla href="https://bugzilla.suse.com/1161085">SUSE bug 1161085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162388">SUSE bug 1162388</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2583</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2583" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2583" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2583" ref_url="https://www.suse.com/security/cve/CVE-2020-2583" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0231-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200231-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0261-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0466-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006519.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14286-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006507.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2583/">CVE-2020-2583</cve>
	<bugzilla href="https://bugzilla.suse.com/1160968">SUSE bug 1160968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162972">SUSE bug 1162972</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2590</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2590" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2590" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2590" ref_url="https://www.suse.com/security/cve/CVE-2020-2590" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0231-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200231-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0261-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006592.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2590/">CVE-2020-2590</cve>
	<bugzilla href="https://bugzilla.suse.com/1160968">SUSE bug 1160968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2593</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2593" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2593" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2593" ref_url="https://www.suse.com/security/cve/CVE-2020-2593" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0231-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200231-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0261-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0466-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006519.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14286-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006507.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2593/">CVE-2020-2593</cve>
	<bugzilla href="https://bugzilla.suse.com/1160968">SUSE bug 1160968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162972">SUSE bug 1162972</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2601</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2601" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2601" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2601" ref_url="https://www.suse.com/security/cve/CVE-2020-2601" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0231-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200231-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0261-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006592.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2601/">CVE-2020-2601</cve>
	<bugzilla href="https://bugzilla.suse.com/1160968">SUSE bug 1160968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202604" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2604</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2604" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2604" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2604" ref_url="https://www.suse.com/security/cve/CVE-2020-2604" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0231-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200231-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0261-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0466-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006519.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14286-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006507.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS v3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-31"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2604/">CVE-2020-2604</cve>
	<bugzilla href="https://bugzilla.suse.com/1160968">SUSE bug 1160968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162972">SUSE bug 1162972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165863">SUSE bug 1165863</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26088</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26088" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26088" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26088" ref_url="https://www.suse.com/security/cve/CVE-2020-26088" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007544.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007545.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2908-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1586-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1655-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used by local attackers to create raw sockets, bypassing security mechanisms, aka CID-26896f01467a.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-26088/">CVE-2020-26088</cve>
	<bugzilla href="https://bugzilla.suse.com/1176990">SUSE bug 1176990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26116</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26116" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26116" ref_url="https://www.suse.com/security/cve/CVE-2020-26116" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008464.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007872.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3262-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007892.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0341-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0342-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008330.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008345.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1859-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1988-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KQJZUPSO3MIAIYJBX2VTZETYQSLUJQPN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2332-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S3JTHM6LLDKL7VPNRJUSRPNZAD2FZ25H/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2333-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FLGERALYYFTBIX3ZKPM6EQ2WJVUXLOXY/" source="SUSE-SU"/>
    <description>
    http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26116/">CVE-2020-26116</cve>
	<bugzilla href="https://bugzilla.suse.com/1177120">SUSE bug 1177120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177211">SUSE bug 1177211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192361">SUSE bug 1192361</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26117</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26117" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26117" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26117" ref_url="https://www.suse.com/security/cve/CVE-2020-26117" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007542.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1666-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00024.html" source="SUSE-SU"/>
    <description>
    In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificates as authorities, meaning that the owner of a certificate could impersonate any server after a client had added an exception.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26117/">CVE-2020-26117</cve>
	<bugzilla href="https://bugzilla.suse.com/1176733">SUSE bug 1176733</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628599" comment="libXvnc1-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628600" comment="tigervnc-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628601" comment="xorg-x11-Xvnc-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628602" comment="xorg-x11-Xvnc-module-1.9.0-19.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009276536" comment="xorg-x11-Xvnc-module is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26137</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26137" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26137" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26137" ref_url="https://www.suse.com/security/cve/CVE-2020-26137" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009442.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009377.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007916.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3897-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009334.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009517.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2237-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3Y5UAWOTOHQRGI2VNSOUDC2SOAHGJLAH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2282-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VS7J7DOJY26YMLJIUVHRH7UQFVLGBWIQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1206-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6CAFSANHH6TU43VSKAJ5JA2EMHSREMKP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2817-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOZI5ZFPFR2BACIE74HUJWDXC2ZWXNGD/" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26137/">CVE-2020-26137</cve>
	<bugzilla href="https://bugzilla.suse.com/1177120">SUSE bug 1177120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177211">SUSE bug 1177211</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626957" comment="aws-cli-1.19.9-26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009272762" comment="aws-cli is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626960" comment="python2-asn1crypto-0.24.0-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631613" comment="python2-asn1crypto is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626954" comment="python2-boto3-1.17.9-19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009272764" comment="python2-boto3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626955" comment="python2-botocore-1.20.9-33.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009272766" comment="python2-botocore is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626961" comment="python2-cffi-1.13.2-3.2.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631614" comment="python2-cffi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626962" comment="python2-cryptography-2.8-10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238250" comment="python2-cryptography is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626964" comment="python2-pyasn1-0.4.2-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631615" comment="python2-pyasn1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626965" comment="python2-pycparser-2.17-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631616" comment="python2-pycparser is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626966" comment="python2-urllib3-1.25.10-9.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009264573" comment="python2-urllib3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626945" comment="python3-asn1crypto-0.24.0-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631617" comment="python3-asn1crypto is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626946" comment="python3-boto3-1.17.9-19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009272770" comment="python3-boto3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626947" comment="python3-botocore-1.20.9-33.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009272772" comment="python3-botocore is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626948" comment="python3-cffi-1.13.2-3.2.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631618" comment="python3-cffi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626949" comment="python3-cryptography-2.8-10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238251" comment="python3-cryptography is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626951" comment="python3-pyasn1-0.4.2-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631619" comment="python3-pyasn1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626952" comment="python3-pycparser-2.17-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631620" comment="python3-pycparser is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629005" comment="python3-urllib3-1.25.10-2.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177231" comment="python3-urllib3 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26139</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26139" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26139" ref_url="https://www.suse.com/security/cve/CVE-2020-26139" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:537-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008974.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2406-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009203.html" source="SUSE-SU"/>
		<reference ref_id="TID000020244" ref_url="https://www.suse.com/support/kb/doc/?id=000020244" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0843-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QHZZYSYX2W3FJK73UGT72F2DQ37IKCJY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0947-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/M3WU4VH2HXVC3VLST5RWUW7LUFNSUEIN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-26139/">CVE-2020-26139</cve>
	<bugzilla href="https://bugzilla.suse.com/1186062">SUSE bug 1186062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192868">SUSE bug 1192868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26141</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26141" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26141" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26141" ref_url="https://www.suse.com/security/cve/CVE-2020-26141" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:537-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008974.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2406-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009203.html" source="SUSE-SU"/>
		<reference ref_id="TID000020244" ref_url="https://www.suse.com/support/kb/doc/?id=000020244" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0843-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QHZZYSYX2W3FJK73UGT72F2DQ37IKCJY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0947-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/M3WU4VH2HXVC3VLST5RWUW7LUFNSUEIN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26141/">CVE-2020-26141</cve>
	<bugzilla href="https://bugzilla.suse.com/1185987">SUSE bug 1185987</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26145</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26145" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26145" ref_url="https://www.suse.com/security/cve/CVE-2020-26145" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:537-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008974.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2406-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009203.html" source="SUSE-SU"/>
		<reference ref_id="TID000020244" ref_url="https://www.suse.com/support/kb/doc/?id=000020244" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0843-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QHZZYSYX2W3FJK73UGT72F2DQ37IKCJY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0947-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/M3WU4VH2HXVC3VLST5RWUW7LUFNSUEIN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26145/">CVE-2020-26145</cve>
	<bugzilla href="https://bugzilla.suse.com/1185860">SUSE bug 1185860</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26147</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26147" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26147" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26147" ref_url="https://www.suse.com/security/cve/CVE-2020-26147" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:537-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008974.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2406-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009203.html" source="SUSE-SU"/>
		<reference ref_id="TID000020244" ref_url="https://www.suse.com/support/kb/doc/?id=000020244" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0843-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QHZZYSYX2W3FJK73UGT72F2DQ37IKCJY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0947-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/M3WU4VH2HXVC3VLST5RWUW7LUFNSUEIN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26147/">CVE-2020-26147</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26154</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26154" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26154" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26154" ref_url="https://www.suse.com/security/cve/CVE-2020-26154" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007543.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007540.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1676-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00033.html" source="SUSE-SU"/>
    <description>
    url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26154/">CVE-2020-26154</cve>
	<bugzilla href="https://bugzilla.suse.com/1177143">SUSE bug 1177143</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628839" comment="libproxy1-0.4.15-12.41 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151762" comment="libproxy1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684239" comment="libproxy1-config-gnome3-0.4.15-12.72 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151763" comment="libproxy1-config-gnome3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694867" comment="libproxy1-config-kde-0.4.15-12.72 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154112" comment="libproxy1-config-kde is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684240" comment="libproxy1-networkmanager-0.4.15-12.72 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151765" comment="libproxy1-networkmanager is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694868" comment="libproxy1-pacrunner-webkit-0.4.15-12.72 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151766" comment="libproxy1-pacrunner-webkit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026159" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26159</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26159" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26159" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26159" ref_url="https://www.suse.com/security/cve/CVE-2020-26159" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:1093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012587.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012320.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-24"/>
	<updated date="2022-10-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26159/">CVE-2020-26159</cve>
	<bugzilla href="https://bugzilla.suse.com/1177179">SUSE bug 1177179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203568">SUSE bug 1203568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708026" comment="libonig4-6.7.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009714765" comment="libonig4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708027" comment="oniguruma-devel-6.7.0-150000.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009714766" comment="oniguruma-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26247</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26247" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26247" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26247" ref_url="https://www.suse.com/security/cve/CVE-2020-26247" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0210-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008244.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009227.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0237-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RLEJCRYIVSTKE34ZJIXITKLZOOKOAMWQ/" source="SUSE-SU"/>
    <description>
    Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri before version 1.11.0.rc4 there is an XXE vulnerability. XML Schemas parsed by Nokogiri::XML::Schema are trusted by default, allowing external resources to be accessed over the network, potentially enabling XXE or SSRF attacks. This behavior is counter to the security policy followed by Nokogiri maintainers, which is to treat all input as untrusted by default whenever possible. This is fixed in Nokogiri version 1.11.0.rc4.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-26247/">CVE-2020-26247</cve>
	<bugzilla href="https://bugzilla.suse.com/1180507">SUSE bug 1180507</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629013" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342874" comment="ruby2.5-rubygem-nokogiri is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26266</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26266" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26266" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26266" ref_url="https://www.suse.com/security/cve/CVE-2020-26266" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:10014-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U25ZU2T5T4LOLSIYIMGC5PLU4PQQMJE5/" source="SUSE-SU"/>
    <description>
    In affected versions of TensorFlow under certain cases a saved model can trigger use of uninitialized values during code execution. This is caused by having tensor buffers be filled with the default value of the type but forgetting to default initialize the quantized floating point types in Eigen. This is fixed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2, and 2.4.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-19"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-26266/">CVE-2020-26266</cve>
	<bugzilla href="https://bugzilla.suse.com/1179946">SUSE bug 1179946</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694946" comment="bazel-skylib1.0.3-source-1.0.3-bp153.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695704" comment="bazel-skylib1.0.3-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694947" comment="bazel3.7-3.7.2-bp153.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695705" comment="bazel3.7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694948" comment="libiomp5-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695706" comment="libiomp5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694949" comment="libiomp5-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695707" comment="libiomp5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694950" comment="libiomp5-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695708" comment="libiomp5-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694951" comment="libtensorflow2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297592" comment="libtensorflow2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694952" comment="libtensorflow2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297593" comment="libtensorflow2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694953" comment="libtensorflow2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297594" comment="libtensorflow2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694954" comment="libtensorflow_cc2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297595" comment="libtensorflow_cc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694955" comment="libtensorflow_cc2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297596" comment="libtensorflow_cc2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694956" comment="libtensorflow_cc2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297597" comment="libtensorflow_cc2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694957" comment="libtensorflow_framework2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297598" comment="libtensorflow_framework2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694958" comment="libtensorflow_framework2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297599" comment="libtensorflow_framework2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694959" comment="libtensorflow_framework2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297600" comment="libtensorflow_framework2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694960" comment="tensorflow2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297601" comment="tensorflow2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694961" comment="tensorflow2-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297602" comment="tensorflow2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694962" comment="tensorflow2-doc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297603" comment="tensorflow2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694963" comment="tensorflow2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297604" comment="tensorflow2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694964" comment="tensorflow2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297605" comment="tensorflow2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694965" comment="tensorflow2-lite-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297606" comment="tensorflow2-lite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694966" comment="tensorflow2-lite-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297607" comment="tensorflow2-lite-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694967" comment="tensorflow2_2_6_0-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695709" comment="tensorflow2_2_6_0-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694968" comment="tensorflow2_2_6_0-gnu-hpc-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695710" comment="tensorflow2_2_6_0-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694969" comment="tensorflow2_2_6_0-gnu-hpc-doc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695711" comment="tensorflow2_2_6_0-gnu-hpc-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694970" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695712" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694971" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695713" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694972" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-doc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695714" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26267</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26267" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26267" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26267" ref_url="https://www.suse.com/security/cve/CVE-2020-26267" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:10014-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U25ZU2T5T4LOLSIYIMGC5PLU4PQQMJE5/" source="SUSE-SU"/>
    <description>
    In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not validate the src_format and dst_format attributes. The code assumes that these two arguments define a permutation of NHWC. This can result in uninitialized memory accesses, read outside of bounds and even crashes. This is fixed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2, and 2.4.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-19"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26267/">CVE-2020-26267</cve>
	<bugzilla href="https://bugzilla.suse.com/1179944">SUSE bug 1179944</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694946" comment="bazel-skylib1.0.3-source-1.0.3-bp153.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695704" comment="bazel-skylib1.0.3-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694947" comment="bazel3.7-3.7.2-bp153.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695705" comment="bazel3.7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694948" comment="libiomp5-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695706" comment="libiomp5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694949" comment="libiomp5-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695707" comment="libiomp5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694950" comment="libiomp5-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695708" comment="libiomp5-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694951" comment="libtensorflow2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297592" comment="libtensorflow2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694952" comment="libtensorflow2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297593" comment="libtensorflow2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694953" comment="libtensorflow2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297594" comment="libtensorflow2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694954" comment="libtensorflow_cc2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297595" comment="libtensorflow_cc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694955" comment="libtensorflow_cc2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297596" comment="libtensorflow_cc2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694956" comment="libtensorflow_cc2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297597" comment="libtensorflow_cc2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694957" comment="libtensorflow_framework2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297598" comment="libtensorflow_framework2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694958" comment="libtensorflow_framework2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297599" comment="libtensorflow_framework2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694959" comment="libtensorflow_framework2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297600" comment="libtensorflow_framework2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694960" comment="tensorflow2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297601" comment="tensorflow2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694961" comment="tensorflow2-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297602" comment="tensorflow2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694962" comment="tensorflow2-doc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297603" comment="tensorflow2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694963" comment="tensorflow2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297604" comment="tensorflow2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694964" comment="tensorflow2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297605" comment="tensorflow2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694965" comment="tensorflow2-lite-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297606" comment="tensorflow2-lite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694966" comment="tensorflow2-lite-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297607" comment="tensorflow2-lite-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694967" comment="tensorflow2_2_6_0-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695709" comment="tensorflow2_2_6_0-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694968" comment="tensorflow2_2_6_0-gnu-hpc-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695710" comment="tensorflow2_2_6_0-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694969" comment="tensorflow2_2_6_0-gnu-hpc-doc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695711" comment="tensorflow2_2_6_0-gnu-hpc-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694970" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695712" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694971" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695713" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694972" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-doc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695714" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26268</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26268" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26268" ref_url="https://www.suse.com/security/cve/CVE-2020-26268" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:10014-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U25ZU2T5T4LOLSIYIMGC5PLU4PQQMJE5/" source="SUSE-SU"/>
    <description>
    In affected versions of TensorFlow the tf.raw_ops.ImmutableConst operation returns a constant tensor created from a memory mapped file which is assumed immutable. However, if the type of the tensor is not an integral type, the operation crashes the Python interpreter as it tries to write to the memory area. If the file is too small, TensorFlow properly returns an error as the memory area has fewer bytes than what is needed for the tensor it creates. However, as soon as there are enough bytes, the above snippet causes a segmentation fault. This is because the allocator used to return the buffer data is not marked as returning an opaque handle since the needed virtual method is not overridden. This is fixed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2, and 2.4.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-19"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-26268/">CVE-2020-26268</cve>
	<bugzilla href="https://bugzilla.suse.com/1179943">SUSE bug 1179943</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694946" comment="bazel-skylib1.0.3-source-1.0.3-bp153.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695704" comment="bazel-skylib1.0.3-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694947" comment="bazel3.7-3.7.2-bp153.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695705" comment="bazel3.7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694948" comment="libiomp5-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695706" comment="libiomp5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694949" comment="libiomp5-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695707" comment="libiomp5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694950" comment="libiomp5-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695708" comment="libiomp5-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694951" comment="libtensorflow2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297592" comment="libtensorflow2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694952" comment="libtensorflow2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297593" comment="libtensorflow2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694953" comment="libtensorflow2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297594" comment="libtensorflow2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694954" comment="libtensorflow_cc2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297595" comment="libtensorflow_cc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694955" comment="libtensorflow_cc2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297596" comment="libtensorflow_cc2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694956" comment="libtensorflow_cc2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297597" comment="libtensorflow_cc2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694957" comment="libtensorflow_framework2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297598" comment="libtensorflow_framework2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694958" comment="libtensorflow_framework2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297599" comment="libtensorflow_framework2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694959" comment="libtensorflow_framework2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297600" comment="libtensorflow_framework2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694960" comment="tensorflow2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297601" comment="tensorflow2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694961" comment="tensorflow2-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297602" comment="tensorflow2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694962" comment="tensorflow2-doc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297603" comment="tensorflow2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694963" comment="tensorflow2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297604" comment="tensorflow2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694964" comment="tensorflow2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297605" comment="tensorflow2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694965" comment="tensorflow2-lite-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297606" comment="tensorflow2-lite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694966" comment="tensorflow2-lite-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297607" comment="tensorflow2-lite-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694967" comment="tensorflow2_2_6_0-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695709" comment="tensorflow2_2_6_0-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694968" comment="tensorflow2_2_6_0-gnu-hpc-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695710" comment="tensorflow2_2_6_0-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694969" comment="tensorflow2_2_6_0-gnu-hpc-doc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695711" comment="tensorflow2_2_6_0-gnu-hpc-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694970" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695712" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694971" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695713" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694972" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-doc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695714" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26270</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26270" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26270" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26270" ref_url="https://www.suse.com/security/cve/CVE-2020-26270" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:10014-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U25ZU2T5T4LOLSIYIMGC5PLU4PQQMJE5/" source="SUSE-SU"/>
    <description>
    In affected versions of TensorFlow running an LSTM/GRU model where the LSTM/GRU layer receives an input with zero-length results in a CHECK failure when using the CUDA backend. This can result in a query-of-death vulnerability, via denial of service, if users can control the input to the layer. This is fixed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2, and 2.4.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-19"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26270/">CVE-2020-26270</cve>
	<bugzilla href="https://bugzilla.suse.com/1179938">SUSE bug 1179938</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694946" comment="bazel-skylib1.0.3-source-1.0.3-bp153.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695704" comment="bazel-skylib1.0.3-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694947" comment="bazel3.7-3.7.2-bp153.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695705" comment="bazel3.7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694948" comment="libiomp5-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695706" comment="libiomp5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694949" comment="libiomp5-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695707" comment="libiomp5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694950" comment="libiomp5-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695708" comment="libiomp5-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694951" comment="libtensorflow2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297592" comment="libtensorflow2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694952" comment="libtensorflow2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297593" comment="libtensorflow2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694953" comment="libtensorflow2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297594" comment="libtensorflow2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694954" comment="libtensorflow_cc2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297595" comment="libtensorflow_cc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694955" comment="libtensorflow_cc2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297596" comment="libtensorflow_cc2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694956" comment="libtensorflow_cc2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297597" comment="libtensorflow_cc2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694957" comment="libtensorflow_framework2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297598" comment="libtensorflow_framework2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694958" comment="libtensorflow_framework2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297599" comment="libtensorflow_framework2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694959" comment="libtensorflow_framework2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297600" comment="libtensorflow_framework2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694960" comment="tensorflow2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297601" comment="tensorflow2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694961" comment="tensorflow2-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297602" comment="tensorflow2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694962" comment="tensorflow2-doc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297603" comment="tensorflow2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694963" comment="tensorflow2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297604" comment="tensorflow2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694964" comment="tensorflow2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297605" comment="tensorflow2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694965" comment="tensorflow2-lite-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297606" comment="tensorflow2-lite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694966" comment="tensorflow2-lite-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297607" comment="tensorflow2-lite-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694967" comment="tensorflow2_2_6_0-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695709" comment="tensorflow2_2_6_0-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694968" comment="tensorflow2_2_6_0-gnu-hpc-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695710" comment="tensorflow2_2_6_0-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694969" comment="tensorflow2_2_6_0-gnu-hpc-doc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695711" comment="tensorflow2_2_6_0-gnu-hpc-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694970" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695712" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694971" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695713" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694972" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-doc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695714" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26271</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26271" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26271" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26271" ref_url="https://www.suse.com/security/cve/CVE-2020-26271" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:10014-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U25ZU2T5T4LOLSIYIMGC5PLU4PQQMJE5/" source="SUSE-SU"/>
    <description>
    In affected versions of TensorFlow under certain cases, loading a saved model can result in accessing uninitialized memory while building the computation graph. The MakeEdge function creates an edge between one output tensor of the src node (given by output_index) and the input slot of the dst node (given by input_index). This is only possible if the types of the tensors on both sides coincide, so the function begins by obtaining the corresponding DataType values and comparing these for equality. However, there is no check that the indices point to inside of the arrays they index into. Thus, this can result in accessing data out of bounds of the corresponding heap allocated arrays. In most scenarios, this can manifest as unitialized data access, but if the index points far away from the boundaries of the arrays this can be used to leak addresses from the library. This is fixed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2, and 2.4.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-19"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-26271/">CVE-2020-26271</cve>
	<bugzilla href="https://bugzilla.suse.com/1179928">SUSE bug 1179928</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694946" comment="bazel-skylib1.0.3-source-1.0.3-bp153.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695704" comment="bazel-skylib1.0.3-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694947" comment="bazel3.7-3.7.2-bp153.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695705" comment="bazel3.7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694948" comment="libiomp5-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695706" comment="libiomp5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694949" comment="libiomp5-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695707" comment="libiomp5-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694950" comment="libiomp5-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695708" comment="libiomp5-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694951" comment="libtensorflow2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297592" comment="libtensorflow2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694952" comment="libtensorflow2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297593" comment="libtensorflow2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694953" comment="libtensorflow2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297594" comment="libtensorflow2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694954" comment="libtensorflow_cc2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297595" comment="libtensorflow_cc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694955" comment="libtensorflow_cc2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297596" comment="libtensorflow_cc2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694956" comment="libtensorflow_cc2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297597" comment="libtensorflow_cc2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694957" comment="libtensorflow_framework2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297598" comment="libtensorflow_framework2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694958" comment="libtensorflow_framework2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297599" comment="libtensorflow_framework2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694959" comment="libtensorflow_framework2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297600" comment="libtensorflow_framework2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694960" comment="tensorflow2-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297601" comment="tensorflow2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694961" comment="tensorflow2-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297602" comment="tensorflow2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694962" comment="tensorflow2-doc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297603" comment="tensorflow2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694963" comment="tensorflow2-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297604" comment="tensorflow2-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694964" comment="tensorflow2-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297605" comment="tensorflow2-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694965" comment="tensorflow2-lite-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297606" comment="tensorflow2-lite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694966" comment="tensorflow2-lite-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297607" comment="tensorflow2-lite-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694967" comment="tensorflow2_2_6_0-gnu-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695709" comment="tensorflow2_2_6_0-gnu-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694968" comment="tensorflow2_2_6_0-gnu-hpc-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695710" comment="tensorflow2_2_6_0-gnu-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694969" comment="tensorflow2_2_6_0-gnu-hpc-doc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695711" comment="tensorflow2_2_6_0-gnu-hpc-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694970" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695712" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694971" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-devel-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695713" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694972" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-doc-2.6.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695714" comment="tensorflow2_2_6_0-gnu-openmpi2-hpc-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26418</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26418" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26418" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26418" ref_url="https://www.suse.com/security/cve/CVE-2020-26418" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0909-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QDSEUP77D5HE3ISH2VMQR2GIAFH6DLQK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2125-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EZGXWOFRVD3EFRZ6YDAJZEVPBP7IUHFI/" source="SUSE-SU"/>
    <description>
    Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26418/">CVE-2020-26418</cve>
	<bugzilla href="https://bugzilla.suse.com/1179930">SUSE bug 1179930</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494064" comment="libsbc1-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623888" comment="libsbc1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621265" comment="libsbc1-32bit-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623889" comment="libsbc1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494065" comment="libwireshark14-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479977" comment="libwireshark14 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494066" comment="libwiretap11-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479978" comment="libwiretap11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494067" comment="libwsutil12-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479979" comment="libwsutil12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625322" comment="sbc-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623891" comment="sbc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495822" comment="sbc-devel-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623892" comment="sbc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494068" comment="wireshark-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495823" comment="wireshark-devel-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495824" comment="wireshark-ui-qt-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26419</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26419" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26419" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26419" ref_url="https://www.suse.com/security/cve/CVE-2020-26419" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0909-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QDSEUP77D5HE3ISH2VMQR2GIAFH6DLQK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2125-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EZGXWOFRVD3EFRZ6YDAJZEVPBP7IUHFI/" source="SUSE-SU"/>
    <description>
    Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26419/">CVE-2020-26419</cve>
	<bugzilla href="https://bugzilla.suse.com/1179931">SUSE bug 1179931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494064" comment="libsbc1-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623888" comment="libsbc1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621265" comment="libsbc1-32bit-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623889" comment="libsbc1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494065" comment="libwireshark14-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479977" comment="libwireshark14 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494066" comment="libwiretap11-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479978" comment="libwiretap11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494067" comment="libwsutil12-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479979" comment="libwsutil12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625322" comment="sbc-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623891" comment="sbc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495822" comment="sbc-devel-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623892" comment="sbc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494068" comment="wireshark-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495823" comment="wireshark-devel-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495824" comment="wireshark-ui-qt-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26420</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26420" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26420" ref_url="https://www.suse.com/security/cve/CVE-2020-26420" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0909-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QDSEUP77D5HE3ISH2VMQR2GIAFH6DLQK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2125-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EZGXWOFRVD3EFRZ6YDAJZEVPBP7IUHFI/" source="SUSE-SU"/>
    <description>
    Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26420/">CVE-2020-26420</cve>
	<bugzilla href="https://bugzilla.suse.com/1179932">SUSE bug 1179932</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494064" comment="libsbc1-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623888" comment="libsbc1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621265" comment="libsbc1-32bit-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623889" comment="libsbc1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494065" comment="libwireshark14-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479977" comment="libwireshark14 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494066" comment="libwiretap11-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479978" comment="libwiretap11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494067" comment="libwsutil12-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479979" comment="libwsutil12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625322" comment="sbc-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623891" comment="sbc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495822" comment="sbc-devel-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623892" comment="sbc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494068" comment="wireshark-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495823" comment="wireshark-devel-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495824" comment="wireshark-ui-qt-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26421</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26421" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26421" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26421" ref_url="https://www.suse.com/security/cve/CVE-2020-26421" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0909-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QDSEUP77D5HE3ISH2VMQR2GIAFH6DLQK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2125-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EZGXWOFRVD3EFRZ6YDAJZEVPBP7IUHFI/" source="SUSE-SU"/>
    <description>
    Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-26421/">CVE-2020-26421</cve>
	<bugzilla href="https://bugzilla.suse.com/1179933">SUSE bug 1179933</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494064" comment="libsbc1-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623888" comment="libsbc1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621265" comment="libsbc1-32bit-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623889" comment="libsbc1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494065" comment="libwireshark14-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479977" comment="libwireshark14 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494066" comment="libwiretap11-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479978" comment="libwiretap11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494067" comment="libwsutil12-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479979" comment="libwsutil12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625322" comment="sbc-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623891" comment="sbc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495822" comment="sbc-devel-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623892" comment="sbc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494068" comment="wireshark-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495823" comment="wireshark-devel-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495824" comment="wireshark-ui-qt-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26422</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26422" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26422" ref_url="https://www.suse.com/security/cve/CVE-2020-26422" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0909-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QDSEUP77D5HE3ISH2VMQR2GIAFH6DLQK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2125-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EZGXWOFRVD3EFRZ6YDAJZEVPBP7IUHFI/" source="SUSE-SU"/>
    <description>
    Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26422/">CVE-2020-26422</cve>
	<bugzilla href="https://bugzilla.suse.com/1180232">SUSE bug 1180232</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494064" comment="libsbc1-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623888" comment="libsbc1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621265" comment="libsbc1-32bit-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623889" comment="libsbc1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494065" comment="libwireshark14-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479977" comment="libwireshark14 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494066" comment="libwiretap11-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479978" comment="libwiretap11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494067" comment="libwsutil12-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009479979" comment="libwsutil12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625322" comment="sbc-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623891" comment="sbc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495822" comment="sbc-devel-1.3-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623892" comment="sbc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494068" comment="wireshark-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495823" comment="wireshark-devel-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495824" comment="wireshark-ui-qt-3.4.5-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2654</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2654" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2654" ref_url="https://www.suse.com/security/cve/CVE-2020-2654" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0231-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200231-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0261-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006985.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2654/">CVE-2020-2654</cve>
	<bugzilla href="https://bugzilla.suse.com/1160968">SUSE bug 1160968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172277">SUSE bug 1172277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26541</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26541" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26541" ref_url="https://www.suse.com/security/cve/CVE-2020-26541" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011493.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:763-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011495.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011302.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011310.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011347.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2377-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011520.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011539.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2393-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011744.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4561-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013341.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:2173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CWOILJAA3L3ZOAEUSAUQRV4VH2BJEGVX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:2177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S2QMD6CJ6PZDFYQ3RKSOGAZNRK7WC5W7/" source="SUSE-SU"/>
    <description>
    The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-18"/>
	<updated date="2022-12-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26541/">CVE-2020-26541</cve>
	<bugzilla href="https://bugzilla.suse.com/1177282">SUSE bug 1177282</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695361" comment="cluster-md-kmp-64kb-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695352" comment="cluster-md-kmp-azure-5.3.18-150300.38.62.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684898" comment="cluster-md-kmp-default-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695362" comment="cluster-md-kmp-preempt-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695363" comment="dlm-kmp-64kb-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695353" comment="dlm-kmp-azure-5.3.18-150300.38.62.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684899" comment="dlm-kmp-default-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695364" comment="dlm-kmp-preempt-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695365" comment="dtb-al-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695366" comment="dtb-allwinner-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695367" comment="dtb-altera-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695368" comment="dtb-amd-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695369" comment="dtb-amlogic-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695370" comment="dtb-apm-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695371" comment="dtb-arm-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695372" comment="dtb-broadcom-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695373" comment="dtb-cavium-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695374" comment="dtb-exynos-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695375" comment="dtb-freescale-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695376" comment="dtb-hisilicon-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695377" comment="dtb-lg-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695378" comment="dtb-marvell-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695379" comment="dtb-mediatek-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695380" comment="dtb-nvidia-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695381" comment="dtb-qcom-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695382" comment="dtb-renesas-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695383" comment="dtb-rockchip-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695384" comment="dtb-socionext-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695385" comment="dtb-sprd-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695386" comment="dtb-xilinx-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695387" comment="dtb-zte-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695388" comment="gfs2-kmp-64kb-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695354" comment="gfs2-kmp-azure-5.3.18-150300.38.62.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684900" comment="gfs2-kmp-default-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695389" comment="gfs2-kmp-preempt-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684304" comment="kernel-64kb-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684305" comment="kernel-64kb-devel-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695390" comment="kernel-64kb-extra-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695391" comment="kernel-64kb-livepatch-devel-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695392" comment="kernel-64kb-optional-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684723" comment="kernel-azure-5.3.18-150300.38.62.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684724" comment="kernel-azure-devel-5.3.18-150300.38.62.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695355" comment="kernel-azure-extra-5.3.18-150300.38.62.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695356" comment="kernel-azure-livepatch-devel-5.3.18-150300.38.62.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695357" comment="kernel-azure-optional-5.3.18-150300.38.62.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695393" comment="kernel-debug-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695342" comment="kernel-debug-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695394" comment="kernel-debug-devel-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695395" comment="kernel-debug-livepatch-devel-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684306" comment="kernel-default-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684307" comment="kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695396" comment="kernel-default-base-rebuild-5.3.18-150300.59.76.1.150300.18.45.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684308" comment="kernel-default-devel-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695397" comment="kernel-default-extra-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695398" comment="kernel-default-livepatch-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695399" comment="kernel-default-livepatch-devel-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009693407" comment="kernel-default-man-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695400" comment="kernel-default-optional-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684309" comment="kernel-devel-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684725" comment="kernel-devel-azure-5.3.18-150300.38.62.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684433" comment="kernel-docs-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695401" comment="kernel-docs-html-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695402" comment="kernel-kvmsmall-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695343" comment="kernel-kvmsmall-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695403" comment="kernel-kvmsmall-devel-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695404" comment="kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684310" comment="kernel-macros-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684434" comment="kernel-obs-build-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695405" comment="kernel-obs-qa-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684311" comment="kernel-preempt-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684435" comment="kernel-preempt-devel-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695406" comment="kernel-preempt-extra-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695407" comment="kernel-preempt-livepatch-devel-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695408" comment="kernel-preempt-optional-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684436" comment="kernel-source-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684726" comment="kernel-source-azure-5.3.18-150300.38.62.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695409" comment="kernel-source-vanilla-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684437" comment="kernel-syms-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684727" comment="kernel-syms-azure-5.3.18-150300.38.62.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695344" comment="kernel-vanilla-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695345" comment="kernel-vanilla-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695346" comment="kernel-vanilla-devel-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695347" comment="kernel-vanilla-livepatch-devel-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684312" comment="kernel-zfcpdump-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695348" comment="kernel-zfcpdump-man-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695410" comment="kselftests-kmp-64kb-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695358" comment="kselftests-kmp-azure-5.3.18-150300.38.62.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695411" comment="kselftests-kmp-default-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695412" comment="kselftests-kmp-preempt-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695413" comment="ocfs2-kmp-64kb-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695359" comment="ocfs2-kmp-azure-5.3.18-150300.38.62.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684901" comment="ocfs2-kmp-default-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695414" comment="ocfs2-kmp-preempt-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695415" comment="reiserfs-kmp-64kb-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695360" comment="reiserfs-kmp-azure-5.3.18-150300.38.62.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684552" comment="reiserfs-kmp-default-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695416" comment="reiserfs-kmp-preempt-5.3.18-150300.59.76.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2655</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2655" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2655" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2655" ref_url="https://www.suse.com/security/cve/CVE-2020-2655" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006398.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2655/">CVE-2020-2655</cve>
	<bugzilla href="https://bugzilla.suse.com/1160968">SUSE bug 1160968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26558</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26558" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26558" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26558" ref_url="https://www.suse.com/security/cve/CVE-2020-26558" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2406-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2422-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2426-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3691-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012602.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2184-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GJZ4RMNGAPDHTNV6KJGNPSEJH2RUZFKU/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2202-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/T4PWFRJWECGAGZTBIOYHZ6KUMSA6KC43/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2291-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FGEHNTYN7DOZBN7IPNNCVSIU2JNPC226/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2427-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HJIMD6XIKYMKE35TUYXKKYPX4737LEVU/" source="SUSE-SU"/>
    <description>
    Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26558/">CVE-2020-26558</cve>
	<bugzilla href="https://bugzilla.suse.com/1179610">SUSE bug 1179610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186463">SUSE bug 1186463</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615874" comment="bluez-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165944" comment="bluez is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624651" comment="bluez-auto-enable-devices-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009242424" comment="bluez-auto-enable-devices is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625355" comment="bluez-cups-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165946" comment="bluez-cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625356" comment="bluez-deprecated-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009624698" comment="bluez-deprecated is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615895" comment="bluez-devel-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165948" comment="bluez-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624655" comment="bluez-devel-32bit-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165950" comment="bluez-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625357" comment="bluez-test-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165952" comment="bluez-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621377" comment="cluster-md-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621419" comment="cluster-md-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615914" comment="cluster-md-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621378" comment="cluster-md-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621379" comment="dlm-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621420" comment="dlm-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615915" comment="dlm-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621380" comment="dlm-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621381" comment="gfs2-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621421" comment="gfs2-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615916" comment="gfs2-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621382" comment="gfs2-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615876" comment="kernel-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615877" comment="kernel-64kb-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621383" comment="kernel-64kb-extra-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621384" comment="kernel-64kb-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621385" comment="kernel-64kb-optional-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615909" comment="kernel-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615910" comment="kernel-azure-devel-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621422" comment="kernel-azure-extra-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621423" comment="kernel-azure-livepatch-devel-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621424" comment="kernel-azure-optional-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621386" comment="kernel-debug-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625875" comment="kernel-debug-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621387" comment="kernel-debug-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621388" comment="kernel-debug-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615878" comment="kernel-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615879" comment="kernel-default-base-5.3.18-59.10.1.18.4.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621389" comment="kernel-default-base-rebuild-5.3.18-59.10.1.18.4.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615880" comment="kernel-default-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621390" comment="kernel-default-extra-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621391" comment="kernel-default-livepatch-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621392" comment="kernel-default-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625696" comment="kernel-default-man-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621393" comment="kernel-default-optional-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615881" comment="kernel-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615911" comment="kernel-devel-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615897" comment="kernel-docs-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621394" comment="kernel-docs-html-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621395" comment="kernel-kvmsmall-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625876" comment="kernel-kvmsmall-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621396" comment="kernel-kvmsmall-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621397" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615882" comment="kernel-macros-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615898" comment="kernel-obs-build-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621399" comment="kernel-obs-qa-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615883" comment="kernel-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615899" comment="kernel-preempt-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621400" comment="kernel-preempt-extra-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621401" comment="kernel-preempt-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621402" comment="kernel-preempt-optional-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615900" comment="kernel-source-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615912" comment="kernel-source-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621403" comment="kernel-source-vanilla-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615901" comment="kernel-syms-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615913" comment="kernel-syms-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625877" comment="kernel-vanilla-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625878" comment="kernel-vanilla-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625879" comment="kernel-vanilla-devel-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625880" comment="kernel-vanilla-livepatch-devel-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615884" comment="kernel-zfcpdump-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625881" comment="kernel-zfcpdump-man-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621404" comment="kselftests-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621425" comment="kselftests-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621405" comment="kselftests-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621406" comment="kselftests-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615875" comment="libbluetooth3-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165954" comment="libbluetooth3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624659" comment="libbluetooth3-32bit-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165956" comment="libbluetooth3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621407" comment="ocfs2-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621426" comment="ocfs2-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615917" comment="ocfs2-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621408" comment="ocfs2-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621409" comment="reiserfs-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621427" comment="reiserfs-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615902" comment="reiserfs-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621410" comment="reiserfs-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26664</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26664" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26664" ref_url="https://www.suse.com/security/cve/CVE-2020-26664" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0076-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OD6C4CTIQTZF237437FPGD5AIRV33TET/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0091-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KIZQCEFFNAB3CPF433JKRUT3ZM2EDM33/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0121-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IYGQU4F6PPW4XHK4LTESKSQ2CPHZS3QW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0122-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YJCT5WYFJXXNRF5NSC7LOIHN7BD5UKVV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0691-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6NFAANEHTTDAXZIGCXPSKGYDFZDQ3HMF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0714-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EXHKDVKJAYUS66PEMKU2REXIBZDZ6GFW/" source="SUSE-SU"/>
    <description>
    A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-04"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26664/">CVE-2020-26664</cve>
	<bugzilla href="https://bugzilla.suse.com/1180755">SUSE bug 1180755</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694884" comment="libvlc5-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694885" comment="libvlccore9-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694886" comment="vlc-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694887" comment="vlc-codec-gstreamer-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694888" comment="vlc-lang-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694889" comment="vlc-noX-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694890" comment="vlc-qt-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694891" comment="vlc-vdpau-3.0.13-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026682" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26682</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26682" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26682" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26682" ref_url="https://www.suse.com/security/cve/CVE-2020-26682" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0936-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008546.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0472-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BGQ6Q6RCVRPDWCXGFBVQDFSYE4QKBYMU/" source="SUSE-SU"/>
    <description>
    In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26682/">CVE-2020-26682</cve>
	<bugzilla href="https://bugzilla.suse.com/1177862">SUSE bug 1177862</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629194" comment="libass9-0.14.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177230" comment="libass9 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2674</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2674" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2674" ref_url="https://www.suse.com/security/cve/CVE-2020-2674" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2674/">CVE-2020-2674</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2678</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2678" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2678" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2678" ref_url="https://www.suse.com/security/cve/CVE-2020-2678" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-2678/">CVE-2020-2678</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202681" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2681</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2681" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2681" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2681" ref_url="https://www.suse.com/security/cve/CVE-2020-2681" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2681/">CVE-2020-2681</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202682" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2682</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2682" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2682" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2682" ref_url="https://www.suse.com/security/cve/CVE-2020-2682" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2682/">CVE-2020-2682</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2689</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2689" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2689" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2689" ref_url="https://www.suse.com/security/cve/CVE-2020-2689" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2689/">CVE-2020-2689</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2690</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2690" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2690" ref_url="https://www.suse.com/security/cve/CVE-2020-2690" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2690/">CVE-2020-2690</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2691</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2691" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2691" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2691" ref_url="https://www.suse.com/security/cve/CVE-2020-2691" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2691/">CVE-2020-2691</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2692</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2692" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2692" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2692" ref_url="https://www.suse.com/security/cve/CVE-2020-2692" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2692/">CVE-2020-2692</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2693</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2693" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2693" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2693" ref_url="https://www.suse.com/security/cve/CVE-2020-2693" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2693/">CVE-2020-2693</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026950" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26950</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26950" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26950" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26950" ref_url="https://www.suse.com/security/cve/CVE-2020-26950" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007762.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007766.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007767.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007779.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3418-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007812.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1909-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3AMXWTXD2SXOW4LKFZ4XU2QOQYXVDMOL/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1919-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/I6SUAYN7JWUE2A26Q6GJ5JMMXTKYHZSL/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2022-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RMGXD75QZYXYUNEY2A43RG5HRUA6C7BT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2133-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/A3SMMQGPABLYJBCFGYFKI43SSCXS244L/" source="SUSE-SU"/>
    <description>
    In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerability affects Firefox &lt; 82.0.3, Firefox ESR &lt; 78.4.1, and Thunderbird &lt; 78.4.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26950/">CVE-2020-26950</cve>
	<bugzilla href="https://bugzilla.suse.com/1177872">SUSE bug 1177872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178588">SUSE bug 1178588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178611">SUSE bug 1178611</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026951" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26951</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26951" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26951" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26951" ref_url="https://www.suse.com/security/cve/CVE-2020-26951" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007883.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2020-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LK7W6L42GLCUWLGKEJNDWSRASOS3CLIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2031-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KX646YBHO2LBCWJZORVE6CWXY2DMCYHR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2096-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DVMMW4XRNOGVJH2XZU4UUV2ATGSF6TJ6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2187-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JXIRQKYZLZFQPPH6RZY4V3IIMPGHUT5V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2315-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/76P3E35NHCSZCWGVU63J3OKJKJO3HUJD/" source="SUSE-SU"/>
    <description>
    A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability affects Firefox &lt; 83, Firefox ESR &lt; 78.5, and Thunderbird &lt; 78.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26951/">CVE-2020-26951</cve>
	<bugzilla href="https://bugzilla.suse.com/1178824">SUSE bug 1178824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178894">SUSE bug 1178894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026953" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26953</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26953" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26953" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26953" ref_url="https://www.suse.com/security/cve/CVE-2020-26953" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007883.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2020-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LK7W6L42GLCUWLGKEJNDWSRASOS3CLIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2031-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KX646YBHO2LBCWJZORVE6CWXY2DMCYHR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2096-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DVMMW4XRNOGVJH2XZU4UUV2ATGSF6TJ6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2187-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JXIRQKYZLZFQPPH6RZY4V3IIMPGHUT5V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2315-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/76P3E35NHCSZCWGVU63J3OKJKJO3HUJD/" source="SUSE-SU"/>
    <description>
    It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. This vulnerability affects Firefox &lt; 83, Firefox ESR &lt; 78.5, and Thunderbird &lt; 78.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26953/">CVE-2020-26953</cve>
	<bugzilla href="https://bugzilla.suse.com/1178824">SUSE bug 1178824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178894">SUSE bug 1178894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26956</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26956" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26956" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26956" ref_url="https://www.suse.com/security/cve/CVE-2020-26956" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007883.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2020-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LK7W6L42GLCUWLGKEJNDWSRASOS3CLIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2031-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KX646YBHO2LBCWJZORVE6CWXY2DMCYHR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2096-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DVMMW4XRNOGVJH2XZU4UUV2ATGSF6TJ6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2187-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JXIRQKYZLZFQPPH6RZY4V3IIMPGHUT5V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2315-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/76P3E35NHCSZCWGVU63J3OKJKJO3HUJD/" source="SUSE-SU"/>
    <description>
    In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to XSS. This vulnerability affects Firefox &lt; 83, Firefox ESR &lt; 78.5, and Thunderbird &lt; 78.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26956/">CVE-2020-26956</cve>
	<bugzilla href="https://bugzilla.suse.com/1178824">SUSE bug 1178824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178894">SUSE bug 1178894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26958</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26958" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26958" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26958" ref_url="https://www.suse.com/security/cve/CVE-2020-26958" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007883.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2020-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LK7W6L42GLCUWLGKEJNDWSRASOS3CLIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2031-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KX646YBHO2LBCWJZORVE6CWXY2DMCYHR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2096-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DVMMW4XRNOGVJH2XZU4UUV2ATGSF6TJ6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2187-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JXIRQKYZLZFQPPH6RZY4V3IIMPGHUT5V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2315-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/76P3E35NHCSZCWGVU63J3OKJKJO3HUJD/" source="SUSE-SU"/>
    <description>
    Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker. This could lead to a cross-site script inclusion vulnerability, or a Content Security Policy bypass. This vulnerability affects Firefox &lt; 83, Firefox ESR &lt; 78.5, and Thunderbird &lt; 78.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26958/">CVE-2020-26958</cve>
	<bugzilla href="https://bugzilla.suse.com/1178824">SUSE bug 1178824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178894">SUSE bug 1178894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26959</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26959" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26959" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26959" ref_url="https://www.suse.com/security/cve/CVE-2020-26959" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007883.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2020-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LK7W6L42GLCUWLGKEJNDWSRASOS3CLIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2031-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KX646YBHO2LBCWJZORVE6CWXY2DMCYHR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2096-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DVMMW4XRNOGVJH2XZU4UUV2ATGSF6TJ6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2187-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JXIRQKYZLZFQPPH6RZY4V3IIMPGHUT5V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2315-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/76P3E35NHCSZCWGVU63J3OKJKJO3HUJD/" source="SUSE-SU"/>
    <description>
    During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox &lt; 83, Firefox ESR &lt; 78.5, and Thunderbird &lt; 78.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26959/">CVE-2020-26959</cve>
	<bugzilla href="https://bugzilla.suse.com/1178824">SUSE bug 1178824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178894">SUSE bug 1178894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26960</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26960" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26960" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26960" ref_url="https://www.suse.com/security/cve/CVE-2020-26960" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007883.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2020-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LK7W6L42GLCUWLGKEJNDWSRASOS3CLIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2031-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KX646YBHO2LBCWJZORVE6CWXY2DMCYHR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2096-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DVMMW4XRNOGVJH2XZU4UUV2ATGSF6TJ6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2187-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JXIRQKYZLZFQPPH6RZY4V3IIMPGHUT5V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2315-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/76P3E35NHCSZCWGVU63J3OKJKJO3HUJD/" source="SUSE-SU"/>
    <description>
    If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potential use-after-free and exploitable crash. This vulnerability affects Firefox &lt; 83, Firefox ESR &lt; 78.5, and Thunderbird &lt; 78.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26960/">CVE-2020-26960</cve>
	<bugzilla href="https://bugzilla.suse.com/1178824">SUSE bug 1178824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178894">SUSE bug 1178894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26961</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26961" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26961" ref_url="https://www.suse.com/security/cve/CVE-2020-26961" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007883.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2020-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LK7W6L42GLCUWLGKEJNDWSRASOS3CLIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2031-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KX646YBHO2LBCWJZORVE6CWXY2DMCYHR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2096-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DVMMW4XRNOGVJH2XZU4UUV2ATGSF6TJ6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2187-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JXIRQKYZLZFQPPH6RZY4V3IIMPGHUT5V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2315-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/76P3E35NHCSZCWGVU63J3OKJKJO3HUJD/" source="SUSE-SU"/>
    <description>
    When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver. However when an IPv4 address was mapped through IPv6, these addresses were erroneously let through, leading to a potential DNS Rebinding attack. This vulnerability affects Firefox &lt; 83, Firefox ESR &lt; 78.5, and Thunderbird &lt; 78.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26961/">CVE-2020-26961</cve>
	<bugzilla href="https://bugzilla.suse.com/1178824">SUSE bug 1178824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178894">SUSE bug 1178894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26965</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26965" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26965" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26965" ref_url="https://www.suse.com/security/cve/CVE-2020-26965" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007883.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2020-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LK7W6L42GLCUWLGKEJNDWSRASOS3CLIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2031-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KX646YBHO2LBCWJZORVE6CWXY2DMCYHR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2096-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DVMMW4XRNOGVJH2XZU4UUV2ATGSF6TJ6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2187-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JXIRQKYZLZFQPPH6RZY4V3IIMPGHUT5V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2315-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/76P3E35NHCSZCWGVU63J3OKJKJO3HUJD/" source="SUSE-SU"/>
    <description>
    Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when using a software keyboard that remembers user input, a user typed their password and used that feature, the type of the password field was changed, resulting in a keyboard layout change and the possibility for the software keyboard to remember the typed password. This vulnerability affects Firefox &lt; 83, Firefox ESR &lt; 78.5, and Thunderbird &lt; 78.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-26965/">CVE-2020-26965</cve>
	<bugzilla href="https://bugzilla.suse.com/1178824">SUSE bug 1178824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178894">SUSE bug 1178894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26966</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26966" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26966" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26966" ref_url="https://www.suse.com/security/cve/CVE-2020-26966" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007883.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2020-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LK7W6L42GLCUWLGKEJNDWSRASOS3CLIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2031-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KX646YBHO2LBCWJZORVE6CWXY2DMCYHR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2096-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DVMMW4XRNOGVJH2XZU4UUV2ATGSF6TJ6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2187-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JXIRQKYZLZFQPPH6RZY4V3IIMPGHUT5V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2315-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/76P3E35NHCSZCWGVU63J3OKJKJO3HUJD/" source="SUSE-SU"/>
    <description>
    Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox &lt; 83, Firefox ESR &lt; 78.5, and Thunderbird &lt; 78.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-26966/">CVE-2020-26966</cve>
	<bugzilla href="https://bugzilla.suse.com/1178824">SUSE bug 1178824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178894">SUSE bug 1178894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026968" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26968</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26968" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26968" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26968" ref_url="https://www.suse.com/security/cve/CVE-2020-26968" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007883.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2020-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LK7W6L42GLCUWLGKEJNDWSRASOS3CLIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2031-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KX646YBHO2LBCWJZORVE6CWXY2DMCYHR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2096-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DVMMW4XRNOGVJH2XZU4UUV2ATGSF6TJ6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2187-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JXIRQKYZLZFQPPH6RZY4V3IIMPGHUT5V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2315-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/76P3E35NHCSZCWGVU63J3OKJKJO3HUJD/" source="SUSE-SU"/>
    <description>
    Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox &lt; 83, Firefox ESR &lt; 78.5, and Thunderbird &lt; 78.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26968/">CVE-2020-26968</cve>
	<bugzilla href="https://bugzilla.suse.com/1178824">SUSE bug 1178824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178894">SUSE bug 1178894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26970</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26970" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26970" ref_url="https://www.suse.com/security/cve/CVE-2020-26970" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3642-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008122.html" source="SUSE-SU"/>
    <description>
    When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to stack corruption that may be exploitable. This vulnerability affects Thunderbird &lt; 78.5.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26970/">CVE-2020-26970</cve>
	<bugzilla href="https://bugzilla.suse.com/1179530">SUSE bug 1179530</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26971</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26971" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26971" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26971" ref_url="https://www.suse.com/security/cve/CVE-2020-26971" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3902-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008122.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2317-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZRYMYUEZXYQNBK2DWV7DAYE5EXEQPBUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2318-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LL2B6S5KIA4HGLES3CDLSB4VRZW275H2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2324-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MFGNB2YB4LDKDYXRSTS5R357XYHABN5P/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2325-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JZN3OVPTOCIWBAWJK4JZQDXFN752D6AR/" source="SUSE-SU"/>
    <description>
    Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers. This vulnerability affects Firefox &lt; 84, Thunderbird &lt; 78.6, and Firefox ESR &lt; 78.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26971/">CVE-2020-26971</cve>
	<bugzilla href="https://bugzilla.suse.com/1180039">SUSE bug 1180039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26973</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26973" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26973" ref_url="https://www.suse.com/security/cve/CVE-2020-26973" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3902-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008122.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2317-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZRYMYUEZXYQNBK2DWV7DAYE5EXEQPBUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2318-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LL2B6S5KIA4HGLES3CDLSB4VRZW275H2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2324-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MFGNB2YB4LDKDYXRSTS5R357XYHABN5P/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2325-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JZN3OVPTOCIWBAWJK4JZQDXFN752D6AR/" source="SUSE-SU"/>
    <description>
    Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This could have been used as a sanitizer bypass. This vulnerability affects Firefox &lt; 84, Thunderbird &lt; 78.6, and Firefox ESR &lt; 78.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26973/">CVE-2020-26973</cve>
	<bugzilla href="https://bugzilla.suse.com/1180039">SUSE bug 1180039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26974</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26974" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26974" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26974" ref_url="https://www.suse.com/security/cve/CVE-2020-26974" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3902-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008122.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2317-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZRYMYUEZXYQNBK2DWV7DAYE5EXEQPBUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2318-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LL2B6S5KIA4HGLES3CDLSB4VRZW275H2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2324-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MFGNB2YB4LDKDYXRSTS5R357XYHABN5P/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2325-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JZN3OVPTOCIWBAWJK4JZQDXFN752D6AR/" source="SUSE-SU"/>
    <description>
    When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly cast to the wrong type. This resulted in a heap user-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox &lt; 84, Thunderbird &lt; 78.6, and Firefox ESR &lt; 78.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26974/">CVE-2020-26974</cve>
	<bugzilla href="https://bugzilla.suse.com/1180039">SUSE bug 1180039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26976</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26976" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26976" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26976" ref_url="https://www.suse.com/security/cve/CVE-2020-26976" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008254.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0257-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008261.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008256.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0208-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PJ6EGWAN3STX7MVPJ6SXVNB6AQBHBJEA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0209-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LV6TQVT6324Y5SWHTL34EKZT7PFDOYE4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0222-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PYQVYICIBRGAYRG5HERVZ2YG2FAQSVAR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0223-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/52CRMXRMPMDDBTKZVMDMEO76I3JZEYGF/" source="SUSE-SU"/>
    <description>
    When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the iframe not being a secure context due to the (insecure) framing. This vulnerability affects Firefox &lt; 84.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26976/">CVE-2020-26976</cve>
	<bugzilla href="https://bugzilla.suse.com/1180039">SUSE bug 1180039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181414">SUSE bug 1181414</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202026978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-26978</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-26978" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26978" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-26978" ref_url="https://www.suse.com/security/cve/CVE-2020-26978" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3902-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008122.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2317-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZRYMYUEZXYQNBK2DWV7DAYE5EXEQPBUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2318-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LL2B6S5KIA4HGLES3CDLSB4VRZW275H2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2324-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MFGNB2YB4LDKDYXRSTS5R357XYHABN5P/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2325-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JZN3OVPTOCIWBAWJK4JZQDXFN752D6AR/" source="SUSE-SU"/>
    <description>
    Using techniques that built on the slipstream research, a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox &lt; 84, Thunderbird &lt; 78.6, and Firefox ESR &lt; 78.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26978/">CVE-2020-26978</cve>
	<bugzilla href="https://bugzilla.suse.com/1180039">SUSE bug 1180039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2698</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2698" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2698" ref_url="https://www.suse.com/security/cve/CVE-2020-2698" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2698/">CVE-2020-2698</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2701</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2701" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2701" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2701" ref_url="https://www.suse.com/security/cve/CVE-2020-2701" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2701/">CVE-2020-2701</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2702</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2702" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2702" ref_url="https://www.suse.com/security/cve/CVE-2020-2702" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2702/">CVE-2020-2702</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202703" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2703</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2703" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2703" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2703" ref_url="https://www.suse.com/security/cve/CVE-2020-2703" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36 and prior to 6.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-2703/">CVE-2020-2703</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2704</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2704" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2704" ref_url="https://www.suse.com/security/cve/CVE-2020-2704" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2704/">CVE-2020-2704</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2705</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2705" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2705" ref_url="https://www.suse.com/security/cve/CVE-2020-2705" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2705/">CVE-2020-2705</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27068</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27068" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27068" ref_url="https://www.suse.com/security/cve/CVE-2020-27068" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008187.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7EJISS2OPKUSJFJ2BG5ZWHA2Z6H3VQB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    Product: AndroidVersions: Android kernelAndroid ID: A-127973231References: Upstream kernel
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27068/">CVE-2020-27068</cve>
	<bugzilla href="https://bugzilla.suse.com/1180086">SUSE bug 1180086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27170</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27170" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27170" ref_url="https://www.suse.com/security/cve/CVE-2020-27170" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1175-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008625.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008624.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1210-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1211-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0532-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZC652CKFCHQCNNU7MZKBTO27OZE22Q5U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0758-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BUQVIATUWQNZFSV6IFJENJSRWJSP2QHF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This affects pointer types that do not define a ptr_limit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27170/">CVE-2020-27170</cve>
	<bugzilla href="https://bugzilla.suse.com/1183686">SUSE bug 1183686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183775">SUSE bug 1183775</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27171</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27171" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27171" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27171" ref_url="https://www.suse.com/security/cve/CVE-2020-27171" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1175-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008625.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008624.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1210-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1211-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0532-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZC652CKFCHQCNNU7MZKBTO27OZE22Q5U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0758-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BUQVIATUWQNZFSV6IFJENJSRWJSP2QHF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-10d2bb2e6b1d.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27171/">CVE-2020-27171</cve>
	<bugzilla href="https://bugzilla.suse.com/1183686">SUSE bug 1183686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183775">SUSE bug 1183775</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27194</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27194" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27194" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27194" ref_url="https://www.suse.com/security/cve/CVE-2020-27194" source="SUSE CVE"/>
    <description>
    An issue was discovered in the Linux kernel before 5.8.15. scalar32_min_max_or in kernel/bpf/verifier.c mishandles bounds tracking during use of 64-bit values, aka CID-5b9fbeb75b6a.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27194/">CVE-2020-27194</cve>
	<bugzilla href="https://bugzilla.suse.com/1177889">SUSE bug 1177889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27208</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27208" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27208" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27208" ref_url="https://www.suse.com/security/cve/CVE-2020-27208" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:1019-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KVSCA7DKULXER7BGQ3YJN34AY5RPCIU5/" source="SUSE-SU"/>
    <description>
    The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 &amp; Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27208/">CVE-2020-27208</cve>
	<bugzilla href="https://bugzilla.suse.com/1186848">SUSE bug 1186848</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624526" comment="solo-udev-4.1.2-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009624529" comment="solo-udev is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202725" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2725</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2725" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2725" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2725" ref_url="https://www.suse.com/security/cve/CVE-2020-2725" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-2725/">CVE-2020-2725</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202726" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2726</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2726" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2726" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2726" ref_url="https://www.suse.com/security/cve/CVE-2020-2726" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2726/">CVE-2020-2726</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202727" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2727</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2727" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2727" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2727" ref_url="https://www.suse.com/security/cve/CVE-2020-2727" source="SUSE CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2727/">CVE-2020-2727</cve>
	<bugzilla href="https://bugzilla.suse.com/1161050">SUSE bug 1161050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27304</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27304" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27304" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27304" ref_url="https://www.suse.com/security/cve/CVE-2020-27304" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:1424-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YJTZUANR73SYTZDQ6GMWGRR5O4MCEJA4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LO2K2OYJXIHKCXT4ZI6S7RGIOS27RIOY/" source="SUSE-SU"/>
    <description>
    The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web applications that use the file upload form handler, and use parts of the user-controlled filename in the output path, are susceptible to directory traversal
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27304/">CVE-2020-27304</cve>
	<bugzilla href="https://bugzilla.suse.com/1191938">SUSE bug 1191938</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684128" comment="civetweb-1.15-lp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653861" comment="civetweb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684129" comment="civetweb-devel-1.15-lp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653862" comment="civetweb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684130" comment="libcivetweb-cpp1_15_0-1.15-lp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653863" comment="libcivetweb-cpp1_15_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684131" comment="libcivetweb1_15_0-1.15-lp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009653864" comment="libcivetweb1_15_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2732</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2732" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2732" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2732" ref_url="https://www.suse.com/security/cve/CVE-2020-2732" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0558-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0667-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0688-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006612.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2732/">CVE-2020-2732</cve>
	<bugzilla href="https://bugzilla.suse.com/1163971">SUSE bug 1163971</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027347" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27347</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27347" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27347" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27347" ref_url="https://www.suse.com/security/cve/CVE-2020-27347" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00020.html" source="SUSE-SU"/>
    <description>
    In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based buffer-overflow that can be exploited by terminal output.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27347/">CVE-2020-27347</cve>
	<bugzilla href="https://bugzilla.suse.com/1178263">SUSE bug 1178263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178316">SUSE bug 1178316</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694920" comment="tmux-3.1c-bp153.1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009298611" comment="tmux is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2752</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2752" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2752" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2752" ref_url="https://www.suse.com/security/cve/CVE-2020-2752" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1711-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007915.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0870-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00054.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior, 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-2752/">CVE-2020-2752</cve>
	<bugzilla href="https://bugzilla.suse.com/1171550">SUSE bug 1171550</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2754</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2754" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2754" ref_url="https://www.suse.com/security/cve/CVE-2020-2754" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2754/">CVE-2020-2754</cve>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172277">SUSE bug 1172277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2755</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2755" ref_url="https://www.suse.com/security/cve/CVE-2020-2755" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2755/">CVE-2020-2755</cve>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172277">SUSE bug 1172277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2756</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2756" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2756" ref_url="https://www.suse.com/security/cve/CVE-2020-2756" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006906.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2756/">CVE-2020-2756</cve>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172277">SUSE bug 1172277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27560</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27560" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27560" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27560" ref_url="https://www.suse.com/security/cve/CVE-2020-27560" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007698.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007699.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1884-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1927-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AGPRC7JUH4MGYAWLWPLVA5TLIICGY75B/" source="SUSE-SU"/>
    <description>
    ImageMagick 7.0.10-34 allows Division by Zero in OptimizeLayerFrames in MagickCore/layer.c, which may cause a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27560/">CVE-2020-27560</cve>
	<bugzilla href="https://bugzilla.suse.com/1178067">SUSE bug 1178067</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202757" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2757</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2757" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2757" ref_url="https://www.suse.com/security/cve/CVE-2020-2757" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006906.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2757/">CVE-2020-2757</cve>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172277">SUSE bug 1172277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2760</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2760" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2760" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2760" ref_url="https://www.suse.com/security/cve/CVE-2020-2760" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1711-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007915.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0870-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00054.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-2760/">CVE-2020-2760</cve>
	<bugzilla href="https://bugzilla.suse.com/1171550">SUSE bug 1171550</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27618</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27618" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27618" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27618" ref_url="https://www.suse.com/security/cve/CVE-2020-27618" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:58-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:59-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008397.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0358-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WMNRZB427QFJOPYP4EA4KBZOTT622NY3/" source="SUSE-SU"/>
    <description>
    The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite loop in applications, resulting in a denial of service, a different vulnerability from CVE-2016-10228.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27618/">CVE-2020-27618</cve>
	<bugzilla href="https://bugzilla.suse.com/1178386">SUSE bug 1178386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27619</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27619" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27619" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27619" ref_url="https://www.suse.com/security/cve/CVE-2020-27619" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3865-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008118.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2332-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S3JTHM6LLDKL7VPNRJUSRPNZAD2FZ25H/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2333-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FLGERALYYFTBIX3ZKPM6EQ2WJVUXLOXY/" source="SUSE-SU"/>
    <description>
    In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27619/">CVE-2020-27619</cve>
	<bugzilla href="https://bugzilla.suse.com/1178009">SUSE bug 1178009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180254">SUSE bug 1180254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193386">SUSE bug 1193386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694869" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694870" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694871" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694872" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694873" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2767</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2767" ref_url="https://www.suse.com/security/cve/CVE-2020-2767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006907.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2767/">CVE-2020-2767</cve>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27670</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27670" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27670" ref_url="https://www.suse.com/security/cve/CVE-2020-27670" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007635.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007667.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3627-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007918.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007922.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007959.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1783-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1844-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2162-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4FGJHRZRKWQ2TYU34S47P4GNDICF6RCY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2192-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5GBNU2YMLJN6R7ACNKZML4MG7X35FZTY/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because an AMD IOMMU page-table entry can be half-updated.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27670/">CVE-2020-27670</cve>
	<bugzilla href="https://bugzilla.suse.com/1177414">SUSE bug 1177414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183925">SUSE bug 1183925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27671</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27671" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27671" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27671" ref_url="https://www.suse.com/security/cve/CVE-2020-27671" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007635.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007667.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3627-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007918.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007922.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007959.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1783-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1844-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2162-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4FGJHRZRKWQ2TYU34S47P4GNDICF6RCY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2192-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5GBNU2YMLJN6R7ACNKZML4MG7X35FZTY/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27671/">CVE-2020-27671</cve>
	<bugzilla href="https://bugzilla.suse.com/1177413">SUSE bug 1177413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183925">SUSE bug 1183925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27672</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27672" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27672" ref_url="https://www.suse.com/security/cve/CVE-2020-27672" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007635.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007667.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3627-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007918.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007922.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007959.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1783-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1844-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2162-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4FGJHRZRKWQ2TYU34S47P4GNDICF6RCY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2192-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5GBNU2YMLJN6R7ACNKZML4MG7X35FZTY/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27672/">CVE-2020-27672</cve>
	<bugzilla href="https://bugzilla.suse.com/1177412">SUSE bug 1177412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183925">SUSE bug 1183925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27673</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27673" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27673" ref_url="https://www.suse.com/security/cve/CVE-2020-27673" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007635.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007667.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007748.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007842.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1783-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1844-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service (host OS hang) via a high rate of events to dom0, aka CID-e99502f76271.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27673/">CVE-2020-27673</cve>
	<bugzilla href="https://bugzilla.suse.com/1177411">SUSE bug 1177411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184583">SUSE bug 1184583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695715" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695716" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695717" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695718" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695719" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695720" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695721" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695722" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695723" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695724" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27674</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27674" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27674" ref_url="https://www.suse.com/security/cve/CVE-2020-27674" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3627-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007918.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007922.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007959.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2162-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4FGJHRZRKWQ2TYU34S47P4GNDICF6RCY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2192-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5GBNU2YMLJN6R7ACNKZML4MG7X35FZTY/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents, because invalidation of TLB entries is mishandled during use of an INVLPG-like attack technique.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27674/">CVE-2020-27674</cve>
	<bugzilla href="https://bugzilla.suse.com/1177409">SUSE bug 1177409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27675</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27675" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27675" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27675" ref_url="https://www.suse.com/security/cve/CVE-2020-27675" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007748.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007842.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. drivers/xen/events/events_base.c allows event-channel removal during the event-handling loop (a race condition). This can cause a use-after-free or NULL pointer dereference, as demonstrated by a dom0 crash via events for an in-reconfiguration paravirtualized device, aka CID-073d0552ead5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27675/">CVE-2020-27675</cve>
	<bugzilla href="https://bugzilla.suse.com/1177410">SUSE bug 1177410</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2773</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2773" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2773" ref_url="https://www.suse.com/security/cve/CVE-2020-2773" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006906.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2773/">CVE-2020-2773</cve>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27749</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27749" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27749" ref_url="https://www.suse.com/security/cve/CVE-2020-27749" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0681-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008423.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14659-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-March/018162.html" source="SUSE-SU"/>
		<reference ref_id="TID000019892" ref_url="https://www.suse.com/support/kb/doc/?id=000019892" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0462-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XXPYL42MSKRB4D7LRFMW7PBGGLKSJKPS/" source="SUSE-SU"/>
    <description>
    A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that references a variable with a sufficiently large payload, it is possible to overflow the stack buffer, corrupt the stack frame and control execution which could also circumvent Secure Boot protections. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27749/">CVE-2020-27749</cve>
	<bugzilla href="https://bugzilla.suse.com/1179264">SUSE bug 1179264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628504" comment="grub2-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628505" comment="grub2-arm64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623763" comment="grub2-arm64-efi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628506" comment="grub2-i386-pc-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628507" comment="grub2-powerpc-ieee1275-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623765" comment="grub2-powerpc-ieee1275 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628509" comment="grub2-snapper-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628510" comment="grub2-systemd-sleep-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628511" comment="grub2-x86_64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27750</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27750" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27750" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27750" ref_url="https://www.suse.com/security/cve/CVE-2020-27750" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` and math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27750/">CVE-2020-27750</cve>
	<bugzilla href="https://bugzilla.suse.com/1179260">SUSE bug 1179260</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27751</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27751" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27751" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27751" ref_url="https://www.suse.com/security/cve/CVE-2020-27751" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long long` as well as a shift exponent that is too large for 64-bit type. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27751/">CVE-2020-27751</cve>
	<bugzilla href="https://bugzilla.suse.com/1179269">SUSE bug 1179269</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27752</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27752" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27752" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27752" ref_url="https://www.suse.com/security/cve/CVE-2020-27752" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data integrity as well. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27752/">CVE-2020-27752</cve>
	<bugzilla href="https://bugzilla.suse.com/1179202">SUSE bug 1179202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179346">SUSE bug 1179346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27753</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27753" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27753" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27753" ref_url="https://www.suse.com/security/cve/CVE-2020-27753" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported that the issues were in `AcquireMagickMemory()` because that is where LeakSanitizer detected the leaks, but the patch resolves issues in the MIFF coder, which incorrectly handles data being passed to `AcquireMagickMemory()`. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27753/">CVE-2020-27753</cve>
	<bugzilla href="https://bugzilla.suse.com/1179397">SUSE bug 1179397</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27754</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27754" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27754" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27754" ref_url="https://www.suse.com/security/cve/CVE-2020-27754" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity() function, which forces the pixel intensities to be within the proper bounds in the event of an overflow. This flaw affects ImageMagick versions prior to 6.9.10-69 and 7.0.8-69.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27754/">CVE-2020-27754</cve>
	<bugzilla href="https://bugzilla.suse.com/1179313">SUSE bug 1179313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179336">SUSE bug 1179336</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27755</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27755" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27755" ref_url="https://www.suse.com/security/cve/CVE-2020-27755" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the proper image depth size does not reset the size in the event there is an invalid size. The patch resets the depth to a proper size before throwing an exception. The memory leak can be triggered by a crafted input file that is processed by ImageMagick and could cause an impact to application reliability, such as denial of service. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27755/">CVE-2020-27755</cve>
	<bugzilla href="https://bugzilla.suse.com/1179345">SUSE bug 1179345</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27756</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27756" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27756" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27756" ref_url="https://www.suse.com/security/cve/CVE-2020-27756" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead to undefined behavior. This flaw can be triggered by a crafted input file processed by ImageMagick and could impact application availability. The patch uses multiplication in addition to the function `PerceptibleReciprocal()` in order to prevent such divide-by-zero conditions. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27756/">CVE-2020-27756</cve>
	<bugzilla href="https://bugzilla.suse.com/1179221">SUSE bug 1179221</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027757" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27757</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27757" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27757" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27757" ref_url="https://www.suse.com/security/cve/CVE-2020-27757" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by ImageMagick. Red Hat Product Security marked this as Low because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 7.0.8-68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27757/">CVE-2020-27757</cve>
	<bugzilla href="https://bugzilla.suse.com/1179268">SUSE bug 1179268</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27758</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27758" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27758" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27758" ref_url="https://www.suse.com/security/cve/CVE-2020-27758" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long long`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27758/">CVE-2020-27758</cve>
	<bugzilla href="https://bugzilla.suse.com/1179276">SUSE bug 1179276</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027759" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27759</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27759" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27759" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27759" ref_url="https://www.suse.com/security/cve/CVE-2020-27759" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    In IntensityCompare() of /MagickCore/quantize.c, a double value was being casted to int and returned, which in some cases caused a value outside the range of type `int` to be returned. The flaw could be triggered by a crafted input file under certain conditions when processed by ImageMagick. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 7.0.8-68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27759/">CVE-2020-27759</cve>
	<bugzilla href="https://bugzilla.suse.com/1179313">SUSE bug 1179313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179321">SUSE bug 1179321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179336">SUSE bug 1179336</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27760</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27760" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27760" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27760" ref_url="https://www.suse.com/security/cve/CVE-2020-27760" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    In `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to trigger a divide-by-zero condition when a crafted input file is processed by ImageMagick. This could lead to an impact to application availability. The patch uses the `PerceptibleReciprocal()` to prevent the divide-by-zero from occurring. This flaw affects ImageMagick versions prior to ImageMagick 7.0.8-68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27760/">CVE-2020-27760</cve>
	<bugzilla href="https://bugzilla.suse.com/1179281">SUSE bug 1179281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27761</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27761" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27761" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27761" ref_url="https://www.suse.com/security/cve/CVE-2020-27761" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    WritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which could lead to values outside the range of representable type `unsigned long` undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to `ssize_t` instead to avoid this issue. Red Hat Product Security marked the Severity as Low because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to ImageMagick 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27761/">CVE-2020-27761</cve>
	<bugzilla href="https://bugzilla.suse.com/1179315">SUSE bug 1179315</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27762</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27762" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27762" ref_url="https://www.suse.com/security/cve/CVE-2020-27762" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to ImageMagick 7.0.8-68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27762/">CVE-2020-27762</cve>
	<bugzilla href="https://bugzilla.suse.com/1179278">SUSE bug 1179278</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27763</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27763" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27763" ref_url="https://www.suse.com/security/cve/CVE-2020-27763" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27763/">CVE-2020-27763</cve>
	<bugzilla href="https://bugzilla.suse.com/1179312">SUSE bug 1179312</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27764</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27764" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27764" ref_url="https://www.suse.com/security/cve/CVE-2020-27764" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ssize_t cast, which causes out-of-range values under some circumstances when a crafted input file is processed by ImageMagick. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 6.9.10-69.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27764/">CVE-2020-27764</cve>
	<bugzilla href="https://bugzilla.suse.com/1179317">SUSE bug 1179317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179333">SUSE bug 1179333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27765</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27765" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27765" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27765" ref_url="https://www.suse.com/security/cve/CVE-2020-27765" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27765/">CVE-2020-27765</cve>
	<bugzilla href="https://bugzilla.suse.com/1179311">SUSE bug 1179311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27766</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27766" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27766" ref_url="https://www.suse.com/security/cve/CVE-2020-27766" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-69.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27766/">CVE-2020-27766</cve>
	<bugzilla href="https://bugzilla.suse.com/1179333">SUSE bug 1179333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179361">SUSE bug 1179361</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27767</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27767" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27767" ref_url="https://www.suse.com/security/cve/CVE-2020-27767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008351.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of types `float` and `unsigned char`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27767/">CVE-2020-27767</cve>
	<bugzilla href="https://bugzilla.suse.com/1179268">SUSE bug 1179268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179269">SUSE bug 1179269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179322">SUSE bug 1179322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179346">SUSE bug 1179346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27768</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27768" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27768" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27768" ref_url="https://www.suse.com/security/cve/CVE-2020-27768" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27768/">CVE-2020-27768</cve>
	<bugzilla href="https://bugzilla.suse.com/1179339">SUSE bug 1179339</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27769</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27769" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27769" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27769" ref_url="https://www.suse.com/security/cve/CVE-2020-27769" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27769/">CVE-2020-27769</cve>
	<bugzilla href="https://bugzilla.suse.com/1179321">SUSE bug 1179321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027770" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27770</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27770" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27770" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27770" ref_url="https://www.suse.com/security/cve/CVE-2020-27770" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered by a crafted input file that is processed by ImageMagick. This flaw affects ImageMagick versions prior to 7.0.8-68.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27770/">CVE-2020-27770</cve>
	<bugzilla href="https://bugzilla.suse.com/1179343">SUSE bug 1179343</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27771</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27771" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27771" ref_url="https://www.suse.com/security/cve/CVE-2020-27771" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex() to ssize_t type to avoid this bug. This undefined behavior could be triggered when ImageMagick processes a crafted pdf file. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was demonstrated in this case. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27771/">CVE-2020-27771</cve>
	<bugzilla href="https://bugzilla.suse.com/1179327">SUSE bug 1179327</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27772</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27772" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27772" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27772" ref_url="https://www.suse.com/security/cve/CVE-2020-27772" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned int`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27772/">CVE-2020-27772</cve>
	<bugzilla href="https://bugzilla.suse.com/1179347">SUSE bug 1179347</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27773</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27773" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27773" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27773" ref_url="https://www.suse.com/security/cve/CVE-2020-27773" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` or division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27773/">CVE-2020-27773</cve>
	<bugzilla href="https://bugzilla.suse.com/1179285">SUSE bug 1179285</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27774</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27774" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27774" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27774" ref_url="https://www.suse.com/security/cve/CVE-2020-27774" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of a too large shift for 64-bit type `ssize_t`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27774/">CVE-2020-27774</cve>
	<bugzilla href="https://bugzilla.suse.com/1179317">SUSE bug 1179317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179333">SUSE bug 1179333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179361">SUSE bug 1179361</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27775</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27775" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27775" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27775" ref_url="https://www.suse.com/security/cve/CVE-2020-27775" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27775/">CVE-2020-27775</cve>
	<bugzilla href="https://bugzilla.suse.com/1179338">SUSE bug 1179338</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27776</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27776" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27776" ref_url="https://www.suse.com/security/cve/CVE-2020-27776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27776/">CVE-2020-27776</cve>
	<bugzilla href="https://bugzilla.suse.com/1179333">SUSE bug 1179333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179362">SUSE bug 1179362</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27777</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27777" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27777" ref_url="https://www.suse.com/security/cve/CVE-2020-27777" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007937.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3714-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-December/017242.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007938.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007978.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2161-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ICEKZTGIQ6MSKDFOTIOJ2RLWAWJFPSYA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2193-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4YRSQJNKLIOJJTD3P2UKMHRFMCIG3JDN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2260-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZYES3O2NEKKQXQ3R5CZOH5YCWJ3TJSKH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7EJISS2OPKUSJFJ2BG5ZWHA2Z6H3VQB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27777/">CVE-2020-27777</cve>
	<bugzilla href="https://bugzilla.suse.com/1179107">SUSE bug 1179107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179419">SUSE bug 1179419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200343">SUSE bug 1200343</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27778</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27778" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27778" ref_url="https://www.suse.com/security/cve/CVE-2020-27778" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27778/">CVE-2020-27778</cve>
	<bugzilla href="https://bugzilla.suse.com/1179163">SUSE bug 1179163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177149" comment="libpoppler73 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658240" comment="libpoppler73-32bit-0.62.0-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009658868" comment="libpoppler73-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27779</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27779" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27779" ref_url="https://www.suse.com/security/cve/CVE-2020-27779" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0681-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008423.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14659-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-March/018162.html" source="SUSE-SU"/>
		<reference ref_id="TID000019892" ref_url="https://www.suse.com/support/kb/doc/?id=000019892" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0462-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XXPYL42MSKRB4D7LRFMW7PBGGLKSJKPS/" source="SUSE-SU"/>
    <description>
    A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker to remove address ranges from memory creating an opportunity to circumvent SecureBoot protections after proper triage about grub's memory layout. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27779/">CVE-2020-27779</cve>
	<bugzilla href="https://bugzilla.suse.com/1179265">SUSE bug 1179265</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628504" comment="grub2-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628505" comment="grub2-arm64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623763" comment="grub2-arm64-efi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628506" comment="grub2-i386-pc-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628507" comment="grub2-powerpc-ieee1275-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623765" comment="grub2-powerpc-ieee1275 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628509" comment="grub2-snapper-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628510" comment="grub2-systemd-sleep-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628511" comment="grub2-x86_64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2778</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2778" ref_url="https://www.suse.com/security/cve/CVE-2020-2778" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006907.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2778/">CVE-2020-2778</cve>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27781</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27781" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27781" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27781" ref_url="https://www.suse.com/security/cve/CVE-2020-27781" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3895-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0023-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008148.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2327-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VIGY47XAX5FSNNMOBHOKUCFSJHIH4RII/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0079-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N6DKXUZUWGIN6CZATVDSZF3XYMJUH7LE/" source="SUSE-SU"/>
    <description>
    User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation. An Open Stack Manila user can request access to a share to an arbitrary cephx user, including existing users. The access key is retrieved via the interface drivers. Then, all users of the requesting OpenStack project can view the access key. This enables the attacker to target any resource that the user has access to. This can be done to even "admin" users, compromising the ceph administrator. This flaw affects Ceph versions prior to 14.2.16, 15.x prior to 15.2.8, and 16.x prior to 16.2.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-27781/">CVE-2020-27781</cve>
	<bugzilla href="https://bugzilla.suse.com/1179802">SUSE bug 1179802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180155">SUSE bug 1180155</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694875" comment="librados2-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694876" comment="librbd1-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27783</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27783" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27783" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27783" ref_url="https://www.suse.com/security/cve/CVE-2020-27783" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:504-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0895-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012452.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012792.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0803-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CXPBEANDVGCE6ASRYRQYWM4CLYAJ6TAE/" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-27783/">CVE-2020-27783</cve>
	<bugzilla href="https://bugzilla.suse.com/1179534">SUSE bug 1179534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667470" comment="python2-lxml-4.7.1-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673479" comment="python2-lxml is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667471" comment="python2-lxml-devel-4.7.1-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673480" comment="python2-lxml-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717314" comment="python2-lxml-doc-4.0.0-150000.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009722498" comment="python2-lxml-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667411" comment="python3-lxml-4.7.1-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673481" comment="python3-lxml is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667412" comment="python3-lxml-devel-4.7.1-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009673482" comment="python3-lxml-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717315" comment="python3-lxml-doc-4.0.0-150000.4.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009707950" comment="python3-lxml-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027784" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27784</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27784" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27784" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27784" ref_url="https://www.suse.com/security/cve/CVE-2020-27784" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:1081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012229.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3450-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012771.html" source="SUSE-SU"/>
    <description>
    A vulnerability was found in the Linux kernel, where accessing a deallocated instance in printer_ioctl() printer_ioctl() tries to access of a printer_dev instance. However, use-after-free arises because it had been freed by gprinter_free().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-15"/>
	<updated date="2022-11-01"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27784/">CVE-2020-27784</cve>
	<bugzilla href="https://bugzilla.suse.com/1202895">SUSE bug 1202895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711159" comment="cluster-md-kmp-64kb-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717663" comment="cluster-md-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710801" comment="cluster-md-kmp-default-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711160" comment="cluster-md-kmp-preempt-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711161" comment="dlm-kmp-64kb-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717664" comment="dlm-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710802" comment="dlm-kmp-default-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711162" comment="dlm-kmp-preempt-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711163" comment="dtb-al-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711164" comment="dtb-allwinner-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711165" comment="dtb-altera-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711166" comment="dtb-amd-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711167" comment="dtb-amlogic-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711168" comment="dtb-apm-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711169" comment="dtb-arm-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711170" comment="dtb-broadcom-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711171" comment="dtb-cavium-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711172" comment="dtb-exynos-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711173" comment="dtb-freescale-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711174" comment="dtb-hisilicon-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711175" comment="dtb-lg-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711176" comment="dtb-marvell-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711177" comment="dtb-mediatek-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711178" comment="dtb-nvidia-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711179" comment="dtb-qcom-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711180" comment="dtb-renesas-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711181" comment="dtb-rockchip-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711182" comment="dtb-socionext-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711183" comment="dtb-sprd-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711184" comment="dtb-xilinx-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711185" comment="dtb-zte-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711186" comment="gfs2-kmp-64kb-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717665" comment="gfs2-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710803" comment="gfs2-kmp-default-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711187" comment="gfs2-kmp-preempt-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710778" comment="kernel-64kb-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710779" comment="kernel-64kb-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711188" comment="kernel-64kb-extra-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711189" comment="kernel-64kb-livepatch-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711190" comment="kernel-64kb-optional-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717649" comment="kernel-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717650" comment="kernel-azure-devel-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717666" comment="kernel-azure-extra-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717667" comment="kernel-azure-livepatch-devel-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717668" comment="kernel-azure-optional-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711191" comment="kernel-debug-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711192" comment="kernel-debug-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711193" comment="kernel-debug-livepatch-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710780" comment="kernel-default-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710781" comment="kernel-default-base-5.3.18-150300.59.93.1.150300.18.54.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711194" comment="kernel-default-base-rebuild-5.3.18-150300.59.93.1.150300.18.54.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710782" comment="kernel-default-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711195" comment="kernel-default-extra-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711196" comment="kernel-default-livepatch-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711197" comment="kernel-default-livepatch-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711198" comment="kernel-default-optional-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710783" comment="kernel-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717651" comment="kernel-devel-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710791" comment="kernel-docs-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711199" comment="kernel-docs-html-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711200" comment="kernel-kvmsmall-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711201" comment="kernel-kvmsmall-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711202" comment="kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710784" comment="kernel-macros-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710792" comment="kernel-obs-build-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711203" comment="kernel-obs-qa-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710785" comment="kernel-preempt-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710793" comment="kernel-preempt-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711204" comment="kernel-preempt-extra-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711205" comment="kernel-preempt-livepatch-devel-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711206" comment="kernel-preempt-optional-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710794" comment="kernel-source-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717652" comment="kernel-source-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711207" comment="kernel-source-vanilla-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710795" comment="kernel-syms-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717653" comment="kernel-syms-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710786" comment="kernel-zfcpdump-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711208" comment="kselftests-kmp-64kb-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717669" comment="kselftests-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711209" comment="kselftests-kmp-default-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711210" comment="kselftests-kmp-preempt-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711211" comment="ocfs2-kmp-64kb-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717670" comment="ocfs2-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710804" comment="ocfs2-kmp-default-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711212" comment="ocfs2-kmp-preempt-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711213" comment="reiserfs-kmp-64kb-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717671" comment="reiserfs-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710796" comment="reiserfs-kmp-default-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711214" comment="reiserfs-kmp-preempt-5.3.18-150300.59.93.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027786" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27786</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27786" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27786" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007978.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008187.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008512.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0818-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-March/018289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008500.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008509.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008495.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008502.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008513.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0870-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7EJISS2OPKUSJFJ2BG5ZWHA2Z6H3VQB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue. A write to this specific memory while freed and before use causes the flow of execution to change and possibly allow for memory corruption or privilege escalation. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<bugzilla href="https://bugzilla.suse.com/1179601">SUSE bug 1179601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179616">SUSE bug 1179616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2781</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2781" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2781" ref_url="https://www.suse.com/security/cve/CVE-2020-2781" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006906.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2781/">CVE-2020-2781</cve>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172277">SUSE bug 1172277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27814</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27814" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27814" ref_url="https://www.suse.com/security/cve/CVE-2020-27814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012731.html" source="SUSE-SU"/>
    <description>
    A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-28"/>
	<updated date="2022-10-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27814/">CVE-2020-27814</cve>
	<bugzilla href="https://bugzilla.suse.com/1179594">SUSE bug 1179594</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721365" comment="libopenjp2-7-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721340" comment="libopenjp2-7-32bit-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721366" comment="openjpeg2-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721367" comment="openjpeg2-devel-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27815</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27815" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27815" ref_url="https://www.suse.com/security/cve/CVE-2020-27815" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1175-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008625.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008624.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1210-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1211-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0532-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZC652CKFCHQCNNU7MZKBTO27OZE22Q5U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0758-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BUQVIATUWQNZFSV6IFJENJSRWJSP2QHF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27815/">CVE-2020-27815</cve>
	<bugzilla href="https://bugzilla.suse.com/1179454">SUSE bug 1179454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179458">SUSE bug 1179458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27819</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27819" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27819" ref_url="https://www.suse.com/security/cve/CVE-2020-27819" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0812-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G6PICHOKDDWFUM2A34VZUNW6XR4NUUPC/" source="SUSE-SU"/>
    <description>
    An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files. A NULL pointer dereference vulnerability exists when parsing XLS cells in libxls/xls2csv.c:199. It could allow a remote attacker to cause a denial of service via crafted XLS file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27819/">CVE-2020-27819</cve>
	<bugzilla href="https://bugzilla.suse.com/1179532">SUSE bug 1179532</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624307" comment="libxls-devel-1.6.2-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009476345" comment="libxls-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624308" comment="libxls-tools-1.6.2-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009476346" comment="libxls-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624309" comment="libxlsreader8-1.6.2-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009476347" comment="libxlsreader8 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27820</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27820" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27820" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27820" ref_url="https://www.suse.com/security/cve/CVE-2020-27820" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:28-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:29-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:31-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:36-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009873.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0131-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010396.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0056-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6QFPACQDVZMSNEBMXPO5WA2LCCPKDKR2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0131-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JZDQSQYHYML6BZRVAEZ7TDW2LFGCJEZO/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0366-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CFUCZRWH2IP7FOHVYO3TO3G5PFWQXLP6/" source="SUSE-SU"/>
    <description>
    A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could happen if removing device (that is not common to remove video card physically without power-off, but same happens if "unbind" the driver).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-19"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-27820/">CVE-2020-27820</cve>
	<bugzilla href="https://bugzilla.suse.com/1179599">SUSE bug 1179599</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663141" comment="cluster-md-kmp-64kb-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663207" comment="cluster-md-kmp-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662956" comment="cluster-md-kmp-default-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663142" comment="cluster-md-kmp-preempt-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663143" comment="dlm-kmp-64kb-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663208" comment="dlm-kmp-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662957" comment="dlm-kmp-default-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663144" comment="dlm-kmp-preempt-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663145" comment="dtb-al-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663146" comment="dtb-allwinner-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663147" comment="dtb-altera-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663148" comment="dtb-amd-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663149" comment="dtb-amlogic-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663150" comment="dtb-apm-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663151" comment="dtb-arm-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663152" comment="dtb-broadcom-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663153" comment="dtb-cavium-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663154" comment="dtb-exynos-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663155" comment="dtb-freescale-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663156" comment="dtb-hisilicon-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663157" comment="dtb-lg-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663158" comment="dtb-marvell-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663159" comment="dtb-mediatek-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663160" comment="dtb-nvidia-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663161" comment="dtb-qcom-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663162" comment="dtb-renesas-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663163" comment="dtb-rockchip-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663164" comment="dtb-socionext-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663165" comment="dtb-sprd-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663166" comment="dtb-xilinx-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663167" comment="dtb-zte-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663168" comment="gfs2-kmp-64kb-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663209" comment="gfs2-kmp-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662958" comment="gfs2-kmp-default-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663169" comment="gfs2-kmp-preempt-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662903" comment="kernel-64kb-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662904" comment="kernel-64kb-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663170" comment="kernel-64kb-extra-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663171" comment="kernel-64kb-livepatch-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663172" comment="kernel-64kb-optional-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662938" comment="kernel-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662939" comment="kernel-azure-devel-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663210" comment="kernel-azure-extra-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663211" comment="kernel-azure-livepatch-devel-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663212" comment="kernel-azure-optional-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663173" comment="kernel-debug-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667096" comment="kernel-debug-base-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663174" comment="kernel-debug-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663175" comment="kernel-debug-livepatch-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662905" comment="kernel-default-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662906" comment="kernel-default-base-5.3.18-59.40.1.18.25.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663176" comment="kernel-default-base-rebuild-5.3.18-59.40.1.18.25.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662907" comment="kernel-default-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663177" comment="kernel-default-extra-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663178" comment="kernel-default-livepatch-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663179" comment="kernel-default-livepatch-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667070" comment="kernel-default-man-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663180" comment="kernel-default-optional-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662908" comment="kernel-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662940" comment="kernel-devel-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662928" comment="kernel-docs-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663181" comment="kernel-docs-html-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663182" comment="kernel-kvmsmall-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667097" comment="kernel-kvmsmall-base-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663183" comment="kernel-kvmsmall-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663184" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662909" comment="kernel-macros-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662929" comment="kernel-obs-build-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663185" comment="kernel-obs-qa-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662910" comment="kernel-preempt-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662930" comment="kernel-preempt-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663186" comment="kernel-preempt-extra-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663187" comment="kernel-preempt-livepatch-devel-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663188" comment="kernel-preempt-optional-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662931" comment="kernel-source-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662941" comment="kernel-source-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663189" comment="kernel-source-vanilla-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662932" comment="kernel-syms-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662942" comment="kernel-syms-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667098" comment="kernel-vanilla-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667099" comment="kernel-vanilla-base-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667100" comment="kernel-vanilla-devel-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667101" comment="kernel-vanilla-livepatch-devel-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662911" comment="kernel-zfcpdump-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667102" comment="kernel-zfcpdump-man-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663190" comment="kselftests-kmp-64kb-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663213" comment="kselftests-kmp-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663191" comment="kselftests-kmp-default-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663192" comment="kselftests-kmp-preempt-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663193" comment="ocfs2-kmp-64kb-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663214" comment="ocfs2-kmp-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662959" comment="ocfs2-kmp-default-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663194" comment="ocfs2-kmp-preempt-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663195" comment="reiserfs-kmp-64kb-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663215" comment="reiserfs-kmp-azure-5.3.18-38.34.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662933" comment="reiserfs-kmp-default-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663196" comment="reiserfs-kmp-preempt-5.3.18-59.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27821</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27821" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27821" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27821" ref_url="https://www.suse.com/security/cve/CVE-2020-27821" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008646.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1942-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008986.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0600-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ATYM36RK6JXDXZ33F2KFHZHDZ3F3YD24/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1942-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEKBDJBTGKO53MSKM3SRYVUQDWIJ2N5I/" source="SUSE-SU"/>
    <description>
    A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-27821/">CVE-2020-27821</cve>
	<bugzilla href="https://bugzilla.suse.com/1179686">SUSE bug 1179686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500101" comment="qemu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625287" comment="qemu-arm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625288" comment="qemu-audio-alsa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625289" comment="qemu-audio-pa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625290" comment="qemu-audio-spice-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500106" comment="qemu-block-curl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625291" comment="qemu-block-dmg-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625292" comment="qemu-block-gluster-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500107" comment="qemu-block-iscsi-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625293" comment="qemu-block-nfs-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500108" comment="qemu-block-rbd-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500109" comment="qemu-block-ssh-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500110" comment="qemu-chardev-baum-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625294" comment="qemu-chardev-spice-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625295" comment="qemu-extra-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500112" comment="qemu-guest-agent-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625296" comment="qemu-hw-display-qxl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625297" comment="qemu-hw-display-virtio-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625298" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625299" comment="qemu-hw-display-virtio-vga-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625300" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625301" comment="qemu-hw-usb-redirect-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625302" comment="qemu-hw-usb-smartcard-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500119" comment="qemu-ipxe-1.0.0+-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625303" comment="qemu-ivshmem-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500120" comment="qemu-ksm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500121" comment="qemu-kvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500122" comment="qemu-lang-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620964" comment="qemu-microvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625304" comment="qemu-ppc-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625305" comment="qemu-s390x-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500125" comment="qemu-seabios-1.14.0_0_g155821a-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500126" comment="qemu-sgabios-8-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500127" comment="qemu-skiboot-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494310" comment="qemu-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500128" comment="qemu-ui-curses-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625306" comment="qemu-ui-gtk-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625307" comment="qemu-ui-opengl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625308" comment="qemu-ui-spice-app-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625309" comment="qemu-ui-spice-core-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500133" comment="qemu-vgabios-1.14.0_0_g155821a-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625310" comment="qemu-vhost-user-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625311" comment="qemu-x86-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27823</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27823" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27823" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27823" ref_url="https://www.suse.com/security/cve/CVE-2020-27823" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010666.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010791.html" source="SUSE-SU"/>
    <description>
    A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27823/">CVE-2020-27823</cve>
	<bugzilla href="https://bugzilla.suse.com/1180457">SUSE bug 1180457</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677917" comment="libopenjp2-7-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678643" comment="libopenjp2-7-32bit-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679714" comment="libopenjpeg1-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679751" comment="libopenjpeg1-32bit-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153809" comment="libopenjpeg1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679752" comment="openjpeg-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153810" comment="openjpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679715" comment="openjpeg-devel-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153811" comment="openjpeg-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679753" comment="openjpeg-devel-32bit-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153812" comment="openjpeg-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677918" comment="openjpeg2-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677919" comment="openjpeg2-devel-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27824</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27824" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27824" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27824" ref_url="https://www.suse.com/security/cve/CVE-2020-27824" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012995.html" source="SUSE-SU"/>
    <description>
    A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-28"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27824/">CVE-2020-27824</cve>
	<bugzilla href="https://bugzilla.suse.com/1179821">SUSE bug 1179821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721365" comment="libopenjp2-7-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721340" comment="libopenjp2-7-32bit-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722397" comment="libopenjpeg1-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722398" comment="libopenjpeg1-32bit-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153809" comment="libopenjpeg1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722399" comment="openjpeg-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153810" comment="openjpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722400" comment="openjpeg-devel-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153811" comment="openjpeg-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722401" comment="openjpeg-devel-32bit-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153812" comment="openjpeg-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721366" comment="openjpeg2-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721367" comment="openjpeg2-devel-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27825</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27825" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27825" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27825" ref_url="https://www.suse.com/security/cve/CVE-2020-27825" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:28-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:29-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008187.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7EJISS2OPKUSJFJ2BG5ZWHA2Z6H3VQB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1). There was a race problem in trace_open and resize of cpu buffer running parallely on different cpus, may cause a denial of service problem (DOS). This flaw could even allow a local attacker with special user privilege to a kernel information leak threat.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27825/">CVE-2020-27825</cve>
	<bugzilla href="https://bugzilla.suse.com/1179960">SUSE bug 1179960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179961">SUSE bug 1179961</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27828</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27828" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27828" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27828" ref_url="https://www.suse.com/security/cve/CVE-2020-27828" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0488-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008334.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008333.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14627-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008332.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0303-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/I6ZF7VRY24X2GVC7MCP6MQKQBRKCSJ2A/" source="SUSE-SU"/>
    <description>
    There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27828/">CVE-2020-27828</cve>
	<bugzilla href="https://bugzilla.suse.com/1179748">SUSE bug 1179748</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628772" comment="libjasper4-2.0.14-3.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177124" comment="libjasper4 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27830</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27830" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27830" ref_url="https://www.suse.com/security/cve/CVE-2020-27830" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008187.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008196.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A vulnerability was found in Linux Kernel where in the spk_ttyio_receive_buf2() function, it would dereference spk_ttyio_synth without checking whether it is NULL or not, and may lead to a NULL-ptr deref crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27830/">CVE-2020-27830</cve>
	<bugzilla href="https://bugzilla.suse.com/1179656">SUSE bug 1179656</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27835</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27835" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27835" ref_url="https://www.suse.com/security/cve/CVE-2020-27835" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011343.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008288.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008292.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008305.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
    <description>
    A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27835/">CVE-2020-27835</cve>
	<bugzilla href="https://bugzilla.suse.com/1179878">SUSE bug 1179878</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683306" comment="cluster-md-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683297" comment="cluster-md-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683007" comment="cluster-md-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683307" comment="cluster-md-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683308" comment="dlm-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683298" comment="dlm-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683008" comment="dlm-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683309" comment="dlm-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683310" comment="dtb-al-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683311" comment="dtb-allwinner-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683312" comment="dtb-altera-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683313" comment="dtb-amd-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683314" comment="dtb-amlogic-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683315" comment="dtb-apm-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683316" comment="dtb-arm-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683317" comment="dtb-broadcom-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683318" comment="dtb-cavium-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683319" comment="dtb-exynos-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683320" comment="dtb-freescale-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683321" comment="dtb-hisilicon-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683322" comment="dtb-lg-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683323" comment="dtb-marvell-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683324" comment="dtb-mediatek-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683325" comment="dtb-nvidia-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683326" comment="dtb-qcom-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683327" comment="dtb-renesas-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683328" comment="dtb-rockchip-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683329" comment="dtb-socionext-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683330" comment="dtb-sprd-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683331" comment="dtb-xilinx-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683332" comment="dtb-zte-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683333" comment="gfs2-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683299" comment="gfs2-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683009" comment="gfs2-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683334" comment="gfs2-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695715" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682879" comment="kernel-64kb-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695716" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683336" comment="kernel-64kb-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695717" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682940" comment="kernel-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682941" comment="kernel-azure-devel-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683300" comment="kernel-azure-extra-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683301" comment="kernel-azure-livepatch-devel-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683302" comment="kernel-azure-optional-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683338" comment="kernel-debug-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683339" comment="kernel-debug-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683340" comment="kernel-debug-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695718" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682881" comment="kernel-default-base-5.3.18-150300.59.68.1.150300.18.41.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683341" comment="kernel-default-base-rebuild-5.3.18-150300.59.68.1.150300.18.41.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682882" comment="kernel-default-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695719" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683343" comment="kernel-default-livepatch-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683344" comment="kernel-default-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695720" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682883" comment="kernel-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682942" comment="kernel-devel-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682888" comment="kernel-docs-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683346" comment="kernel-docs-html-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695721" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683348" comment="kernel-kvmsmall-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683349" comment="kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682884" comment="kernel-macros-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682889" comment="kernel-obs-build-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683350" comment="kernel-obs-qa-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695722" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682890" comment="kernel-preempt-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695723" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683352" comment="kernel-preempt-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695724" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682891" comment="kernel-source-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682943" comment="kernel-source-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683354" comment="kernel-source-vanilla-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682892" comment="kernel-syms-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682944" comment="kernel-syms-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682886" comment="kernel-zfcpdump-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683355" comment="kselftests-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683303" comment="kselftests-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683356" comment="kselftests-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683357" comment="kselftests-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683358" comment="ocfs2-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683304" comment="ocfs2-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683010" comment="ocfs2-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683359" comment="ocfs2-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683360" comment="reiserfs-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683305" comment="reiserfs-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682914" comment="reiserfs-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683361" comment="reiserfs-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27839</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27839" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27839" ref_url="https://www.suse.com/security/cve/CVE-2020-27839" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008603.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:99-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008721.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0544-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SNSWJAZ3F5NDFCU63NISQ76JHRYOI25U/" source="SUSE-SU"/>
    <description>
    A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the browser’s localStorage which is potentially vulnerable to attackers via XSS attacks. The highest threat from this vulnerability is to data confidentiality and integrity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27839/">CVE-2020-27839</cve>
	<bugzilla href="https://bugzilla.suse.com/1179997">SUSE bug 1179997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694875" comment="librados2-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694876" comment="librbd1-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27840</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27840" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27840" ref_url="https://www.suse.com/security/cve/CVE-2020-27840" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:132-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010200.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:138-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010204.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:343-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010517.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010518.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010519.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010520.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:373-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:282-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0944-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008707.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009483.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0469-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QLNA72I7E6KKMIQOHXHYRPDYGMW5KH4K/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0636-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PJGQFNCBDL3CAZODHIFOKKWU3XGKLEKA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3187-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ANLZ3MSWRYNRTSO7FPC7CORZ4WAS3YKE/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0283-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/72ZRNFZ3DE3TJA7HFCVV476YJN6I4B5M/" source="SUSE-SU"/>
    <description>
    A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27840/">CVE-2020-27840</cve>
	<bugzilla href="https://bugzilla.suse.com/1183572">SUSE bug 1183572</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665442" comment="apache2-mod_apparmor-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154050" comment="apache2-mod_apparmor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665340" comment="apparmor-abstractions-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154052" comment="apparmor-abstractions is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665341" comment="apparmor-docs-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154053" comment="apparmor-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665342" comment="apparmor-parser-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154054" comment="apparmor-parser is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665343" comment="apparmor-parser-lang-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154055" comment="apparmor-parser-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665344" comment="apparmor-profiles-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154056" comment="apparmor-profiles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665345" comment="apparmor-utils-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154057" comment="apparmor-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665346" comment="apparmor-utils-lang-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154058" comment="apparmor-utils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665452" comment="ctdb-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666478" comment="ctdb-pcp-pmda-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233089" comment="ctdb-pcp-pmda is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633403" comment="ctdb-tests-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665347" comment="krb5-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665348" comment="krb5-32bit-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665349" comment="krb5-client-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665350" comment="krb5-devel-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666479" comment="krb5-devel-32bit-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152677" comment="krb5-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666480" comment="krb5-mini-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152679" comment="krb5-mini is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666481" comment="krb5-mini-devel-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152680" comment="krb5-mini-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665443" comment="krb5-plugin-kdb-ldap-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152681" comment="krb5-plugin-kdb-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665351" comment="krb5-plugin-preauth-otp-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152682" comment="krb5-plugin-preauth-otp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665352" comment="krb5-plugin-preauth-pkinit-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152683" comment="krb5-plugin-preauth-pkinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665353" comment="krb5-plugin-preauth-spake-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666842" comment="krb5-plugin-preauth-spake is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665444" comment="krb5-server-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152684" comment="krb5-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665354" comment="ldb-tools-2.4.1-150300.3.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152723" comment="ldb-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665355" comment="libapparmor-devel-2.13.6-150300.3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154059" comment="libapparmor-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665356" comment="libapparmor1-2.13.6-150300.3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154060" comment="libapparmor1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665357" comment="libapparmor1-32bit-2.13.6-150300.3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154061" comment="libapparmor1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633207" comment="libdcerpc-binding0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633208" comment="libdcerpc-binding0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633209" comment="libdcerpc-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633210" comment="libdcerpc-samr-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633211" comment="libdcerpc-samr0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633404" comment="libdcerpc-samr0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633212" comment="libdcerpc0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633213" comment="libdcerpc0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665358" comment="libipa_hbac-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152068" comment="libipa_hbac-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665359" comment="libipa_hbac0-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152069" comment="libipa_hbac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665360" comment="libldb-devel-2.4.1-150300.3.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152732" comment="libldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695725" comment="libldb2-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291435" comment="libldb2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695726" comment="libldb2-32bit-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291436" comment="libldb2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633214" comment="libndr-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633215" comment="libndr-krb5pac-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633216" comment="libndr-krb5pac0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633217" comment="libndr-krb5pac0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633218" comment="libndr-nbt-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633219" comment="libndr-nbt0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633220" comment="libndr-nbt0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633221" comment="libndr-standard-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633222" comment="libndr-standard0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633223" comment="libndr-standard0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633224" comment="libndr1-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633225" comment="libndr1-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633226" comment="libnetapi-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633405" comment="libnetapi-devel-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009287505" comment="libnetapi-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633227" comment="libnetapi0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633228" comment="libnetapi0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666482" comment="libnfsidmap-sss-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231788" comment="libnfsidmap-sss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633229" comment="libsamba-credentials-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633230" comment="libsamba-credentials0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633231" comment="libsamba-credentials0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633232" comment="libsamba-errors-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633233" comment="libsamba-errors0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633234" comment="libsamba-errors0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633235" comment="libsamba-hostconfig-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633236" comment="libsamba-hostconfig0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633237" comment="libsamba-hostconfig0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633238" comment="libsamba-passdb-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633239" comment="libsamba-passdb0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633240" comment="libsamba-passdb0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665363" comment="libsamba-policy-devel-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665364" comment="libsamba-policy-python3-devel-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266818" comment="libsamba-policy-python3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665365" comment="libsamba-policy0-python3-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666483" comment="libsamba-policy0-python3-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266820" comment="libsamba-policy0-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666484" comment="libsamba-policy0-python3-64bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623639" comment="libsamba-policy0-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633244" comment="libsamba-util-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633245" comment="libsamba-util0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633246" comment="libsamba-util0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633247" comment="libsamdb-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633248" comment="libsamdb0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633249" comment="libsamdb0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633250" comment="libsmbclient-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633251" comment="libsmbclient0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633407" comment="libsmbclient0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633252" comment="libsmbconf-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633253" comment="libsmbconf0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633254" comment="libsmbconf0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633255" comment="libsmbldap-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633256" comment="libsmbldap2-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633257" comment="libsmbldap2-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665366" comment="libsss_certmap-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231789" comment="libsss_certmap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665367" comment="libsss_certmap0-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231790" comment="libsss_certmap0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665368" comment="libsss_idmap-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152070" comment="libsss_idmap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665369" comment="libsss_idmap0-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151530" comment="libsss_idmap0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665370" comment="libsss_nss_idmap-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152071" comment="libsss_nss_idmap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665371" comment="libsss_nss_idmap0-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152072" comment="libsss_nss_idmap0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665372" comment="libsss_simpleifp-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231791" comment="libsss_simpleifp-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665373" comment="libsss_simpleifp0-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231792" comment="libsss_simpleifp0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665374" comment="libtalloc-devel-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152754" comment="libtalloc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665375" comment="libtalloc2-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152755" comment="libtalloc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665376" comment="libtalloc2-32bit-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152756" comment="libtalloc2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665377" comment="libtdb-devel-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152757" comment="libtdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665378" comment="libtdb1-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152758" comment="libtdb1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665379" comment="libtdb1-32bit-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152759" comment="libtdb1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665380" comment="libtevent-devel-0.11.0-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152760" comment="libtevent-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633258" comment="libtevent-util-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633259" comment="libtevent-util0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633260" comment="libtevent-util0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665381" comment="libtevent0-0.11.0-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152762" comment="libtevent0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665382" comment="libtevent0-32bit-0.11.0-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152763" comment="libtevent0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633261" comment="libwbclient-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633262" comment="libwbclient0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633263" comment="libwbclient0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665383" comment="pam_apparmor-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154062" comment="pam_apparmor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665384" comment="pam_apparmor-32bit-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154063" comment="pam_apparmor-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665385" comment="perl-apparmor-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154064" comment="perl-apparmor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665386" comment="python3-apparmor-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154065" comment="python3-apparmor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666485" comment="python3-ipa_hbac-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231793" comment="python3-ipa_hbac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695727" comment="python3-ldb-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247520" comment="python3-ldb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666486" comment="python3-ldb-32bit-2.4.1-150300.3.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247521" comment="python3-ldb-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665388" comment="python3-ldb-devel-2.4.1-150300.3.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247522" comment="python3-ldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666487" comment="python3-sss-murmur-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231794" comment="python3-sss-murmur is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666488" comment="python3-sss_nss_idmap-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231795" comment="python3-sss_nss_idmap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665389" comment="python3-sssd-config-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231796" comment="python3-sssd-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665390" comment="python3-talloc-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173765" comment="python3-talloc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666489" comment="python3-talloc-32bit-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173766" comment="python3-talloc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665391" comment="python3-talloc-devel-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173767" comment="python3-talloc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665392" comment="python3-tdb-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666843" comment="python3-tdb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666490" comment="python3-tdb-32bit-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666844" comment="python3-tdb-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665393" comment="python3-tevent-0.11.0-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173768" comment="python3-tevent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666491" comment="python3-tevent-32bit-0.11.0-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173769" comment="python3-tevent-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666492" comment="ruby-apparmor-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154066" comment="ruby-apparmor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665394" comment="samba-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665441" comment="samba-ad-dc-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266821" comment="samba-ad-dc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633408" comment="samba-ad-dc-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266822" comment="samba-ad-dc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665395" comment="samba-ad-dc-libs-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666845" comment="samba-ad-dc-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665396" comment="samba-ad-dc-libs-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666846" comment="samba-ad-dc-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665397" comment="samba-ceph-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009162650" comment="samba-ceph is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665398" comment="samba-client-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665399" comment="samba-client-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666493" comment="samba-client-64bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623648" comment="samba-client-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665400" comment="samba-client-libs-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666847" comment="samba-client-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665401" comment="samba-client-libs-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666848" comment="samba-client-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633267" comment="samba-core-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665402" comment="samba-devel-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666849" comment="samba-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665403" comment="samba-devel-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666850" comment="samba-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666494" comment="samba-doc-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665404" comment="samba-dsdb-modules-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177163" comment="samba-dsdb-modules is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665405" comment="samba-gpupdate-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655385" comment="samba-gpupdate is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665406" comment="samba-ldb-ldap-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655386" comment="samba-ldb-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665407" comment="samba-libs-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665408" comment="samba-libs-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666495" comment="samba-libs-64bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623649" comment="samba-libs-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665409" comment="samba-libs-python3-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666496" comment="samba-libs-python3-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266826" comment="samba-libs-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666497" comment="samba-libs-python3-64bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623651" comment="samba-libs-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665410" comment="samba-python3-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666498" comment="samba-test-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665411" comment="samba-tool-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666851" comment="samba-tool is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665412" comment="samba-winbind-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633274" comment="samba-winbind-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665413" comment="samba-winbind-libs-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666852" comment="samba-winbind-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665414" comment="samba-winbind-libs-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666853" comment="samba-winbind-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665415" comment="sssd-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151531" comment="sssd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665416" comment="sssd-ad-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152077" comment="sssd-ad is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665417" comment="sssd-common-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632505" comment="sssd-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665418" comment="sssd-dbus-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231797" comment="sssd-dbus is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665419" comment="sssd-ipa-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152078" comment="sssd-ipa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665420" comment="sssd-krb5-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152079" comment="sssd-krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665421" comment="sssd-krb5-common-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151533" comment="sssd-krb5-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665422" comment="sssd-ldap-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151534" comment="sssd-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665423" comment="sssd-proxy-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152080" comment="sssd-proxy is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665424" comment="sssd-tools-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152081" comment="sssd-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666499" comment="sssd-wbclient-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231798" comment="sssd-wbclient is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666500" comment="sssd-wbclient-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231799" comment="sssd-wbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665425" comment="sssd-winbind-idmap-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231800" comment="sssd-winbind-idmap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665426" comment="talloc-man-2.3.3-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173770" comment="talloc-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665427" comment="tdb-tools-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152782" comment="tdb-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665428" comment="tevent-man-0.11.0-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173771" comment="tevent-man is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27841</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27841" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27841" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27841" ref_url="https://www.suse.com/security/cve/CVE-2020-27841" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012731.html" source="SUSE-SU"/>
    <description>
    There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-28"/>
	<updated date="2022-10-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27841/">CVE-2020-27841</cve>
	<bugzilla href="https://bugzilla.suse.com/1180042">SUSE bug 1180042</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721365" comment="libopenjp2-7-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721340" comment="libopenjp2-7-32bit-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721366" comment="openjpeg2-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721367" comment="openjpeg2-devel-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27842</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27842" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27842" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27842" ref_url="https://www.suse.com/security/cve/CVE-2020-27842" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012995.html" source="SUSE-SU"/>
    <description>
    There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-28"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27842/">CVE-2020-27842</cve>
	<bugzilla href="https://bugzilla.suse.com/1180043">SUSE bug 1180043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721365" comment="libopenjp2-7-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721340" comment="libopenjp2-7-32bit-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722397" comment="libopenjpeg1-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722398" comment="libopenjpeg1-32bit-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153809" comment="libopenjpeg1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722399" comment="openjpeg-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153810" comment="openjpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722400" comment="openjpeg-devel-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153811" comment="openjpeg-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722401" comment="openjpeg-devel-32bit-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153812" comment="openjpeg-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721366" comment="openjpeg2-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721367" comment="openjpeg2-devel-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27843</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27843" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27843" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27843" ref_url="https://www.suse.com/security/cve/CVE-2020-27843" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012995.html" source="SUSE-SU"/>
    <description>
    A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-28"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27843/">CVE-2020-27843</cve>
	<bugzilla href="https://bugzilla.suse.com/1180044">SUSE bug 1180044</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721365" comment="libopenjp2-7-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721340" comment="libopenjp2-7-32bit-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722397" comment="libopenjpeg1-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722398" comment="libopenjpeg1-32bit-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153809" comment="libopenjpeg1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722399" comment="openjpeg-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153810" comment="openjpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722400" comment="openjpeg-devel-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153811" comment="openjpeg-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722401" comment="openjpeg-devel-32bit-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153812" comment="openjpeg-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721366" comment="openjpeg2-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721367" comment="openjpeg2-devel-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27844</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27844" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27844" ref_url="https://www.suse.com/security/cve/CVE-2020-27844" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27844/">CVE-2020-27844</cve>
	<bugzilla href="https://bugzilla.suse.com/1180045">SUSE bug 1180045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27845</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27845" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27845" ref_url="https://www.suse.com/security/cve/CVE-2020-27845" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012995.html" source="SUSE-SU"/>
    <description>
    There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-28"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27845/">CVE-2020-27845</cve>
	<bugzilla href="https://bugzilla.suse.com/1180046">SUSE bug 1180046</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721365" comment="libopenjp2-7-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721340" comment="libopenjp2-7-32bit-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722397" comment="libopenjpeg1-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722398" comment="libopenjpeg1-32bit-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153809" comment="libopenjpeg1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722399" comment="openjpeg-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153810" comment="openjpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722400" comment="openjpeg-devel-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153811" comment="openjpeg-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009722401" comment="openjpeg-devel-32bit-1.5.2-150000.4.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153812" comment="openjpeg-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721366" comment="openjpeg2-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009721367" comment="openjpeg2-devel-2.3.0-150000.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202027918" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-27918</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-27918" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27918" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-27918" ref_url="https://www.suse.com/security/cve/CVE-2020-27918" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008699.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0637-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PLZ5MXMQE5PW2OZS4ZK2IAEG3Y3AFJVD/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27918/">CVE-2020-27918</cve>
	<bugzilla href="https://bugzilla.suse.com/1184262">SUSE bug 1184262</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2800</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2800" ref_url="https://www.suse.com/security/cve/CVE-2020-2800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006906.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2800/">CVE-2020-2800</cve>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172277">SUSE bug 1172277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2803</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2803" ref_url="https://www.suse.com/security/cve/CVE-2020-2803" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006906.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2803/">CVE-2020-2803</cve>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172277">SUSE bug 1172277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202028049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-28049</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-28049" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28049" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-28049" ref_url="https://www.suse.com/security/cve/CVE-2020-28049" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1870-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1899-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TO7JRTPGBU4JZ3MOLPKGZUUXQGICWL4Z/" source="SUSE-SU"/>
    <description>
    An issue was discovered in SDDM before 0.19.0. It incorrectly starts the X server in a way that - for a short time period - allows local unprivileged users to create a connection to the X server without providing proper authentication. A local attacker can thus access X server display contents and, for example, intercept keystrokes or access the clipboard. This is caused by a race condition during Xauthority file creation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28049/">CVE-2020-28049</cve>
	<bugzilla href="https://bugzilla.suse.com/1177201">SUSE bug 1177201</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694917" comment="sddm-0.18.0-lp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152215" comment="sddm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694918" comment="sddm-branding-openSUSE-0.18.0-lp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152216" comment="sddm-branding-openSUSE is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2805</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2805" ref_url="https://www.suse.com/security/cve/CVE-2020-2805" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006906.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2805/">CVE-2020-2805</cve>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172277">SUSE bug 1172277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202028097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-28097</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-28097" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28097" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-28097" ref_url="https://www.suse.com/security/cve/CVE-2020-28097" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:282-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0363-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0364-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010215.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0370-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010216.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0372-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0543-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010282.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010290.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0363-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/K4ZJSATCJ2GMGCX6RSG2TU2YU4DDOMVQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0370-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ASMTCFCDULHGAOBQUFJH4PHVCQSTF7S6/" source="SUSE-SU"/>
    <description>
    The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-28097/">CVE-2020-28097</cve>
	<bugzilla href="https://bugzilla.suse.com/1187723">SUSE bug 1187723</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667685" comment="cluster-md-kmp-64kb-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667757" comment="cluster-md-kmp-azure-5.3.18-150300.38.40.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667480" comment="cluster-md-kmp-default-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667686" comment="cluster-md-kmp-preempt-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667687" comment="dlm-kmp-64kb-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667758" comment="dlm-kmp-azure-5.3.18-150300.38.40.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667481" comment="dlm-kmp-default-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667688" comment="dlm-kmp-preempt-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667689" comment="dtb-al-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667690" comment="dtb-allwinner-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667691" comment="dtb-altera-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667692" comment="dtb-amd-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667693" comment="dtb-amlogic-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667694" comment="dtb-apm-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667695" comment="dtb-arm-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667696" comment="dtb-broadcom-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667697" comment="dtb-cavium-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667698" comment="dtb-exynos-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667699" comment="dtb-freescale-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667700" comment="dtb-hisilicon-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667701" comment="dtb-lg-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667702" comment="dtb-marvell-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667703" comment="dtb-mediatek-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667704" comment="dtb-nvidia-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667705" comment="dtb-qcom-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667706" comment="dtb-renesas-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667707" comment="dtb-rockchip-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667708" comment="dtb-socionext-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667709" comment="dtb-sprd-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667710" comment="dtb-xilinx-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667711" comment="dtb-zte-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667712" comment="gfs2-kmp-64kb-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667759" comment="gfs2-kmp-azure-5.3.18-150300.38.40.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667482" comment="gfs2-kmp-default-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667713" comment="gfs2-kmp-preempt-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667415" comment="kernel-64kb-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667416" comment="kernel-64kb-devel-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667714" comment="kernel-64kb-extra-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667715" comment="kernel-64kb-livepatch-devel-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667716" comment="kernel-64kb-optional-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667465" comment="kernel-azure-5.3.18-150300.38.40.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667466" comment="kernel-azure-devel-5.3.18-150300.38.40.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667760" comment="kernel-azure-extra-5.3.18-150300.38.40.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667761" comment="kernel-azure-livepatch-devel-5.3.18-150300.38.40.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667762" comment="kernel-azure-optional-5.3.18-150300.38.40.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667717" comment="kernel-debug-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667718" comment="kernel-debug-devel-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667719" comment="kernel-debug-livepatch-devel-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667417" comment="kernel-default-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667418" comment="kernel-default-base-5.3.18-150300.59.49.1.150300.18.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667720" comment="kernel-default-base-rebuild-5.3.18-150300.59.49.1.150300.18.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667419" comment="kernel-default-devel-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667721" comment="kernel-default-extra-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667722" comment="kernel-default-livepatch-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667723" comment="kernel-default-livepatch-devel-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667724" comment="kernel-default-optional-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667420" comment="kernel-devel-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667467" comment="kernel-devel-azure-5.3.18-150300.38.40.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667448" comment="kernel-docs-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667725" comment="kernel-docs-html-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667726" comment="kernel-kvmsmall-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667727" comment="kernel-kvmsmall-devel-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667728" comment="kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667421" comment="kernel-macros-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667449" comment="kernel-obs-build-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667729" comment="kernel-obs-qa-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667422" comment="kernel-preempt-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667450" comment="kernel-preempt-devel-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667730" comment="kernel-preempt-extra-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667731" comment="kernel-preempt-livepatch-devel-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667732" comment="kernel-preempt-optional-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667451" comment="kernel-source-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667468" comment="kernel-source-azure-5.3.18-150300.38.40.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667733" comment="kernel-source-vanilla-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667452" comment="kernel-syms-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667469" comment="kernel-syms-azure-5.3.18-150300.38.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667423" comment="kernel-zfcpdump-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667734" comment="kselftests-kmp-64kb-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667763" comment="kselftests-kmp-azure-5.3.18-150300.38.40.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667735" comment="kselftests-kmp-default-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667736" comment="kselftests-kmp-preempt-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667737" comment="ocfs2-kmp-64kb-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667764" comment="ocfs2-kmp-azure-5.3.18-150300.38.40.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667483" comment="ocfs2-kmp-default-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667738" comment="ocfs2-kmp-preempt-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667739" comment="reiserfs-kmp-64kb-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667765" comment="reiserfs-kmp-azure-5.3.18-150300.38.40.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667454" comment="reiserfs-kmp-default-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667740" comment="reiserfs-kmp-preempt-5.3.18-150300.59.49.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2812</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2812" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2812" ref_url="https://www.suse.com/security/cve/CVE-2020-2812" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1711-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007915.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0870-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00054.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-2812/">CVE-2020-2812</cve>
	<bugzilla href="https://bugzilla.suse.com/1171550">SUSE bug 1171550</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2814</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2814" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2814" ref_url="https://www.suse.com/security/cve/CVE-2020-2814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1711-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007915.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0870-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00054.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.6.47 and prior, 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-2814/">CVE-2020-2814</cve>
	<bugzilla href="https://bugzilla.suse.com/1171550">SUSE bug 1171550</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694860" comment="libmysqld19-10.2.37-3.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2816</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2816" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2816" ref_url="https://www.suse.com/security/cve/CVE-2020-2816" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006907.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-2816/">CVE-2020-2816</cve>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202028196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-28196</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-28196" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28196" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-28196" ref_url="https://www.suse.com/security/cve/CVE-2020-28196" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:688-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:698-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:705-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:707-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007868.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:709-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007869.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:8-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:9-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3375-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-November/016941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3377-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007792.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2037-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2CMUQ7G43OCIKDTP2ILYUJLUD37RPPA3/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2062-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/O6PZTATZYCUQYKCJ6QBS7JJHNWPXIDNL/" source="SUSE-SU"/>
    <description>
    MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-28196/">CVE-2020-28196</cve>
	<bugzilla href="https://bugzilla.suse.com/1178512">SUSE bug 1178512</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694820" comment="krb5-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694821" comment="krb5-32bit-1.16.3-3.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202028200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-28200</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-28200" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28200" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-28200" ref_url="https://www.suse.com/security/cve/CVE-2020-28200" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009375.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2892-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009374.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1225-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IOZSH4SD3B27NBLCL3T2IO4EVB6AMFYQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2892-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YLFYZS4WAYE6TU4PO3V2JUI7DPQEK73I/" source="SUSE-SU"/>
    <description>
    The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28200/">CVE-2020-28200</cve>
	<bugzilla href="https://bugzilla.suse.com/1187420">SUSE bug 1187420</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632141" comment="dovecot23-2.3.15-58.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245304" comment="dovecot23 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632142" comment="dovecot23-backend-mysql-2.3.15-58.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245305" comment="dovecot23-backend-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632143" comment="dovecot23-backend-pgsql-2.3.15-58.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245306" comment="dovecot23-backend-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632144" comment="dovecot23-backend-sqlite-2.3.15-58.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245307" comment="dovecot23-backend-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632145" comment="dovecot23-devel-2.3.15-58.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245308" comment="dovecot23-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632146" comment="dovecot23-fts-2.3.15-58.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245309" comment="dovecot23-fts is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632147" comment="dovecot23-fts-lucene-2.3.15-58.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245310" comment="dovecot23-fts-lucene is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632148" comment="dovecot23-fts-solr-2.3.15-58.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245311" comment="dovecot23-fts-solr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632149" comment="dovecot23-fts-squat-2.3.15-58.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009245312" comment="dovecot23-fts-squat is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2830</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2830" ref_url="https://www.suse.com/security/cve/CVE-2020-2830" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1511-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1569-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006906.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2830/">CVE-2020-2830</cve>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172277">SUSE bug 1172277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202028368" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-28368</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-28368" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28368" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-28368" ref_url="https://www.suse.com/security/cve/CVE-2020-28368" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007814.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007815.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3414-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007813.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007811.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3612-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007910.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3627-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007918.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007922.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007937.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1023-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008718.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2017-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NHV4EWRFFS4A6PZIGBZQ2KTQFUWF52LY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2030-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CK4ZVHN5CZEV5SEFNJFHEB2GTN3V6YCK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2162-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4FGJHRZRKWQ2TYU34S47P4GNDICF6RCY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2192-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5GBNU2YMLJN6R7ACNKZML4MG7X35FZTY/" source="SUSE-SU"/>
    <description>
    Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a "Platypus" attack. NOTE: there is only one logically independent fix: to change the access control for each such interface in Xen.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-28368/">CVE-2020-28368</cve>
	<bugzilla href="https://bugzilla.suse.com/1178591">SUSE bug 1178591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202028374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-28374</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-28374" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28374" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0093-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-January/017662.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008288.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008305.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0818-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-March/018289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008500.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008509.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008495.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008510.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008502.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008513.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0870-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008497.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7EJISS2OPKUSJFJ2BG5ZWHA2Z6H3VQB/" source="SUSE-SU"/>
    <description>
    In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack can occur over a network if the attacker has access to one iSCSI LUN. The attacker gains control over file access because I/O operations are proxied via an attacker-selected backstore.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<bugzilla href="https://bugzilla.suse.com/1178372">SUSE bug 1178372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178684">SUSE bug 1178684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180676">SUSE bug 1180676</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202028407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-28407</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-28407" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28407" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-28407" ref_url="https://www.suse.com/security/cve/CVE-2020-28407" source="SUSE CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-28407/">CVE-2020-28407</cve>
	<bugzilla href="https://bugzilla.suse.com/1198395">SUSE bug 1198395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629991" comment="swtpm-0.5.2-1.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009680731" comment="swtpm is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202028463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-28463</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-28463" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28463" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-28463" ref_url="https://www.suse.com/security/cve/CVE-2020-28463" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009500.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1147-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKQHRG3VVE7T4B4XL3YGBVUD72DQRRHC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2641-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/E52AKOBLZLRVRGNROGFREOUCWFZYLKPT/" source="SUSE-SU"/>
    <description>
    All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) via img tags. In order to reduce risk, use trustedSchemes &amp; trustedHosts (see in Reportlab's documentation) Steps to reproduce by Karan Bamal: 1. Download and install the latest package of reportlab 2. Go to demos -&gt; odyssey -&gt; dodyssey 3. In the text file odyssey.txt that needs to be converted to pdf inject &lt;img src="http://127.0.0.1:5000" valign="top"/&gt; 4. Create a nc listener nc -lp 5000 5. Run python3 dodyssey.py 6. You will get a hit on your nc showing we have successfully proceded to send a server side request 7. dodyssey.py will show error since there is no img file on the url, but we are able to do SSRF
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-28463/">CVE-2020-28463</cve>
	<bugzilla href="https://bugzilla.suse.com/1182503">SUSE bug 1182503</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628197" comment="python2-reportlab-3.4.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009277408" comment="python2-reportlab is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628198" comment="python3-reportlab-3.4.0-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009277409" comment="python3-reportlab is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202028491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-28491</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-28491" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28491" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-28491" ref_url="https://www.suse.com/security/cve/CVE-2020-28491" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011022.html" source="SUSE-SU"/>
    <description>
    This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-28491/">CVE-2020-28491</cve>
	<bugzilla href="https://bugzilla.suse.com/1182481">SUSE bug 1182481</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679451" comment="jackson-annotations-2.13.0-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683869" comment="jackson-annotations is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679452" comment="jackson-annotations-javadoc-2.13.0-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683870" comment="jackson-annotations-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679580" comment="jackson-bom-2.13.0-150200.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683871" comment="jackson-bom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679453" comment="jackson-core-2.13.0-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683872" comment="jackson-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679454" comment="jackson-core-javadoc-2.13.0-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683873" comment="jackson-core-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679455" comment="jackson-databind-2.13.0-150200.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342652" comment="jackson-databind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679456" comment="jackson-databind-javadoc-2.13.0-150200.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342653" comment="jackson-databind-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680193" comment="jackson-dataformat-cbor-2.13.0-150200.3.3.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683874" comment="jackson-dataformat-cbor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680705" comment="jackson-dataformat-smile-2.13.0-150200.3.3.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683875" comment="jackson-dataformat-smile is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680706" comment="jackson-dataformats-binary-2.13.0-150200.3.3.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683876" comment="jackson-dataformats-binary is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680707" comment="jackson-dataformats-binary-javadoc-2.13.0-150200.3.3.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683877" comment="jackson-dataformats-binary-javadoc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202875" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2875</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2875" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2875" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2875" ref_url="https://www.suse.com/security/cve/CVE-2020-2875" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2877-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009371.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1126-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WS25DT4QDBVK3PBC74G4JTBWADK62LTQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2622-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KHHGZ3MEHVZT3NYQIEG5WTISHLXRLW3D/" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.14 and prior and 5.1.48 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Connectors, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data as well as unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2875/">CVE-2020-2875</cve>
	<bugzilla href="https://bugzilla.suse.com/1173599">SUSE bug 1173599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173600">SUSE bug 1173600</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627141" comment="mysql-connector-java-5.1.47-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152673" comment="mysql-connector-java is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202028915" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-28915</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-28915" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28915" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-28915" ref_url="https://www.suse.com/security/cve/CVE-2020-28915" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007937.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3714-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-December/017242.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007938.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007978.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2034-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7GIP2AYRG3VCHD6CCU4URBF5KVBKIT63/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2161-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ICEKZTGIQ6MSKDFOTIOJ2RLWAWJFPSYA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2260-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZYES3O2NEKKQXQ3R5CZOH5YCWJ3TJSKH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28915/">CVE-2020-28915</cve>
	<bugzilla href="https://bugzilla.suse.com/1178886">SUSE bug 1178886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202028935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-28935</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-28935" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28935" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-28935" ref_url="https://www.suse.com/security/cve/CVE-2020-28935" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0176-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010225.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0301-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021588.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2222-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5FIDKYB6WSN55OA36HXF3BL4UYWBXAEV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0176-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTS3PI42CZC7TVKVUTBOIMO2PDFTABYC/" source="SUSE-SU"/>
    <description>
    NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow for a local symlink attack. When writing the PID file, Unbound and NSD create the file if it is not there, or open an existing file for writing. In case the file was already present, they would follow symlinks if the file happened to be a symlink instead of a regular file. An additional chown of the file would then take place after it was written, making the user Unbound/NSD is supposed to run as the new owner of the file. If an attacker has local access to the user Unbound/NSD runs as, she could create a symlink in place of the PID file pointing to a file that she would like to erase. If then Unbound/NSD is killed and the PID file is not cleared, upon restarting with root privileges, Unbound/NSD will rewrite any file pointed at by the symlink. This is a local vulnerability that could create a Denial of Service of the system Unbound/NSD is running on. It requires an attacker having access to the limited permission user Unbound/NSD runs as and point through the symlink to a critical file on the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28935/">CVE-2020-28935</cve>
	<bugzilla href="https://bugzilla.suse.com/1173619">SUSE bug 1173619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179191">SUSE bug 1179191</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664287" comment="libunbound2-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177204" comment="libunbound2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664373" comment="unbound-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286673" comment="unbound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664288" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177205" comment="unbound-anchor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664289" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286674" comment="unbound-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664374" comment="unbound-munin-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286675" comment="unbound-munin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664375" comment="unbound-python-1.6.8-10.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286676" comment="unbound-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202028941" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-28941</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-28941" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28941" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-28941" ref_url="https://www.suse.com/security/cve/CVE-2020-28941" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007937.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007977.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2161-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ICEKZTGIQ6MSKDFOTIOJ2RLWAWJFPSYA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2260-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZYES3O2NEKKQXQ3R5CZOH5YCWJ3TJSKH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    An issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the speakup driver could cause a local denial of service attack, aka CID-d41227544427. This occurs because of an invalid free when the line discipline is used more than once.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-28941/">CVE-2020-28941</cve>
	<bugzilla href="https://bugzilla.suse.com/1178740">SUSE bug 1178740</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202028974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-28974</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-28974" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28974" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-28974" ref_url="https://www.suse.com/security/cve/CVE-2020-28974" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007937.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3714-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-December/017242.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007938.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007978.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2161-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ICEKZTGIQ6MSKDFOTIOJ2RLWAWJFPSYA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2193-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4YRSQJNKLIOJJTD3P2UKMHRFMCIG3JDN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2260-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZYES3O2NEKKQXQ3R5CZOH5YCWJ3TJSKH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28974/">CVE-2020-28974</cve>
	<bugzilla href="https://bugzilla.suse.com/1178589">SUSE bug 1178589</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29040</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29040" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29040" ref_url="https://www.suse.com/security/cve/CVE-2020-29040" source="SUSE CVE"/>
    <description>
    An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service (stack corruption), cause a data leak, or possibly gain privileges because of an off-by-one error. NOTE: this issue is caused by an incorrect fix for CVE-2020-27671.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.9/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-29040/">CVE-2020-29040</cve>
	<bugzilla href="https://bugzilla.suse.com/1178963">SUSE bug 1178963</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29050</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29050" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29050" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29050" ref_url="https://www.suse.com/security/cve/CVE-2020-29050" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:0046-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BGIIYJ6U7AIFKGIYHMGJHVDPJF5AWYOA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0054-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H2Z7YY7HZ2IKSH75SHSRUFT5AJHJJOLN/" source="SUSE-SU"/>
    <description>
    SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full pathname (e.g., a file in the /etc directory). NOTE: this is unrelated to CMUSphinx.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29050/">CVE-2020-29050</cve>
	<bugzilla href="https://bugzilla.suse.com/1195227">SUSE bug 1195227</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670269" comment="libsphinxclient-0_0_1-2.2.11-lp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009670311" comment="libsphinxclient-0_0_1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670270" comment="libsphinxclient-devel-2.2.11-lp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009670312" comment="libsphinxclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670271" comment="sphinx-2.2.11-lp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009670313" comment="sphinx is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29129</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29129" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29129" ref_url="https://www.suse.com/security/cve/CVE-2020-29129" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008646.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008916.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1895-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1942-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008990.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0600-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ATYM36RK6JXDXZ33F2KFHZHDZ3F3YD24/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1043-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1942-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEKBDJBTGKO53MSKM3SRYVUQDWIJ2N5I/" source="SUSE-SU"/>
    <description>
    ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-06"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29129/">CVE-2020-29129</cve>
	<bugzilla href="https://bugzilla.suse.com/1179466">SUSE bug 1179466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179467">SUSE bug 1179467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179477">SUSE bug 1179477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179484">SUSE bug 1179484</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500101" comment="qemu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625287" comment="qemu-arm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625288" comment="qemu-audio-alsa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625289" comment="qemu-audio-pa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625290" comment="qemu-audio-spice-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500106" comment="qemu-block-curl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625291" comment="qemu-block-dmg-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625292" comment="qemu-block-gluster-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500107" comment="qemu-block-iscsi-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625293" comment="qemu-block-nfs-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500108" comment="qemu-block-rbd-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500109" comment="qemu-block-ssh-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500110" comment="qemu-chardev-baum-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625294" comment="qemu-chardev-spice-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625295" comment="qemu-extra-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500112" comment="qemu-guest-agent-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625296" comment="qemu-hw-display-qxl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625297" comment="qemu-hw-display-virtio-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625298" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625299" comment="qemu-hw-display-virtio-vga-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625300" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625301" comment="qemu-hw-usb-redirect-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625302" comment="qemu-hw-usb-smartcard-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500119" comment="qemu-ipxe-1.0.0+-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625303" comment="qemu-ivshmem-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500120" comment="qemu-ksm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500121" comment="qemu-kvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500122" comment="qemu-lang-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620964" comment="qemu-microvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625304" comment="qemu-ppc-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625305" comment="qemu-s390x-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500125" comment="qemu-seabios-1.14.0_0_g155821a-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500126" comment="qemu-sgabios-8-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500127" comment="qemu-skiboot-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494310" comment="qemu-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500128" comment="qemu-ui-curses-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625306" comment="qemu-ui-gtk-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625307" comment="qemu-ui-opengl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625308" comment="qemu-ui-spice-app-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625309" comment="qemu-ui-spice-core-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500133" comment="qemu-vgabios-1.14.0_0_g155821a-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625310" comment="qemu-vhost-user-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625311" comment="qemu-x86-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29130</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29130" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29130" ref_url="https://www.suse.com/security/cve/CVE-2020-29130" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14578-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008646.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008671.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008673.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008910.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008916.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1894-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1895-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1942-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0943-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010508.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0943-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0600-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ATYM36RK6JXDXZ33F2KFHZHDZ3F3YD24/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1043-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1942-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEKBDJBTGKO53MSKM3SRYVUQDWIJ2N5I/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0943-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JBLIOF4HVH74MTJYI7P5QNH2RNAYWU5E/" source="SUSE-SU"/>
    <description>
    slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29130/">CVE-2020-29130</cve>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179467">SUSE bug 1179467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179477">SUSE bug 1179477</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500101" comment="qemu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625287" comment="qemu-arm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625288" comment="qemu-audio-alsa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625289" comment="qemu-audio-pa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625290" comment="qemu-audio-spice-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500106" comment="qemu-block-curl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625291" comment="qemu-block-dmg-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625292" comment="qemu-block-gluster-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500107" comment="qemu-block-iscsi-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625293" comment="qemu-block-nfs-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500108" comment="qemu-block-rbd-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500109" comment="qemu-block-ssh-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500110" comment="qemu-chardev-baum-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625294" comment="qemu-chardev-spice-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625295" comment="qemu-extra-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500112" comment="qemu-guest-agent-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625296" comment="qemu-hw-display-qxl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625297" comment="qemu-hw-display-virtio-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625298" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625299" comment="qemu-hw-display-virtio-vga-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625300" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625301" comment="qemu-hw-usb-redirect-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625302" comment="qemu-hw-usb-smartcard-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500119" comment="qemu-ipxe-1.0.0+-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625303" comment="qemu-ivshmem-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500120" comment="qemu-ksm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500121" comment="qemu-kvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500122" comment="qemu-lang-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620964" comment="qemu-microvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625304" comment="qemu-ppc-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625305" comment="qemu-s390x-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500125" comment="qemu-seabios-1.14.0_0_g155821a-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500126" comment="qemu-sgabios-8-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500127" comment="qemu-skiboot-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494310" comment="qemu-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500128" comment="qemu-ui-curses-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625306" comment="qemu-ui-gtk-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625307" comment="qemu-ui-opengl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625308" comment="qemu-ui-spice-app-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625309" comment="qemu-ui-spice-core-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500133" comment="qemu-vgabios-1.14.0_0_g155821a-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625310" comment="qemu-vhost-user-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625311" comment="qemu-x86-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009672521" comment="slirp4netns-0.4.7-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266793" comment="slirp4netns is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029260" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29260</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29260" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29260" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29260" ref_url="https://www.suse.com/security/cve/CVE-2020-29260" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012507.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4330-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013193.html" source="SUSE-SU"/>
    <description>
    libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-16"/>
	<updated date="2022-12-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-29260/">CVE-2020-29260</cve>
	<bugzilla href="https://bugzilla.suse.com/1203106">SUSE bug 1203106</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710410" comment="LibVNCServer-devel-0.9.10-150000.4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152205" comment="LibVNCServer-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710411" comment="libvncclient0-0.9.10-150000.4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710251" comment="libvncserver0-0.9.10-150000.4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152207" comment="libvncserver0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202933" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2933</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2933" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2933" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2933" ref_url="https://www.suse.com/security/cve/CVE-2020-2933" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2877-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009371.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1126-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WS25DT4QDBVK3PBC74G4JTBWADK62LTQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2622-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KHHGZ3MEHVZT3NYQIEG5WTISHLXRLW3D/" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 5.1.48 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.0 Base Score 2.2 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.2/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2933/">CVE-2020-2933</cve>
	<bugzilla href="https://bugzilla.suse.com/1173599">SUSE bug 1173599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173600">SUSE bug 1173600</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627141" comment="mysql-connector-java-5.1.47-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152673" comment="mysql-connector-java is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20202934" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-2934</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-2934" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2934" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-2934" ref_url="https://www.suse.com/security/cve/CVE-2020-2934" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2877-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009371.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1126-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WS25DT4QDBVK3PBC74G4JTBWADK62LTQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2622-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KHHGZ3MEHVZT3NYQIEG5WTISHLXRLW3D/" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.19 and prior and 5.1.48 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data as well as unauthorized read access to a subset of MySQL Connectors accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.0 Base Score 5.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-2934/">CVE-2020-2934</cve>
	<bugzilla href="https://bugzilla.suse.com/1173599">SUSE bug 1173599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173600">SUSE bug 1173600</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627141" comment="mysql-connector-java-5.1.47-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152673" comment="mysql-connector-java is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029361" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29361</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29361" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29361" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29361" ref_url="https://www.suse.com/security/cve/CVE-2020-29361" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009948.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:607-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010192.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:29-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:314-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:52-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:55-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:56-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:80-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:83-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010107.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:28-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:29-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0323-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010181.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1611-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CZHKPKPZEQIHCU2R54QWFT3X2C4JOWBT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:4154-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BWY3OJFF4O6KAVNTWISEXMD7X5Y2XL6I/" source="SUSE-SU"/>
    <description>
    An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29361/">CVE-2020-29361</cve>
	<bugzilla href="https://bugzilla.suse.com/1180064">SUSE bug 1180064</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659793" comment="libp11-kit0-0.23.2-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009661793" comment="libp11-kit0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659794" comment="libp11-kit0-32bit-0.23.2-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009661794" comment="libp11-kit0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659795" comment="p11-kit-0.23.2-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009661795" comment="p11-kit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659808" comment="p11-kit-32bit-0.23.2-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009661796" comment="p11-kit-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659796" comment="p11-kit-devel-0.23.2-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009661797" comment="p11-kit-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659797" comment="p11-kit-nss-trust-0.23.2-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009661798" comment="p11-kit-nss-trust is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659944" comment="p11-kit-nss-trust-32bit-0.23.2-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009661799" comment="p11-kit-nss-trust-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659798" comment="p11-kit-tools-0.23.2-4.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009661800" comment="p11-kit-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29362</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29362" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29362" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29362" ref_url="https://www.suse.com/security/cve/CVE-2020-29362" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1529-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011624.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:894-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2405-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011972.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte array through a serialized PKCS#11 function call, the receiving entity may allow the reading of up to 4 bytes of memory past the heap allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-16"/>
	<updated date="2022-09-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29362/">CVE-2020-29362</cve>
	<bugzilla href="https://bugzilla.suse.com/1180065">SUSE bug 1180065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201534">SUSE bug 1201534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698480" comment="libp11-kit0-0.23.2-150000.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009661793" comment="libp11-kit0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698481" comment="libp11-kit0-32bit-0.23.2-150000.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009661794" comment="libp11-kit0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698482" comment="p11-kit-0.23.2-150000.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009661795" comment="p11-kit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698624" comment="p11-kit-32bit-0.23.2-150000.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009661796" comment="p11-kit-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698483" comment="p11-kit-devel-0.23.2-150000.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009661797" comment="p11-kit-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698484" comment="p11-kit-nss-trust-0.23.2-150000.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009661798" comment="p11-kit-nss-trust is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699807" comment="p11-kit-nss-trust-32bit-0.23.2-150000.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009661799" comment="p11-kit-nss-trust-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698485" comment="p11-kit-tools-0.23.2-150000.4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009661800" comment="p11-kit-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029368" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29368</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29368" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29368" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008297.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008296.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008450.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008454.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008455.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008445.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008452.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008512.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0818-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-March/018289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008500.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008509.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008510.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008502.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008513.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008507.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1175-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008625.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1210-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018572.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0393-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/R5J7TLH5AZYERG7B3PW3ALPYSBMFCGV5/" source="SUSE-SU"/>
    <description>
    An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<bugzilla href="https://bugzilla.suse.com/1179428">SUSE bug 1179428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179660">SUSE bug 1179660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29369</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29369" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29369" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29369" ref_url="https://www.suse.com/security/cve/CVE-2020-29369" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007937.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2161-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ICEKZTGIQ6MSKDFOTIOJ2RLWAWJFPSYA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2260-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZYES3O2NEKKQXQ3R5CZOH5YCWJ3TJSKH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29369/">CVE-2020-29369</cve>
	<bugzilla href="https://bugzilla.suse.com/1173504">SUSE bug 1173504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179432">SUSE bug 1179432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179646">SUSE bug 1179646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182109">SUSE bug 1182109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29370</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29370" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29370" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29370" ref_url="https://www.suse.com/security/cve/CVE-2020-29370" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008187.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008196.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    An issue was discovered in kmem_cache_alloc_bulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c71.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29370/">CVE-2020-29370</cve>
	<bugzilla href="https://bugzilla.suse.com/1179435">SUSE bug 1179435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179648">SUSE bug 1179648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29371</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29371" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29371" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29371" ref_url="https://www.suse.com/security/cve/CVE-2020-29371" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007937.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007978.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2161-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ICEKZTGIQ6MSKDFOTIOJ2RLWAWJFPSYA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2193-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4YRSQJNKLIOJJTD3P2UKMHRFMCIG3JDN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2260-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZYES3O2NEKKQXQ3R5CZOH5YCWJ3TJSKH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29371/">CVE-2020-29371</cve>
	<bugzilla href="https://bugzilla.suse.com/1179429">SUSE bug 1179429</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29373</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29373" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29373" ref_url="https://www.suse.com/security/cve/CVE-2020-29373" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008187.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008297.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008296.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008507.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-29373/">CVE-2020-29373</cve>
	<bugzilla href="https://bugzilla.suse.com/1179434">SUSE bug 1179434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179779">SUSE bug 1179779</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29385</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29385" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29385" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29385" ref_url="https://www.suse.com/security/cve/CVE-2020-29385" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008233.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0150-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Z47MEXBMS3R7XMG63LBJMBIYUX3ZTEJI/" source="SUSE-SU"/>
    <description>
    GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the function write_indexes. if c-&gt;self_code equals 10, self-&gt;code_table[10].extends will assign the value 11 to c. The next execution in the loop will assign self-&gt;code_table[11].extends to c, which will give the value of 10. This will make the loop run infinitely. This bug can, for example, be triggered by calling this function with a GIF image with LZW compression that is crafted in a special way.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29385/">CVE-2020-29385</cve>
	<bugzilla href="https://bugzilla.suse.com/1180393">SUSE bug 1180393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628451" comment="gdk-pixbuf-lang-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628452" comment="gdk-pixbuf-query-loaders-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628453" comment="gdk-pixbuf-thumbnailer-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177170" comment="gdk-pixbuf-thumbnailer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628454" comment="libgdk_pixbuf-2_0-0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628455" comment="typelib-1_0-GdkPixbuf-2_0-2.40.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029480" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29480</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29480" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29480" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29480" ref_url="https://www.suse.com/security/cve/CVE-2020-29480" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14578-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2313-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ORUQM2NUGI7GTGQ4QQYAXYCCBGXOCR55/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2331-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLZB3TTBVYNCRCZSSEYYBTXS7RCM6NL7/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. Neither xenstore implementation does any permission checks when reporting a xenstore watch event. A guest administrator can watch the root xenstored node, which will cause notifications for every created, modified, and deleted key. A guest administrator can also use the special watches, which will cause a notification every time a domain is created and destroyed. Data may include: number, type, and domids of other VMs; existence and domids of driver domains; numbers of virtual interfaces, block devices, vcpus; existence of virtual framebuffers and their backend style (e.g., existence of VNC service); Xen VM UUIDs for other domains; timing information about domain creation and device setup; and some hints at the backend provisioning of VMs and their devices. The watch events do not contain values stored in xenstore, only key names. A guest administrator can observe non-sensitive domain and device lifecycle events relating to other guests. This information allows some insight into overall system configuration (including the number and general nature of other guests), and configuration of other guests (including the number and general nature of other guests' devices). This information might be commercially interesting or might make other attacks easier. There is not believed to be exposure of sensitive data. Specifically, there is no exposure of VNC passwords, port numbers, pathnames in host and guest filesystems, cryptographic keys, or within-guest data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29480/">CVE-2020-29480</cve>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179496">SUSE bug 1179496</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029481" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29481</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29481" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29481" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29481" ref_url="https://www.suse.com/security/cve/CVE-2020-29481" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14578-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2313-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ORUQM2NUGI7GTGQ4QQYAXYCCBGXOCR55/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2331-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLZB3TTBVYNCRCZSSEYYBTXS7RCM6NL7/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. Access rights of Xenstore nodes are per domid. Unfortunately, existing granted access rights are not removed when a domain is being destroyed. This means that a new domain created with the same domid will inherit the access rights to Xenstore nodes from the previous domain(s) with the same domid. Because all Xenstore entries of a guest below /local/domain/&lt;domid&gt; are being deleted by Xen tools when a guest is destroyed, only Xenstore entries of other guests still running are affected. For example, a newly created guest domain might be able to read sensitive information that had belonged to a previously existing guest domain. Both Xenstore implementations (C and Ocaml) are vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29481/">CVE-2020-29481</cve>
	<bugzilla href="https://bugzilla.suse.com/1176349">SUSE bug 1176349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179498">SUSE bug 1179498</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29483</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29483" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29483" ref_url="https://www.suse.com/security/cve/CVE-2020-29483" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14578-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2313-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ORUQM2NUGI7GTGQ4QQYAXYCCBGXOCR55/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2331-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLZB3TTBVYNCRCZSSEYYBTXS7RCM6NL7/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. Xenstored and guests communicate via a shared memory page using a specific protocol. When a guest violates this protocol, xenstored will drop the connection to that guest. Unfortunately, this is done by just removing the guest from xenstored's internal management, resulting in the same actions as if the guest had been destroyed, including sending an @releaseDomain event. @releaseDomain events do not say that the guest has been removed. All watchers of this event must look at the states of all guests to find the guest that has been removed. When an @releaseDomain is generated due to a domain xenstored protocol violation, because the guest is still running, the watchers will not react. Later, when the guest is actually destroyed, xenstored will no longer have it stored in its internal data base, so no further @releaseDomain event will be sent. This can lead to a zombie domain; memory mappings of that guest's memory will not be removed, due to the missing event. This zombie domain will be cleaned up only after another domain is destroyed, as that will trigger another @releaseDomain event. If the device model of the guest that violated the Xenstore protocol is running in a stub-domain, a use-after-free case could happen in xenstored, after having removed the guest from its internal data base, possibly resulting in a crash of xenstored. A malicious guest can block resources of the host for a period after its own death. Guests with a stub domain device model can eventually crash xenstored, resulting in a more serious denial of service (the prevention of any further domain management operations). Only the C variant of Xenstore is affected; the Ocaml variant is not affected. Only HVM guests with a stubdom device model can cause a serious DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29483/">CVE-2020-29483</cve>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179502">SUSE bug 1179502</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29484</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29484" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29484" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29484" ref_url="https://www.suse.com/security/cve/CVE-2020-29484" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14578-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2313-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ORUQM2NUGI7GTGQ4QQYAXYCCBGXOCR55/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2331-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLZB3TTBVYNCRCZSSEYYBTXS7RCM6NL7/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. When a Xenstore watch fires, the xenstore client that registered the watch will receive a Xenstore message containing the path of the modified Xenstore entry that triggered the watch, and the tag that was specified when registering the watch. Any communication with xenstored is done via Xenstore messages, consisting of a message header and the payload. The payload length is limited to 4096 bytes. Any request to xenstored resulting in a response with a payload longer than 4096 bytes will result in an error. When registering a watch, the payload length limit applies to the combined length of the watched path and the specified tag. Because watches for a specific path are also triggered for all nodes below that path, the payload of a watch event message can be longer than the payload needed to register the watch. A malicious guest that registers a watch using a very large tag (i.e., with a registration operation payload length close to the 4096 byte limit) can cause the generation of watch events with a payload length larger than 4096 bytes, by writing to Xenstore entries below the watched path. This will result in an error condition in xenstored. This error can result in a NULL pointer dereference, leading to a crash of xenstored. A malicious guest administrator can cause xenstored to crash, leading to a denial of service. Following a xenstored crash, domains may continue to run, but management operations will be impossible. Only C xenstored is affected, oxenstored is not affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29484/">CVE-2020-29484</cve>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179501">SUSE bug 1179501</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29562</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29562" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29562" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29562" ref_url="https://www.suse.com/security/cve/CVE-2020-29562" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:58-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:59-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008397.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0358-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WMNRZB427QFJOPYP4EA4KBZOTT622NY3/" source="SUSE-SU"/>
    <description>
    The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29562/">CVE-2020-29562</cve>
	<bugzilla href="https://bugzilla.suse.com/1179694">SUSE bug 1179694</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029566" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29566</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29566" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29566" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29566" ref_url="https://www.suse.com/security/cve/CVE-2020-29566" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14578-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2313-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ORUQM2NUGI7GTGQ4QQYAXYCCBGXOCR55/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2331-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLZB3TTBVYNCRCZSSEYYBTXS7RCM6NL7/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. When they require assistance from the device model, x86 HVM guests must be temporarily de-scheduled. The device model will signal Xen when it has completed its operation, via an event channel, so that the relevant vCPU is rescheduled. If the device model were to signal Xen without having actually completed the operation, the de-schedule / re-schedule cycle would repeat. If, in addition, Xen is resignalled very quickly, the re-schedule may occur before the de-schedule was fully complete, triggering a shortcut. This potentially repeating process uses ordinary recursive function calls, and thus could result in a stack overflow. A malicious or buggy stubdomain serving a HVM guest can cause Xen to crash, resulting in a Denial of Service (DoS) to the entire host. Only x86 systems are affected. Arm systems are not affected. Only x86 stubdomains serving HVM guests can exploit the vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29566/">CVE-2020-29566</cve>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179506">SUSE bug 1179506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29567</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29567" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29567" ref_url="https://www.suse.com/security/cve/CVE-2020-29567" source="SUSE CVE"/>
    <description>
    An issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors are dynamically allocated and de-allocated on the relevant CPUs. De-allocation has to happen when certain constraints are met. If these conditions are not met when first checked, the checking CPU may send an interrupt to itself, in the expectation that this IRQ will be delivered only after the condition preventing the cleanup has cleared. For two specific IRQ vectors, this expectation was violated, resulting in a continuous stream of self-interrupts, which renders the CPU effectively unusable. A domain with a passed through PCI device can cause lockup of a physical CPU, resulting in a Denial of Service (DoS) to the entire host. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only guests with physical PCI devices passed through to them can exploit the vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29567/">CVE-2020-29567</cve>
	<bugzilla href="https://bugzilla.suse.com/1179513">SUSE bug 1179513</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29568</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29568" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29568" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29568" ref_url="https://www.suse.com/security/cve/CVE-2020-29568" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008288.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008292.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008305.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008354.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7EJISS2OPKUSJFJ2BG5ZWHA2Z6H3VQB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0241-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GZRN6BW22C4S3GVCJVPHDT4HHTLVGVZE/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OOM in the backend. All systems with a FreeBSD, Linux, or NetBSD (any version) dom0 are vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29568/">CVE-2020-29568</cve>
	<bugzilla href="https://bugzilla.suse.com/1179508">SUSE bug 1179508</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29569</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29569" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29569" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008288.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008292.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008297.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008296.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008305.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008354.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7EJISS2OPKUSJFJ2BG5ZWHA2Z6H3VQB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0241-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GZRN6BW22C4S3GVCJVPHDT4HHTLVGVZE/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to reset ring-&gt;xenblkd to NULL when stopped. However, the handler may not have time to run if the frontend quickly toggles between the states connect and disconnect. As a consequence, the block backend may re-use a pointer after it was freed. A misbehaving guest can trigger a dom0 crash by continuously connecting / disconnecting a block frontend. Privilege escalation and information leaks cannot be ruled out. This only affects systems with a Linux blkback.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<bugzilla href="https://bugzilla.suse.com/1179509">SUSE bug 1179509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180008">SUSE bug 1180008</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29570</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29570" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29570" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29570" ref_url="https://www.suse.com/security/cve/CVE-2020-29570" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14578-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2313-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ORUQM2NUGI7GTGQ4QQYAXYCCBGXOCR55/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2331-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLZB3TTBVYNCRCZSSEYYBTXS7RCM6NL7/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping maintained by Xen and that of pointers into the control block is reversed. The consumer assumes, seeing the former initialized, that the latter are also ready for use. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29570/">CVE-2020-29570</cve>
	<bugzilla href="https://bugzilla.suse.com/1179514">SUSE bug 1179514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29571</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29571" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29571" ref_url="https://www.suse.com/security/cve/CVE-2020-29571" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14578-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2313-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ORUQM2NUGI7GTGQ4QQYAXYCCBGXOCR55/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2331-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLZB3TTBVYNCRCZSSEYYBTXS7RCM6NL7/" source="SUSE-SU"/>
    <description>
    An issue was discovered in Xen through 4.14.x. A bounds check common to most operation time functions specific to FIFO event channels depends on the CPU observing consistent state. While the producer side uses appropriately ordered writes, the consumer side isn't protected against re-ordered reads, and may hence end up de-referencing a NULL pointer. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system. Only Arm systems may be vulnerable. Whether a system is vulnerable depends on the specific CPU. x86 systems are not vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29571/">CVE-2020-29571</cve>
	<bugzilla href="https://bugzilla.suse.com/1179516">SUSE bug 1179516</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629051" comment="xen-libs-4.14.1_16-1.6 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29573</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29573" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29573" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29573" ref_url="https://www.suse.com/security/cve/CVE-2020-29573" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:58-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:59-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008397.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0358-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WMNRZB427QFJOPYP4EA4KBZOTT622NY3/" source="SUSE-SU"/>
    <description>
    sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern, as seen when passing a \x00\x04\x00\x00\x00\x00\x00\x00\x00\x04 value to sprintf. NOTE: the issue does not affect glibc by default in 2016 or later (i.e., 2.23 or later) because of commits made in 2015 for inlining of C99 math functions through use of GCC built-ins. In other words, the reference to 2.23 is intentional despite the mention of "Fixed for glibc 2.33" in the 26649 reference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29573/">CVE-2020-29573</cve>
	<bugzilla href="https://bugzilla.suse.com/1179721">SUSE bug 1179721</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628477" comment="glibc-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628478" comment="glibc-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628480" comment="glibc-extra-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628483" comment="glibc-lang-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009651309" comment="glibc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628484" comment="glibc-locale-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628485" comment="glibc-locale-base-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251612" comment="glibc-locale-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628486" comment="glibc-locale-base-32bit-2.31-7.20 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251613" comment="glibc-locale-base-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628488" comment="nscd-2.31-7.30 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29599</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29599" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29599" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29599" ref_url="https://www.suse.com/security/cve/CVE-2020-29599" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0136-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/" source="SUSE-SU"/>
    <description>
    ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29599/">CVE-2020-29599</cve>
	<bugzilla href="https://bugzilla.suse.com/1179753">SUSE bug 1179753</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29623</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29623" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29623" ref_url="https://www.suse.com/security/cve/CVE-2020-29623" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008699.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0637-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PLZ5MXMQE5PW2OZS4ZK2IAEG3Y3AFJVD/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    "Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. A user may be unable to fully delete browsing history.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-29623/">CVE-2020-29623</cve>
	<bugzilla href="https://bugzilla.suse.com/1184262">SUSE bug 1184262</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29651</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29651" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29651" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29651" ref_url="https://www.suse.com/security/cve/CVE-2020-29651" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:250-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2085-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2126-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2229-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:537-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011978.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1062-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1963-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011928.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0851-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/J5N5MI5XRBM5X46XPGTD3CVA6C5MMBQJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1859-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/B5MZ7NDWQ2PACIOK5L2D7CNODUCJCARI/" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29651/">CVE-2020-29651</cve>
	<bugzilla href="https://bugzilla.suse.com/1179805">SUSE bug 1179805</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698636" comment="python2-py-1.10.0-150000.5.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009477848" comment="python2-py is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699816" comment="python2-pycodestyle-2.5.0-150000.3.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009707057" comment="python2-pycodestyle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699817" comment="python2-pyflakes-2.1.1-150000.3.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009707058" comment="python2-pyflakes is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009698488" comment="python3-py-1.10.0-150000.5.9.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009477849" comment="python3-py is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699818" comment="python3-pycodestyle-2.5.0-150000.3.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009707059" comment="python3-pycodestyle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009699819" comment="python3-pyflakes-2.1.1-150000.3.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009707060" comment="python3-pyflakes is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029660" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29660</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29660" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29660" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008187.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008296.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7EJISS2OPKUSJFJ2BG5ZWHA2Z6H3VQB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<bugzilla href="https://bugzilla.suse.com/1179745">SUSE bug 1179745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179877">SUSE bug 1179877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029661" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29661</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29661" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29661" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008187.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008296.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7EJISS2OPKUSJFJ2BG5ZWHA2Z6H3VQB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<bugzilla href="https://bugzilla.suse.com/1179745">SUSE bug 1179745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179877">SUSE bug 1179877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202029663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-29663</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-29663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29663" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-29663" ref_url="https://www.suse.com/security/cve/CVE-2020-29663" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012665.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1029-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F7IVRID4FOA6YK4ZLJ273QAN3OEQFE4J/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2MGD4GT6SSRCFTDAW4FIYGJF6HKJQ6AO/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1054-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XNOBY7TETKOOX2HQN4LHXGRCFGFAAFJC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1069-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7RXCOMXKKWZ7PYODPH5SO5SSBKRXIJWA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1089-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AG46DROWC4ZEVBNIZC5IYVVFYH4FMFCS/" source="SUSE-SU"/>
    <description>
    Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL. This issue is fixed in Icinga 2 v2.11.8 and v2.12.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-29663/">CVE-2020-29663</cve>
	<bugzilla href="https://bugzilla.suse.com/1180147">SUSE bug 1180147</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626655" comment="icinga2-2.12.5-bp153.2.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297975" comment="icinga2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626656" comment="icinga2-bin-2.12.5-bp153.2.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297977" comment="icinga2-bin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626657" comment="icinga2-common-2.12.5-bp153.2.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297979" comment="icinga2-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626658" comment="icinga2-doc-2.12.5-bp153.2.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297981" comment="icinga2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626659" comment="icinga2-ido-mysql-2.12.5-bp153.2.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297983" comment="icinga2-ido-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626660" comment="icinga2-ido-pgsql-2.12.5-bp153.2.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297985" comment="icinga2-ido-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626661" comment="nano-icinga2-2.12.5-bp153.2.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297987" comment="nano-icinga2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626662" comment="vim-icinga2-2.12.5-bp153.2.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297989" comment="vim-icinga2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35111</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35111" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35111" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35111" ref_url="https://www.suse.com/security/cve/CVE-2020-35111" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3902-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008122.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2317-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZRYMYUEZXYQNBK2DWV7DAYE5EXEQPBUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2318-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LL2B6S5KIA4HGLES3CDLSB4VRZW275H2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2324-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MFGNB2YB4LDKDYXRSTS5R357XYHABN5P/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2325-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JZN3OVPTOCIWBAWJK4JZQDXFN752D6AR/" source="SUSE-SU"/>
    <description>
    When an extension with the proxy permission registered to receive &lt;all_urls&gt;, the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have inadvertently leaked their IP address. This vulnerability affects Firefox &lt; 84, Thunderbird &lt; 78.6, and Firefox ESR &lt; 78.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-35111/">CVE-2020-35111</cve>
	<bugzilla href="https://bugzilla.suse.com/1180039">SUSE bug 1180039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35112</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35112" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35112" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35112" ref_url="https://www.suse.com/security/cve/CVE-2020-35112" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3902-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008122.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2317-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZRYMYUEZXYQNBK2DWV7DAYE5EXEQPBUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2318-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LL2B6S5KIA4HGLES3CDLSB4VRZW275H2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2324-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MFGNB2YB4LDKDYXRSTS5R357XYHABN5P/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2325-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JZN3OVPTOCIWBAWJK4JZQDXFN752D6AR/" source="SUSE-SU"/>
    <description>
    If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with an executable extension (such as .bat or .exe) that executable would have been launched instead. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox &lt; 84, Thunderbird &lt; 78.6, and Firefox ESR &lt; 78.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35112/">CVE-2020-35112</cve>
	<bugzilla href="https://bugzilla.suse.com/1180039">SUSE bug 1180039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35113</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35113" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35113" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35113" ref_url="https://www.suse.com/security/cve/CVE-2020-35113" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3902-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008122.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2317-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZRYMYUEZXYQNBK2DWV7DAYE5EXEQPBUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2318-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LL2B6S5KIA4HGLES3CDLSB4VRZW275H2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2324-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MFGNB2YB4LDKDYXRSTS5R357XYHABN5P/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2325-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JZN3OVPTOCIWBAWJK4JZQDXFN752D6AR/" source="SUSE-SU"/>
    <description>
    Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox &lt; 84, Thunderbird &lt; 78.6, and Firefox ESR &lt; 78.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35113/">CVE-2020-35113</cve>
	<bugzilla href="https://bugzilla.suse.com/1180039">SUSE bug 1180039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35448</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35448" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35448" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35448" ref_url="https://www.suse.com/security/cve/CVE-2020-35448" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010497.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1475-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N6RYWEZ5BKTK6UEP6HAB7B466BPC3SMJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3616-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4TQ3DLF5YEQDDJUON6WGBX2HVVM7FOLB/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-35448/">CVE-2020-35448</cve>
	<bugzilla href="https://bugzilla.suse.com/1184794">SUSE bug 1184794</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653451" comment="binutils-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653452" comment="binutils-devel-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653455" comment="binutils-devel-32bit-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653458" comment="binutils-gold-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653456" comment="bpftrace-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654065" comment="bpftrace is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653457" comment="bpftrace-tools-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654066" comment="bpftrace-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653562" comment="cross-aarch64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653563" comment="cross-arm-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653564" comment="cross-avr-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653565" comment="cross-epiphany-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238034" comment="cross-epiphany-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653566" comment="cross-hppa-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653567" comment="cross-hppa64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653568" comment="cross-i386-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653569" comment="cross-ia64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653570" comment="cross-m68k-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653571" comment="cross-mips-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653572" comment="cross-ppc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653573" comment="cross-ppc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653574" comment="cross-ppc64le-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653575" comment="cross-riscv64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238035" comment="cross-riscv64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653576" comment="cross-rx-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238036" comment="cross-rx-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653577" comment="cross-s390-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653578" comment="cross-s390x-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653579" comment="cross-sparc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653580" comment="cross-sparc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653581" comment="cross-spu-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653582" comment="cross-x86_64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653453" comment="libctf-nobfd0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653454" comment="libctf0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035452" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35452</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35452" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35452" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35452" ref_url="https://www.suse.com/security/cve/CVE-2020-35452" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2006-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2127-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0908-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F32WQ7K6A45WOBEDFMGMRXDC2F2SL3IF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2127-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KAQGPGA6ZQQT3VO5WOYFSSTZFH57MPWK/" source="SUSE-SU"/>
    <description>
    Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation option might make it possible, with limited consequences anyway due to the size (a single byte) and the value (zero byte) of the overflow
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35452/">CVE-2020-35452</cve>
	<bugzilla href="https://bugzilla.suse.com/1186922">SUSE bug 1186922</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494069" comment="apache2-2.4.43-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009499964" comment="apache2-devel-2.4.43-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009499965" comment="apache2-doc-2.4.43-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497924" comment="apache2-event-2.4.43-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153274" comment="apache2-event is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625323" comment="apache2-example-pages-2.4.43-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494070" comment="apache2-prefork-2.4.43-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494071" comment="apache2-utils-2.4.43-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009499966" comment="apache2-worker-2.4.43-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153275" comment="apache2-worker is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35459</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35459" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35459" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35459" ref_url="https://www.suse.com/security/cve/CVE-2020-35459" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0085-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008437.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008474.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008489.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008487.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008511.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0941-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008543.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0942-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008544.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0943-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008552.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2239-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2435-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-July/019664.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009458.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0055-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RKSUG2OZN3Y2FQVQ55HP5MZIQZXZ5OD6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0073-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XKSDDKFQ4YKEAUB3EUAWBPTKNEOH254X/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0410-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BNDVFBI7G272LNZ2QQZ4MY56KX2J4C36/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0473-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/P6Y6RW5YXKZSLM7CRGCZD5EXRQATEN6Q/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1087-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VDCDHUWYXHAR4IFS55R2KWBURUA5HAL7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2435-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JZ4AG2NNHICHYHJBLJR3CWGTGZLQBUDP/" source="SUSE-SU"/>
    <description>
    An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35459/">CVE-2020-35459</cve>
	<bugzilla href="https://bugzilla.suse.com/1179999">SUSE bug 1179999</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624130" comment="crmsh-4.3.1+20210702.4e0ee8fb-5.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009341552" comment="crmsh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624131" comment="crmsh-scripts-4.3.1+20210702.4e0ee8fb-5.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009341553" comment="crmsh-scripts is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625871" comment="crmsh-test-4.3.1+20210702.4e0ee8fb-5.59.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009341554" comment="crmsh-test is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035471" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35471</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35471" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35471" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35471" ref_url="https://www.suse.com/security/cve/CVE-2020-35471" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:50-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:51-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008286.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WUFXLLYPEPLGLE3CNOENBUDET76YJXPI/" source="SUSE-SU"/>
    <description>
    Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35471/">CVE-2020-35471</cve>
	<bugzilla href="https://bugzilla.suse.com/1180121">SUSE bug 1180121</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670542" comment="envoy-proxy-1.14.6-bp153.3.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009670589" comment="envoy-proxy is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670543" comment="envoy-proxy-source-1.14.6-bp153.3.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009670590" comment="envoy-proxy-source is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35493</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35493" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35493" ref_url="https://www.suse.com/security/cve/CVE-2020-35493" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010497.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1475-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N6RYWEZ5BKTK6UEP6HAB7B466BPC3SMJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3616-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4TQ3DLF5YEQDDJUON6WGBX2HVVM7FOLB/" source="SUSE-SU"/>
    <description>
    A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -&gt; out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35493/">CVE-2020-35493</cve>
	<bugzilla href="https://bugzilla.suse.com/1180451">SUSE bug 1180451</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653451" comment="binutils-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653452" comment="binutils-devel-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653455" comment="binutils-devel-32bit-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653458" comment="binutils-gold-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653456" comment="bpftrace-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654065" comment="bpftrace is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653457" comment="bpftrace-tools-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654066" comment="bpftrace-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653562" comment="cross-aarch64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653563" comment="cross-arm-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653564" comment="cross-avr-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653565" comment="cross-epiphany-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238034" comment="cross-epiphany-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653566" comment="cross-hppa-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653567" comment="cross-hppa64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653568" comment="cross-i386-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653569" comment="cross-ia64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653570" comment="cross-m68k-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653571" comment="cross-mips-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653572" comment="cross-ppc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653573" comment="cross-ppc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653574" comment="cross-ppc64le-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653575" comment="cross-riscv64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238035" comment="cross-riscv64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653576" comment="cross-rx-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238036" comment="cross-rx-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653577" comment="cross-s390-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653578" comment="cross-s390x-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653579" comment="cross-sparc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653580" comment="cross-sparc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653581" comment="cross-spu-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653582" comment="cross-x86_64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653453" comment="libctf-nobfd0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653454" comment="libctf0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35496</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35496" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35496" ref_url="https://www.suse.com/security/cve/CVE-2020-35496" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010497.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1475-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N6RYWEZ5BKTK6UEP6HAB7B466BPC3SMJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3616-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4TQ3DLF5YEQDDJUON6WGBX2HVVM7FOLB/" source="SUSE-SU"/>
    <description>
    There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35496/">CVE-2020-35496</cve>
	<bugzilla href="https://bugzilla.suse.com/1180454">SUSE bug 1180454</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653451" comment="binutils-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653452" comment="binutils-devel-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653455" comment="binutils-devel-32bit-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653458" comment="binutils-gold-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653456" comment="bpftrace-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654065" comment="bpftrace is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653457" comment="bpftrace-tools-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654066" comment="bpftrace-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653562" comment="cross-aarch64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653563" comment="cross-arm-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653564" comment="cross-avr-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653565" comment="cross-epiphany-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238034" comment="cross-epiphany-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653566" comment="cross-hppa-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653567" comment="cross-hppa64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653568" comment="cross-i386-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653569" comment="cross-ia64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653570" comment="cross-m68k-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653571" comment="cross-mips-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653572" comment="cross-ppc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653573" comment="cross-ppc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653574" comment="cross-ppc64le-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653575" comment="cross-riscv64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238035" comment="cross-riscv64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653576" comment="cross-rx-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238036" comment="cross-rx-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653577" comment="cross-s390-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653578" comment="cross-s390x-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653579" comment="cross-sparc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653580" comment="cross-sparc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653581" comment="cross-spu-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653582" comment="cross-x86_64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653453" comment="libctf-nobfd0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653454" comment="libctf0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35503</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35503" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35503" ref_url="https://www.suse.com/security/cve/CVE-2020-35503" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2789-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-August/019909.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009332.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009698.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3635-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009705.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1202-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7XTOHNMISPT4N5NUXQJPKV5LQNNGSMFI/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2789-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UE3MLTPF62745SPUUDQR6ROYVP4GG6DT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2858-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GGOXRRBMGRJGBNXEGPCZ3JFLXCMIM6A3/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3614-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/26KPX43RJBRTCX3JER7CN7MAT4QEGAED/" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasas_command_cancelled() callback function while dropping a SCSI request. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35503/">CVE-2020-35503</cve>
	<bugzilla href="https://bugzilla.suse.com/1180432">SUSE bug 1180432</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630694" comment="qemu-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630760" comment="qemu-arm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630761" comment="qemu-audio-alsa-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630762" comment="qemu-audio-pa-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630763" comment="qemu-audio-spice-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630699" comment="qemu-block-curl-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630764" comment="qemu-block-dmg-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630765" comment="qemu-block-gluster-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630700" comment="qemu-block-iscsi-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630766" comment="qemu-block-nfs-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630701" comment="qemu-block-rbd-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630702" comment="qemu-block-ssh-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630703" comment="qemu-chardev-baum-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630767" comment="qemu-chardev-spice-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630768" comment="qemu-extra-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630705" comment="qemu-guest-agent-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630769" comment="qemu-hw-display-qxl-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630770" comment="qemu-hw-display-virtio-gpu-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630771" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630772" comment="qemu-hw-display-virtio-vga-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630773" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630774" comment="qemu-hw-usb-redirect-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630775" comment="qemu-hw-usb-smartcard-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630712" comment="qemu-ipxe-1.0.0+-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630776" comment="qemu-ivshmem-tools-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630713" comment="qemu-ksm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630714" comment="qemu-kvm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630715" comment="qemu-lang-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630777" comment="qemu-microvm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630778" comment="qemu-ppc-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630556" comment="qemu-s390-4.2.1-11.28.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630779" comment="qemu-s390x-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630718" comment="qemu-seabios-1.14.0_0_g155821a-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630719" comment="qemu-sgabios-8-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630720" comment="qemu-skiboot-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630653" comment="qemu-tools-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630721" comment="qemu-ui-curses-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630780" comment="qemu-ui-gtk-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630781" comment="qemu-ui-opengl-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630782" comment="qemu-ui-spice-app-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630783" comment="qemu-ui-spice-core-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630726" comment="qemu-vgabios-1.14.0_0_g155821a-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630784" comment="qemu-vhost-user-gpu-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630785" comment="qemu-x86-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35504</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35504" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35504" ref_url="https://www.suse.com/security/cve/CVE-2020-35504" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2789-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-August/019909.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009332.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009698.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3635-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009705.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1202-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7XTOHNMISPT4N5NUXQJPKV5LQNNGSMFI/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2789-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UE3MLTPF62745SPUUDQR6ROYVP4GG6DT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2858-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GGOXRRBMGRJGBNXEGPCZ3JFLXCMIM6A3/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3614-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/26KPX43RJBRTCX3JER7CN7MAT4QEGAED/" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35504/">CVE-2020-35504</cve>
	<bugzilla href="https://bugzilla.suse.com/1180433">SUSE bug 1180433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630694" comment="qemu-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630760" comment="qemu-arm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630761" comment="qemu-audio-alsa-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630762" comment="qemu-audio-pa-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630763" comment="qemu-audio-spice-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630699" comment="qemu-block-curl-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630764" comment="qemu-block-dmg-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630765" comment="qemu-block-gluster-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630700" comment="qemu-block-iscsi-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630766" comment="qemu-block-nfs-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630701" comment="qemu-block-rbd-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630702" comment="qemu-block-ssh-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630703" comment="qemu-chardev-baum-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630767" comment="qemu-chardev-spice-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630768" comment="qemu-extra-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630705" comment="qemu-guest-agent-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630769" comment="qemu-hw-display-qxl-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630770" comment="qemu-hw-display-virtio-gpu-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630771" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630772" comment="qemu-hw-display-virtio-vga-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630773" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630774" comment="qemu-hw-usb-redirect-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630775" comment="qemu-hw-usb-smartcard-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630712" comment="qemu-ipxe-1.0.0+-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630776" comment="qemu-ivshmem-tools-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630713" comment="qemu-ksm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630714" comment="qemu-kvm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630715" comment="qemu-lang-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630777" comment="qemu-microvm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630778" comment="qemu-ppc-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630556" comment="qemu-s390-4.2.1-11.28.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630779" comment="qemu-s390x-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630718" comment="qemu-seabios-1.14.0_0_g155821a-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630719" comment="qemu-sgabios-8-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630720" comment="qemu-skiboot-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630653" comment="qemu-tools-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630721" comment="qemu-ui-curses-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630780" comment="qemu-ui-gtk-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630781" comment="qemu-ui-opengl-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630782" comment="qemu-ui-spice-app-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630783" comment="qemu-ui-spice-core-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630726" comment="qemu-vgabios-1.14.0_0_g155821a-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630784" comment="qemu-vhost-user-gpu-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630785" comment="qemu-x86-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35505</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35505" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35505" ref_url="https://www.suse.com/security/cve/CVE-2020-35505" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2789-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-August/019909.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009332.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009698.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3635-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009705.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1202-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7XTOHNMISPT4N5NUXQJPKV5LQNNGSMFI/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2789-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UE3MLTPF62745SPUUDQR6ROYVP4GG6DT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2858-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GGOXRRBMGRJGBNXEGPCZ3JFLXCMIM6A3/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3614-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/26KPX43RJBRTCX3JER7CN7MAT4QEGAED/" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35505/">CVE-2020-35505</cve>
	<bugzilla href="https://bugzilla.suse.com/1180434">SUSE bug 1180434</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630694" comment="qemu-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630760" comment="qemu-arm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630761" comment="qemu-audio-alsa-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630762" comment="qemu-audio-pa-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630763" comment="qemu-audio-spice-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630699" comment="qemu-block-curl-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630764" comment="qemu-block-dmg-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630765" comment="qemu-block-gluster-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630700" comment="qemu-block-iscsi-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630766" comment="qemu-block-nfs-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630701" comment="qemu-block-rbd-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630702" comment="qemu-block-ssh-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630703" comment="qemu-chardev-baum-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630767" comment="qemu-chardev-spice-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630768" comment="qemu-extra-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630705" comment="qemu-guest-agent-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630769" comment="qemu-hw-display-qxl-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630770" comment="qemu-hw-display-virtio-gpu-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630771" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630772" comment="qemu-hw-display-virtio-vga-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630773" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630774" comment="qemu-hw-usb-redirect-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630775" comment="qemu-hw-usb-smartcard-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630712" comment="qemu-ipxe-1.0.0+-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630776" comment="qemu-ivshmem-tools-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630713" comment="qemu-ksm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630714" comment="qemu-kvm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630715" comment="qemu-lang-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630777" comment="qemu-microvm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630778" comment="qemu-ppc-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630556" comment="qemu-s390-4.2.1-11.28.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630779" comment="qemu-s390x-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630718" comment="qemu-seabios-1.14.0_0_g155821a-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630719" comment="qemu-sgabios-8-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630720" comment="qemu-skiboot-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630653" comment="qemu-tools-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630721" comment="qemu-ui-curses-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630780" comment="qemu-ui-gtk-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630781" comment="qemu-ui-opengl-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630782" comment="qemu-ui-spice-app-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630783" comment="qemu-ui-spice-core-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630726" comment="qemu-vgabios-1.14.0_0_g155821a-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630784" comment="qemu-vhost-user-gpu-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630785" comment="qemu-x86-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35506</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35506" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35506" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35506" ref_url="https://www.suse.com/security/cve/CVE-2020-35506" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2789-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-August/019909.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009332.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009698.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3635-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009705.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1202-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7XTOHNMISPT4N5NUXQJPKV5LQNNGSMFI/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2789-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UE3MLTPF62745SPUUDQR6ROYVP4GG6DT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2858-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GGOXRRBMGRJGBNXEGPCZ3JFLXCMIM6A3/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3614-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/26KPX43RJBRTCX3JER7CN7MAT4QEGAED/" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0 during the handling of the 'Information Transfer' command (CMD_TI). This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service or potential code execution with the privileges of the QEMU process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-35506/">CVE-2020-35506</cve>
	<bugzilla href="https://bugzilla.suse.com/1180435">SUSE bug 1180435</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630694" comment="qemu-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630760" comment="qemu-arm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630761" comment="qemu-audio-alsa-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630762" comment="qemu-audio-pa-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630763" comment="qemu-audio-spice-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630699" comment="qemu-block-curl-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630764" comment="qemu-block-dmg-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630765" comment="qemu-block-gluster-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630700" comment="qemu-block-iscsi-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630766" comment="qemu-block-nfs-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630701" comment="qemu-block-rbd-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630702" comment="qemu-block-ssh-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630703" comment="qemu-chardev-baum-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630767" comment="qemu-chardev-spice-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630768" comment="qemu-extra-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630705" comment="qemu-guest-agent-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630769" comment="qemu-hw-display-qxl-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630770" comment="qemu-hw-display-virtio-gpu-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630771" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630772" comment="qemu-hw-display-virtio-vga-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630773" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630774" comment="qemu-hw-usb-redirect-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630775" comment="qemu-hw-usb-smartcard-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630712" comment="qemu-ipxe-1.0.0+-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630776" comment="qemu-ivshmem-tools-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630713" comment="qemu-ksm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630714" comment="qemu-kvm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630715" comment="qemu-lang-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630777" comment="qemu-microvm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630778" comment="qemu-ppc-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630556" comment="qemu-s390-4.2.1-11.28.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630779" comment="qemu-s390x-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630718" comment="qemu-seabios-1.14.0_0_g155821a-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630719" comment="qemu-sgabios-8-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630720" comment="qemu-skiboot-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630653" comment="qemu-tools-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630721" comment="qemu-ui-curses-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630780" comment="qemu-ui-gtk-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630781" comment="qemu-ui-opengl-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630782" comment="qemu-ui-spice-app-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630783" comment="qemu-ui-spice-core-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630726" comment="qemu-vgabios-1.14.0_0_g155821a-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630784" comment="qemu-vhost-user-gpu-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630785" comment="qemu-x86-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35507</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35507" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35507" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35507" ref_url="https://www.suse.com/security/cve/CVE-2020-35507" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010497.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1475-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N6RYWEZ5BKTK6UEP6HAB7B466BPC3SMJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3616-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4TQ3DLF5YEQDDJUON6WGBX2HVVM7FOLB/" source="SUSE-SU"/>
    <description>
    There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35507/">CVE-2020-35507</cve>
	<bugzilla href="https://bugzilla.suse.com/1180461">SUSE bug 1180461</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653451" comment="binutils-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653452" comment="binutils-devel-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653455" comment="binutils-devel-32bit-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653458" comment="binutils-gold-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653456" comment="bpftrace-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654065" comment="bpftrace is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653457" comment="bpftrace-tools-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654066" comment="bpftrace-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653562" comment="cross-aarch64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653563" comment="cross-arm-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653564" comment="cross-avr-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653565" comment="cross-epiphany-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238034" comment="cross-epiphany-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653566" comment="cross-hppa-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653567" comment="cross-hppa64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653568" comment="cross-i386-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653569" comment="cross-ia64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653570" comment="cross-m68k-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653571" comment="cross-mips-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653572" comment="cross-ppc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653573" comment="cross-ppc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653574" comment="cross-ppc64le-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653575" comment="cross-riscv64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238035" comment="cross-riscv64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653576" comment="cross-rx-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238036" comment="cross-rx-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653577" comment="cross-s390-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653578" comment="cross-s390x-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653579" comment="cross-sparc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653580" comment="cross-sparc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653581" comment="cross-spu-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653582" comment="cross-x86_64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653453" comment="libctf-nobfd0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653454" comment="libctf0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35511</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35511" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35511" ref_url="https://www.suse.com/security/cve/CVE-2020-35511" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:10142-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4HVZNA3VAYHKC5NXBYOOMUZSZNOXRCF7/" source="SUSE-SU"/>
    <description>
    A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-10"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35511/">CVE-2020-35511</cve>
	<bugzilla href="https://bugzilla.suse.com/1202662">SUSE bug 1202662</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717269" comment="pngcheck-3.0.3-bp153.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009338019" comment="pngcheck is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35512</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35512" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35512" ref_url="https://www.suse.com/security/cve/CVE-2020-35512" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009269.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009108.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009192.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011899.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1056-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SMJEHJSAVUMBFKW6O66TYUT5LCUVZD6Z/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2292-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YPWMH7OQGRFBQ2ZFL5Z3HCT443A45EIB/" source="SUSE-SU"/>
    <description>
    A use-after-free flaw was found in D-Bus Development branch &lt;= 1.13.16, dbus-1.12.x stable branch &lt;= 1.12.18, and dbus-1.10.x and older branches &lt;= 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in the heap, which is still used by data structures necessary for the other usernames sharing the UID, possibly leading to a crash or other undefined behaviors
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35512/">CVE-2020-35512</cve>
	<bugzilla href="https://bugzilla.suse.com/1187105">SUSE bug 1187105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189662">SUSE bug 1189662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205052">SUSE bug 1205052</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615791" comment="dbus-1-1.12.2-8.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615792" comment="dbus-1-devel-1.12.2-8.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151536" comment="dbus-1-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624663" comment="dbus-1-devel-32bit-1.12.2-8.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009258222" comment="dbus-1-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624665" comment="dbus-1-devel-doc-1.12.2-8.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009258223" comment="dbus-1-devel-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615793" comment="dbus-1-x11-1.12.2-8.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615794" comment="libdbus-1-3-1.12.2-8.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615795" comment="libdbus-1-3-32bit-1.12.2-8.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35519</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35519" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35519" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35519" ref_url="https://www.suse.com/security/cve/CVE-2020-35519" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1175-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008625.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008624.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1210-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1211-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008759.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0477-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010246.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0532-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZC652CKFCHQCNNU7MZKBTO27OZE22Q5U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0758-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BUQVIATUWQNZFSV6IFJENJSRWJSP2QHF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5. A bounds check failure allows a local attacker with a user account on the system to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35519/">CVE-2020-35519</cve>
	<bugzilla href="https://bugzilla.suse.com/1183696">SUSE bug 1183696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184953">SUSE bug 1184953</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35521</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35521" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35521" ref_url="https://www.suse.com/security/cve/CVE-2020-35521" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010261.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010250.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0480-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/" source="SUSE-SU"/>
    <description>
    A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort, resulting in denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35521/">CVE-2020-35521</cve>
	<bugzilla href="https://bugzilla.suse.com/1182808">SUSE bug 1182808</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200195">SUSE bug 1200195</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665431" comment="libtiff-devel-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666516" comment="libtiff-devel-32bit-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665432" comment="libtiff5-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665439" comment="libtiff5-32bit-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665440" comment="tiff-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35522</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35522" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35522" ref_url="https://www.suse.com/security/cve/CVE-2020-35522" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010261.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010250.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0480-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/" source="SUSE-SU"/>
    <description>
    In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35522/">CVE-2020-35522</cve>
	<bugzilla href="https://bugzilla.suse.com/1182809">SUSE bug 1182809</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200195">SUSE bug 1200195</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665431" comment="libtiff-devel-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666516" comment="libtiff-devel-32bit-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665432" comment="libtiff5-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665439" comment="libtiff5-32bit-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665440" comment="tiff-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35523</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35523" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35523" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35523" ref_url="https://www.suse.com/security/cve/CVE-2020-35523" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010261.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010250.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0480-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/" source="SUSE-SU"/>
    <description>
    An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35523/">CVE-2020-35523</cve>
	<bugzilla href="https://bugzilla.suse.com/1182811">SUSE bug 1182811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200195">SUSE bug 1200195</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665431" comment="libtiff-devel-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666516" comment="libtiff-devel-32bit-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665432" comment="libtiff5-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665439" comment="libtiff5-32bit-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665440" comment="tiff-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35524</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35524" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35524" ref_url="https://www.suse.com/security/cve/CVE-2020-35524" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010261.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010250.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0480-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35524/">CVE-2020-35524</cve>
	<bugzilla href="https://bugzilla.suse.com/1182812">SUSE bug 1182812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200195">SUSE bug 1200195</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665431" comment="libtiff-devel-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666516" comment="libtiff-devel-32bit-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665432" comment="libtiff5-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665439" comment="libtiff5-32bit-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665440" comment="tiff-4.0.9-45.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35538</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35538" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35538" ref_url="https://www.suse.com/security/cve/CVE-2020-35538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3523-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012494.html" source="SUSE-SU"/>
    <description>
    A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-05"/>
	<updated date="2022-10-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35538/">CVE-2020-35538</cve>
	<bugzilla href="https://bugzilla.suse.com/1202915">SUSE bug 1202915</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710252" comment="libjpeg-turbo-1.5.3-150000.32.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152540" comment="libjpeg-turbo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710228" comment="libjpeg62-62.2.0-150000.32.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152541" comment="libjpeg62 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710412" comment="libjpeg62-32bit-62.2.0-150000.32.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166381" comment="libjpeg62-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710229" comment="libjpeg62-devel-62.2.0-150000.32.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152542" comment="libjpeg62-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710413" comment="libjpeg62-devel-32bit-62.2.0-150000.32.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166384" comment="libjpeg62-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710414" comment="libjpeg62-turbo-1.5.3-150000.32.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166386" comment="libjpeg62-turbo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710230" comment="libjpeg8-8.1.2-150000.32.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152543" comment="libjpeg8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710239" comment="libjpeg8-32bit-8.1.2-150000.32.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152544" comment="libjpeg8-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710231" comment="libjpeg8-devel-8.1.2-150000.32.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166390" comment="libjpeg8-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710415" comment="libjpeg8-devel-32bit-8.1.2-150000.32.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166392" comment="libjpeg8-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710232" comment="libturbojpeg0-8.1.2-150000.32.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152545" comment="libturbojpeg0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710416" comment="libturbojpeg0-32bit-8.1.2-150000.32.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166395" comment="libturbojpeg0-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35573</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35573" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35573" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35573" ref_url="https://www.suse.com/security/cve/CVE-2020-35573" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0646-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Z7RVMS6EAM6UL6CEWH7XJZ76RD77LPL6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0669-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RCKOE2BLGX23FISPQ3WVS2WYO4VR5IUX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1642-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NOF2UA3DXYGYPKJVCZWZ5HMXL2PTHSJR/" source="SUSE-SU"/>
    <description>
    srs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service (CPU consumption) via a long timestamp tag in an SRS address.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35573/">CVE-2020-35573</cve>
	<bugzilla href="https://bugzilla.suse.com/1180251">SUSE bug 1180251</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662152" comment="postsrsd-1.11-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009353385" comment="postsrsd is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35730</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35730" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35730" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35730" ref_url="https://www.suse.com/security/cve/CVE-2020-35730" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0931-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BPPHYZD6Y3QJBTGPLX66Y3DJ3KCNEUJQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0942-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5DFRT3CZ2UBV2PGLI4GUZ7AGDCQXVUQR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0943-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5ELZ4EA3I6BCVA2NQEVPSEZ2M3Y5ASM3/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0959-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MQFQAJIVNNLDRXMOUJWPMCCBT4WU5N5O/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0974-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CGT4RWCLEWSTAAYEWMVZRY24ZY53D2Z3/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1014-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XDARRLWABODNP6ABT3DQ34TPYSH3ROH5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10148-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3WUL4HE7A5MLE433XPBQYBUU6265EYNA/" source="SUSE-SU"/>
    <description>
    An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message, with JavaScript in a link reference element that is mishandled by linkref_addindex in rcube_string_replacer.php.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-35730/">CVE-2020-35730</cve>
	<bugzilla href="https://bugzilla.suse.com/1180399">SUSE bug 1180399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009718212" comment="roundcubemail-1.5.3-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152670" comment="roundcubemail is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35738</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35738" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35738" ref_url="https://www.suse.com/security/cve/CVE-2020-35738" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008521.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0153-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EK4DH6BBB2WPBM677O7MFUOO5UBKUW37/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0154-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FD5IPNZ6LGJLORJOQVT3MAHBWF3ORQPT/" source="SUSE-SU"/>
    <description>
    WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35738/">CVE-2020-35738</cve>
	<bugzilla href="https://bugzilla.suse.com/1180414">SUSE bug 1180414</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628918" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172747" comment="libwavpack1 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35964</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35964" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35964" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35964" ref_url="https://www.suse.com/security/cve/CVE-2020-35964" source="SUSE CVE"/>
    <description>
    track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35964/">CVE-2020-35964</cve>
	<bugzilla href="https://bugzilla.suse.com/1180519">SUSE bug 1180519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694837" comment="libavcodec58_134-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695527" comment="libavcodec58_134 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694838" comment="libavdevice58_13-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695528" comment="libavdevice58_13 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694839" comment="libavfilter7_110-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695529" comment="libavfilter7_110 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694840" comment="libavformat58_76-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695530" comment="libavformat58_76 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694841" comment="libavresample4_0-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695531" comment="libavresample4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694842" comment="libavutil56_70-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695532" comment="libavutil56_70 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694843" comment="libpostproc55_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695533" comment="libpostproc55_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694844" comment="libswresample3_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695534" comment="libswresample3_9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694845" comment="libswscale5_9-4.4-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695535" comment="libswscale5_9 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202035965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-35965</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-35965" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35965" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-35965" ref_url="https://www.suse.com/security/cve/CVE-2020-35965" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013405.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3521-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/" source="SUSE-SU"/>
    <description>
    decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35965/">CVE-2020-35965</cve>
	<bugzilla href="https://bugzilla.suse.com/1187852">SUSE bug 1187852</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652760" comment="ffmpeg-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652849" comment="ffmpeg-private-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009625181" comment="ffmpeg-private-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652850" comment="libavcodec-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652744" comment="libavcodec57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652851" comment="libavcodec57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652852" comment="libavdevice-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652761" comment="libavdevice57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652853" comment="libavdevice57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652854" comment="libavfilter-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652762" comment="libavfilter6-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652855" comment="libavfilter6-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652856" comment="libavformat-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652745" comment="libavformat57-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652857" comment="libavformat57-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652757" comment="libavresample-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652758" comment="libavresample3-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652748" comment="libavresample3-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652749" comment="libavutil-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652750" comment="libavutil55-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652858" comment="libavutil55-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652751" comment="libpostproc-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652752" comment="libpostproc54-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652859" comment="libpostproc54-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652753" comment="libswresample-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652754" comment="libswresample2-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652860" comment="libswresample2-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652755" comment="libswscale-devel-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652756" comment="libswscale4-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652861" comment="libswscale4-32bit-3.4.2-11.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36129</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36129" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36129" ref_url="https://www.suse.com/security/cve/CVE-2020-36129" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:4170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009940.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1624-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KMK3AKW3Y2J574OXHVFX4QFELTEHM6MR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:4170-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3CU5I3APCIYTJ5MCNA4TTKLC2PLKDGKU/" source="SUSE-SU"/>
    <description>
    AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36129/">CVE-2020-36129</cve>
	<bugzilla href="https://bugzilla.suse.com/1193356">SUSE bug 1193356</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659324" comment="aom-tools-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261711" comment="aom-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659325" comment="libaom-devel-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261713" comment="libaom-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659326" comment="libaom-devel-doc-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261714" comment="libaom-devel-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659303" comment="libaom0-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261715" comment="libaom0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659327" comment="libaom0-32bit-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632651" comment="libaom0-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36130</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36130" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36130" ref_url="https://www.suse.com/security/cve/CVE-2020-36130" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:4170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009940.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1624-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KMK3AKW3Y2J574OXHVFX4QFELTEHM6MR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:4170-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3CU5I3APCIYTJ5MCNA4TTKLC2PLKDGKU/" source="SUSE-SU"/>
    <description>
    AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36130/">CVE-2020-36130</cve>
	<bugzilla href="https://bugzilla.suse.com/1193369">SUSE bug 1193369</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659324" comment="aom-tools-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261711" comment="aom-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659325" comment="libaom-devel-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261713" comment="libaom-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659326" comment="libaom-devel-doc-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261714" comment="libaom-devel-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659303" comment="libaom0-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261715" comment="libaom0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659327" comment="libaom0-32bit-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632651" comment="libaom0-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36131</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36131" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36131" ref_url="https://www.suse.com/security/cve/CVE-2020-36131" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:4170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009940.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1624-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KMK3AKW3Y2J574OXHVFX4QFELTEHM6MR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:4170-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3CU5I3APCIYTJ5MCNA4TTKLC2PLKDGKU/" source="SUSE-SU"/>
    <description>
    AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36131/">CVE-2020-36131</cve>
	<bugzilla href="https://bugzilla.suse.com/1193365">SUSE bug 1193365</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659324" comment="aom-tools-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261711" comment="aom-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659325" comment="libaom-devel-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261713" comment="libaom-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659326" comment="libaom-devel-doc-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261714" comment="libaom-devel-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659303" comment="libaom0-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261715" comment="libaom0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659327" comment="libaom0-32bit-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632651" comment="libaom0-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36135</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36135" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36135" ref_url="https://www.suse.com/security/cve/CVE-2020-36135" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:4170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009940.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1624-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KMK3AKW3Y2J574OXHVFX4QFELTEHM6MR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:4170-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3CU5I3APCIYTJ5MCNA4TTKLC2PLKDGKU/" source="SUSE-SU"/>
    <description>
    AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36135/">CVE-2020-36135</cve>
	<bugzilla href="https://bugzilla.suse.com/1193366">SUSE bug 1193366</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659324" comment="aom-tools-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261711" comment="aom-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659325" comment="libaom-devel-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261713" comment="libaom-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659326" comment="libaom-devel-doc-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261714" comment="libaom-devel-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659303" comment="libaom0-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261715" comment="libaom0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659327" comment="libaom0-32bit-1.0.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632651" comment="libaom0-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36158</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36158" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36158" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008288.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008296.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0437-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7EJISS2OPKUSJFJ2BG5ZWHA2Z6H3VQB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<bugzilla href="https://bugzilla.suse.com/1180559">SUSE bug 1180559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180562">SUSE bug 1180562</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36193</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36193" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36193" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36193" ref_url="https://www.suse.com/security/cve/CVE-2020-36193" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2926-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009393.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3006-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009434.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1267-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3FVUJPS33WNJWFOH7YMK5YSCLKXVMWLW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2872-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GCXMJ4INSB7EFEHMD7OOE6NXYQU2F77I/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3018-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GXQPYU7Y2O7P5YZ73KTEOHBFQS2G55P3/" source="SUSE-SU"/>
    <description>
    Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-36193/">CVE-2020-36193</cve>
	<bugzilla href="https://bugzilla.suse.com/1189591">SUSE bug 1189591</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632020" comment="php7-pear-1.10.21-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632021" comment="php7-pecl-1.10.21-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632740" comment="php7-pecl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632140" comment="php7-wddx-7.2.5-4.82.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36221</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36221" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36221" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36221" ref_url="https://www.suse.com/security/cve/CVE-2020-36221" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:61-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008515.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14700-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008644.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0408-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/34RGWB6WTBL4BEDA4UXHB5TDLT47DCUY/" source="SUSE-SU"/>
    <description>
    An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36221/">CVE-2020-36221</cve>
	<bugzilla href="https://bugzilla.suse.com/1182420">SUSE bug 1182420</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36222</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36222" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36222" ref_url="https://www.suse.com/security/cve/CVE-2020-36222" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:61-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008515.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14700-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008644.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0408-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/34RGWB6WTBL4BEDA4UXHB5TDLT47DCUY/" source="SUSE-SU"/>
    <description>
    A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36222/">CVE-2020-36222</cve>
	<bugzilla href="https://bugzilla.suse.com/1182419">SUSE bug 1182419</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36223</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36223" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36223" ref_url="https://www.suse.com/security/cve/CVE-2020-36223" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:61-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008515.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14700-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008644.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0408-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/34RGWB6WTBL4BEDA4UXHB5TDLT47DCUY/" source="SUSE-SU"/>
    <description>
    A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36223/">CVE-2020-36223</cve>
	<bugzilla href="https://bugzilla.suse.com/1182418">SUSE bug 1182418</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036224" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36224</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36224" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36224" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36224" ref_url="https://www.suse.com/security/cve/CVE-2020-36224" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:61-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008515.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14700-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008644.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0408-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/34RGWB6WTBL4BEDA4UXHB5TDLT47DCUY/" source="SUSE-SU"/>
    <description>
    A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36224/">CVE-2020-36224</cve>
	<bugzilla href="https://bugzilla.suse.com/1182417">SUSE bug 1182417</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36225</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36225" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36225" ref_url="https://www.suse.com/security/cve/CVE-2020-36225" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:61-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008515.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14700-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008644.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0408-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/34RGWB6WTBL4BEDA4UXHB5TDLT47DCUY/" source="SUSE-SU"/>
    <description>
    A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36225/">CVE-2020-36225</cve>
	<bugzilla href="https://bugzilla.suse.com/1182416">SUSE bug 1182416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36226</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36226" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36226" ref_url="https://www.suse.com/security/cve/CVE-2020-36226" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:61-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008515.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14700-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008644.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0408-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/34RGWB6WTBL4BEDA4UXHB5TDLT47DCUY/" source="SUSE-SU"/>
    <description>
    A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch-&gt;bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36226/">CVE-2020-36226</cve>
	<bugzilla href="https://bugzilla.suse.com/1182415">SUSE bug 1182415</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036227" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36227</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36227" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36227" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36227" ref_url="https://www.suse.com/security/cve/CVE-2020-36227" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:61-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008515.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14700-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008644.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0408-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/34RGWB6WTBL4BEDA4UXHB5TDLT47DCUY/" source="SUSE-SU"/>
    <description>
    A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36227/">CVE-2020-36227</cve>
	<bugzilla href="https://bugzilla.suse.com/1182413">SUSE bug 1182413</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36228</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36228" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36228" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36228" ref_url="https://www.suse.com/security/cve/CVE-2020-36228" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:61-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008515.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14700-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008644.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0408-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/34RGWB6WTBL4BEDA4UXHB5TDLT47DCUY/" source="SUSE-SU"/>
    <description>
    An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36228/">CVE-2020-36228</cve>
	<bugzilla href="https://bugzilla.suse.com/1182412">SUSE bug 1182412</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036229" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36229</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36229" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36229" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36229" ref_url="https://www.suse.com/security/cve/CVE-2020-36229" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:61-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008515.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14700-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008644.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0408-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/34RGWB6WTBL4BEDA4UXHB5TDLT47DCUY/" source="SUSE-SU"/>
    <description>
    A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36229/">CVE-2020-36229</cve>
	<bugzilla href="https://bugzilla.suse.com/1182408">SUSE bug 1182408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182411">SUSE bug 1182411</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036230" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36230</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36230" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36230" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36230" ref_url="https://www.suse.com/security/cve/CVE-2020-36230" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:61-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008515.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14700-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008644.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0408-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/34RGWB6WTBL4BEDA4UXHB5TDLT47DCUY/" source="SUSE-SU"/>
    <description>
    A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36230/">CVE-2020-36230</cve>
	<bugzilla href="https://bugzilla.suse.com/1182408">SUSE bug 1182408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36241</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36241" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36241" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36241" ref_url="https://www.suse.com/security/cve/CVE-2020-36241" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0664-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008403.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008420.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0390-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CYPCMBEG7F5HYZ6RXTSOZ7RTGRUXLCS2/" source="SUSE-SU"/>
    <description>
    autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.9/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-36241/">CVE-2020-36241</cve>
	<bugzilla href="https://bugzilla.suse.com/1181930">SUSE bug 1181930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184169">SUSE bug 1184169</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629130" comment="libgnome-autoar-0-0-0.2.3-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009346924" comment="libgnome-autoar-0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629131" comment="libgnome-autoar-gtk-0-0-0.2.3-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009346925" comment="libgnome-autoar-gtk-0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36242</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36242" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36242" ref_url="https://www.suse.com/security/cve/CVE-2020-36242" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0668-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008408.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008412.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0675-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008429.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0349-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4QQZIOJTSAUNBJZ24KXLCQWD35GCPXJF/" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36242/">CVE-2020-36242</cve>
	<bugzilla href="https://bugzilla.suse.com/1182066">SUSE bug 1182066</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628987" comment="python3-cryptography-2.8-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238251" comment="python3-cryptography is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36310</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36310" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36310" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36310" ref_url="https://www.suse.com/security/cve/CVE-2020-36310" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1211-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1572-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/018906.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0579-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6PH44XSVUZTRLJSGALUUATIQLKQWL4C5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0758-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BUQVIATUWQNZFSV6IFJENJSRWJSP2QHF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel before 5.8. arch/x86/kvm/svm/svm.c allows a set_memory_region_test infinite loop for certain nested page faults, aka CID-e72436bc3a52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36310/">CVE-2020-36310</cve>
	<bugzilla href="https://bugzilla.suse.com/1184512">SUSE bug 1184512</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36311</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36311" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36311" ref_url="https://www.suse.com/security/cve/CVE-2020-36311" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1210-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1211-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1248-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0579-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6PH44XSVUZTRLJSGALUUATIQLKQWL4C5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0758-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BUQVIATUWQNZFSV6IFJENJSRWJSP2QHF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel before 5.9. arch/x86/kvm/svm/sev.c allows attackers to cause a denial of service (soft lockup) by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions), aka CID-7be74942f184.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36311/">CVE-2020-36311</cve>
	<bugzilla href="https://bugzilla.suse.com/1184511">SUSE bug 1184511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695715" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695716" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695717" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695718" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695719" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695720" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695721" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695722" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695723" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695724" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36312</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36312" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36312" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36312" ref_url="https://www.suse.com/security/cve/CVE-2020-36312" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1211-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1572-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/018906.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008777.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1625-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0579-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6PH44XSVUZTRLJSGALUUATIQLKQWL4C5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0758-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BUQVIATUWQNZFSV6IFJENJSRWJSP2QHF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure, aka CID-f65886606c2d.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36312/">CVE-2020-36312</cve>
	<bugzilla href="https://bugzilla.suse.com/1184509">SUSE bug 1184509</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036322" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36322</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36322" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36322" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008759.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1572-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/018906.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008777.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008815.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1724-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/019049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008814.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008816.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1865-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008939.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1870-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0579-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6PH44XSVUZTRLJSGALUUATIQLKQWL4C5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<bugzilla href="https://bugzilla.suse.com/1184211">SUSE bug 1184211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184952">SUSE bug 1184952</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036328" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36328</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36328" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36328" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36328" ref_url="https://www.suse.com/security/cve/CVE-2020-36328" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008936.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1860-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ZIJ3ZK5FGNGJN6E65XZKMQPSQ3RKNVG/" source="SUSE-SU"/>
    <description>
    A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36328/">CVE-2020-36328</cve>
	<bugzilla href="https://bugzilla.suse.com/1185688">SUSE bug 1185688</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504861" comment="libwebp6-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623316" comment="libwebp6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497908" comment="libwebp6-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623317" comment="libwebp6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504862" comment="libwebpdecoder2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623319" comment="libwebpdecoder2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620676" comment="libwebpdecoder2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623320" comment="libwebpdecoder2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504864" comment="libwebpextras0-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623325" comment="libwebpextras0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620682" comment="libwebpextras0-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623326" comment="libwebpextras0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504865" comment="libwebpmux2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623328" comment="libwebpmux2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620685" comment="libwebpmux2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623329" comment="libwebpmux2-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036329" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36329</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36329" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36329" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36329" ref_url="https://www.suse.com/security/cve/CVE-2020-36329" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008936.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1860-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ZIJ3ZK5FGNGJN6E65XZKMQPSQ3RKNVG/" source="SUSE-SU"/>
    <description>
    A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36329/">CVE-2020-36329</cve>
	<bugzilla href="https://bugzilla.suse.com/1185652">SUSE bug 1185652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187486">SUSE bug 1187486</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504861" comment="libwebp6-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623316" comment="libwebp6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497908" comment="libwebp6-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623317" comment="libwebp6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504862" comment="libwebpdecoder2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623319" comment="libwebpdecoder2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620676" comment="libwebpdecoder2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623320" comment="libwebpdecoder2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504864" comment="libwebpextras0-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623325" comment="libwebpextras0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620682" comment="libwebpextras0-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623326" comment="libwebpextras0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504865" comment="libwebpmux2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623328" comment="libwebpmux2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620685" comment="libwebpmux2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623329" comment="libwebpmux2-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036330" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36330</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36330" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36330" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36330" ref_url="https://www.suse.com/security/cve/CVE-2020-36330" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008936.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1860-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ZIJ3ZK5FGNGJN6E65XZKMQPSQ3RKNVG/" source="SUSE-SU"/>
    <description>
    A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36330/">CVE-2020-36330</cve>
	<bugzilla href="https://bugzilla.suse.com/1185691">SUSE bug 1185691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187486">SUSE bug 1187486</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504861" comment="libwebp6-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623316" comment="libwebp6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497908" comment="libwebp6-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623317" comment="libwebp6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504862" comment="libwebpdecoder2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623319" comment="libwebpdecoder2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620676" comment="libwebpdecoder2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623320" comment="libwebpdecoder2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504864" comment="libwebpextras0-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623325" comment="libwebpextras0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620682" comment="libwebpextras0-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623326" comment="libwebpextras0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504865" comment="libwebpmux2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623328" comment="libwebpmux2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620685" comment="libwebpmux2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623329" comment="libwebpmux2-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036331" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36331</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36331" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36331" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36331" ref_url="https://www.suse.com/security/cve/CVE-2020-36331" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008936.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1860-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ZIJ3ZK5FGNGJN6E65XZKMQPSQ3RKNVG/" source="SUSE-SU"/>
    <description>
    A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36331/">CVE-2020-36331</cve>
	<bugzilla href="https://bugzilla.suse.com/1185686">SUSE bug 1185686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187486">SUSE bug 1187486</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504861" comment="libwebp6-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623316" comment="libwebp6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497908" comment="libwebp6-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623317" comment="libwebp6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504862" comment="libwebpdecoder2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623319" comment="libwebpdecoder2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620676" comment="libwebpdecoder2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623320" comment="libwebpdecoder2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504864" comment="libwebpextras0-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623325" comment="libwebpextras0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620682" comment="libwebpextras0-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623326" comment="libwebpextras0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504865" comment="libwebpmux2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623328" comment="libwebpmux2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620685" comment="libwebpmux2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623329" comment="libwebpmux2-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036332" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36332</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36332" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36332" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36332" ref_url="https://www.suse.com/security/cve/CVE-2020-36332" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008936.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1860-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ZIJ3ZK5FGNGJN6E65XZKMQPSQ3RKNVG/" source="SUSE-SU"/>
    <description>
    A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36332/">CVE-2020-36332</cve>
	<bugzilla href="https://bugzilla.suse.com/1185674">SUSE bug 1185674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187486">SUSE bug 1187486</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504861" comment="libwebp6-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623316" comment="libwebp6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497908" comment="libwebp6-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623317" comment="libwebp6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504862" comment="libwebpdecoder2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623319" comment="libwebpdecoder2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620676" comment="libwebpdecoder2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623320" comment="libwebpdecoder2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504864" comment="libwebpextras0-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623325" comment="libwebpextras0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620682" comment="libwebpextras0-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623326" comment="libwebpextras0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009504865" comment="libwebpmux2-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623328" comment="libwebpmux2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620685" comment="libwebpmux2-32bit-0.5.0-3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623329" comment="libwebpmux2-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36385</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36385" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36385" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009784.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2406-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009169.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2422-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2426-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009226.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009230.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009239.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2184-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GJZ4RMNGAPDHTNV6KJGNPSEJH2RUZFKU/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2202-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/T4PWFRJWECGAGZTBIOYHZ6KUMSA6KC43/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2427-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HJIMD6XIKYMKE35TUYXKKYPX4737LEVU/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<bugzilla href="https://bugzilla.suse.com/1187050">SUSE bug 1187050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187052">SUSE bug 1187052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196174">SUSE bug 1196174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196810">SUSE bug 1196810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196914">SUSE bug 1196914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200084">SUSE bug 1200084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201734">SUSE bug 1201734</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621377" comment="cluster-md-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621419" comment="cluster-md-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615914" comment="cluster-md-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621378" comment="cluster-md-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621379" comment="dlm-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621420" comment="dlm-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615915" comment="dlm-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621380" comment="dlm-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621381" comment="gfs2-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621421" comment="gfs2-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615916" comment="gfs2-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621382" comment="gfs2-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615876" comment="kernel-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615877" comment="kernel-64kb-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621383" comment="kernel-64kb-extra-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621384" comment="kernel-64kb-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621385" comment="kernel-64kb-optional-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615909" comment="kernel-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615910" comment="kernel-azure-devel-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621422" comment="kernel-azure-extra-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621423" comment="kernel-azure-livepatch-devel-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621424" comment="kernel-azure-optional-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621386" comment="kernel-debug-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625875" comment="kernel-debug-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621387" comment="kernel-debug-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621388" comment="kernel-debug-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615878" comment="kernel-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615879" comment="kernel-default-base-5.3.18-59.10.1.18.4.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621389" comment="kernel-default-base-rebuild-5.3.18-59.10.1.18.4.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615880" comment="kernel-default-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621390" comment="kernel-default-extra-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621391" comment="kernel-default-livepatch-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621392" comment="kernel-default-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625696" comment="kernel-default-man-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621393" comment="kernel-default-optional-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615881" comment="kernel-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615911" comment="kernel-devel-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615897" comment="kernel-docs-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621394" comment="kernel-docs-html-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621395" comment="kernel-kvmsmall-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625876" comment="kernel-kvmsmall-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621396" comment="kernel-kvmsmall-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621397" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615882" comment="kernel-macros-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615898" comment="kernel-obs-build-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621399" comment="kernel-obs-qa-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615883" comment="kernel-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615899" comment="kernel-preempt-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621400" comment="kernel-preempt-extra-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621401" comment="kernel-preempt-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621402" comment="kernel-preempt-optional-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615900" comment="kernel-source-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615912" comment="kernel-source-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621403" comment="kernel-source-vanilla-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615901" comment="kernel-syms-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615913" comment="kernel-syms-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625877" comment="kernel-vanilla-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625878" comment="kernel-vanilla-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625879" comment="kernel-vanilla-devel-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625880" comment="kernel-vanilla-livepatch-devel-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615884" comment="kernel-zfcpdump-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625881" comment="kernel-zfcpdump-man-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621404" comment="kselftests-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621425" comment="kselftests-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621405" comment="kselftests-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621406" comment="kselftests-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621407" comment="ocfs2-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621426" comment="ocfs2-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615917" comment="ocfs2-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621408" comment="ocfs2-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621409" comment="reiserfs-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621427" comment="reiserfs-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615902" comment="reiserfs-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621410" comment="reiserfs-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36386</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36386" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36386" ref_url="https://www.suse.com/security/cve/CVE-2020-36386" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2406-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2422-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2426-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009279.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2644-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009281.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009280.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2184-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GJZ4RMNGAPDHTNV6KJGNPSEJH2RUZFKU/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2202-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/T4PWFRJWECGAGZTBIOYHZ6KUMSA6KC43/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2427-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HJIMD6XIKYMKE35TUYXKKYPX4737LEVU/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt, aka CID-51c19bf3d5cf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36386/">CVE-2020-36386</cve>
	<bugzilla href="https://bugzilla.suse.com/1187038">SUSE bug 1187038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192868">SUSE bug 1192868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621377" comment="cluster-md-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621419" comment="cluster-md-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615914" comment="cluster-md-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621378" comment="cluster-md-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621379" comment="dlm-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621420" comment="dlm-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615915" comment="dlm-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621380" comment="dlm-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621381" comment="gfs2-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621421" comment="gfs2-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615916" comment="gfs2-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621382" comment="gfs2-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615876" comment="kernel-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615877" comment="kernel-64kb-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621383" comment="kernel-64kb-extra-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621384" comment="kernel-64kb-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621385" comment="kernel-64kb-optional-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615909" comment="kernel-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615910" comment="kernel-azure-devel-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621422" comment="kernel-azure-extra-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621423" comment="kernel-azure-livepatch-devel-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621424" comment="kernel-azure-optional-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621386" comment="kernel-debug-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625875" comment="kernel-debug-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621387" comment="kernel-debug-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621388" comment="kernel-debug-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615878" comment="kernel-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615879" comment="kernel-default-base-5.3.18-59.10.1.18.4.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621389" comment="kernel-default-base-rebuild-5.3.18-59.10.1.18.4.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615880" comment="kernel-default-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621390" comment="kernel-default-extra-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621391" comment="kernel-default-livepatch-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621392" comment="kernel-default-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625696" comment="kernel-default-man-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621393" comment="kernel-default-optional-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615881" comment="kernel-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615911" comment="kernel-devel-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615897" comment="kernel-docs-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621394" comment="kernel-docs-html-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621395" comment="kernel-kvmsmall-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625876" comment="kernel-kvmsmall-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621396" comment="kernel-kvmsmall-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621397" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615882" comment="kernel-macros-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615898" comment="kernel-obs-build-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621399" comment="kernel-obs-qa-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615883" comment="kernel-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615899" comment="kernel-preempt-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621400" comment="kernel-preempt-extra-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621401" comment="kernel-preempt-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621402" comment="kernel-preempt-optional-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615900" comment="kernel-source-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615912" comment="kernel-source-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621403" comment="kernel-source-vanilla-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615901" comment="kernel-syms-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615913" comment="kernel-syms-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625877" comment="kernel-vanilla-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625878" comment="kernel-vanilla-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625879" comment="kernel-vanilla-devel-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625880" comment="kernel-vanilla-livepatch-devel-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615884" comment="kernel-zfcpdump-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625881" comment="kernel-zfcpdump-man-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621404" comment="kselftests-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621425" comment="kselftests-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621405" comment="kselftests-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621406" comment="kselftests-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621407" comment="ocfs2-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621426" comment="ocfs2-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615917" comment="ocfs2-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621408" comment="ocfs2-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621409" comment="reiserfs-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621427" comment="reiserfs-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615902" comment="reiserfs-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621410" comment="reiserfs-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036403" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36403</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36403" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36403" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36403" ref_url="https://www.suse.com/security/cve/CVE-2020-36403" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:1177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BBQ3P4CDK2RZWTSHMKMA7FGIAJRHWW4Q/" source="SUSE-SU"/>
    <description>
    HTSlib through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from vcf_parse and vcf_read).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-04"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36403/">CVE-2020-36403</cve>
	<bugzilla href="https://bugzilla.suse.com/1187917">SUSE bug 1187917</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631525" comment="bgzip-1.10.2-bp153.2.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631553" comment="bgzip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631526" comment="htsfile-1.10.2-bp153.2.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631555" comment="htsfile is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631527" comment="libhts-devel-1.10.2-bp153.2.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631557" comment="libhts-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631528" comment="libhts-devel-64bit-1.10.2-bp153.2.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631562" comment="libhts-devel-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631529" comment="libhts3-1.10.2-bp153.2.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631559" comment="libhts3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631530" comment="libhts3-64bit-1.10.2-bp153.2.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631563" comment="libhts3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631531" comment="tabix-1.10.2-bp153.2.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631561" comment="tabix is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036430" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36430</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36430" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36430" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36430" ref_url="https://www.suse.com/security/cve/CVE-2020-36430" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:1174-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UM3NSAZAHOVXI7OL5NKRPHCXG5LZTLKM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2792-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TQ4DQBQAAUJIVKVW7IIROTEKRYDSFT2S/" source="SUSE-SU"/>
    <description>
    libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong integer data type is used for subtraction.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36430/">CVE-2020-36430</cve>
	<bugzilla href="https://bugzilla.suse.com/1188539">SUSE bug 1188539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628040" comment="libass-devel-0.14.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153843" comment="libass-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628041" comment="libass9-0.14.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177230" comment="libass9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628196" comment="libass9-32bit-0.14.0-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009348105" comment="libass9-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036516" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36516</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36516" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36516" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36516" ref_url="https://www.suse.com/security/cve/CVE-2020-36516" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:2342-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012587.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011976.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2875-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2892-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2892-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3072-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012107.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012222.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-September/025152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012250.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3288-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012386.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3450-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013342.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-24"/>
	<updated date="2022-12-24"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36516/">CVE-2020-36516</cve>
	<bugzilla href="https://bugzilla.suse.com/1196616">SUSE bug 1196616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196867">SUSE bug 1196867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204092">SUSE bug 1204092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204183">SUSE bug 1204183</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706405" comment="cluster-md-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717663" comment="cluster-md-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706096" comment="cluster-md-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706406" comment="cluster-md-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706407" comment="dlm-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717664" comment="dlm-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706097" comment="dlm-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706408" comment="dlm-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706409" comment="dtb-al-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706410" comment="dtb-allwinner-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706411" comment="dtb-altera-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706412" comment="dtb-amd-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706413" comment="dtb-amlogic-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706414" comment="dtb-apm-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706415" comment="dtb-arm-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706416" comment="dtb-broadcom-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706417" comment="dtb-cavium-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706418" comment="dtb-exynos-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706419" comment="dtb-freescale-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706420" comment="dtb-hisilicon-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706421" comment="dtb-lg-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706422" comment="dtb-marvell-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706423" comment="dtb-mediatek-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706424" comment="dtb-nvidia-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706425" comment="dtb-qcom-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706426" comment="dtb-renesas-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706427" comment="dtb-rockchip-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706428" comment="dtb-socionext-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706429" comment="dtb-sprd-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706430" comment="dtb-xilinx-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706431" comment="dtb-zte-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706432" comment="gfs2-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717665" comment="gfs2-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706098" comment="gfs2-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706433" comment="gfs2-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705841" comment="kernel-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705842" comment="kernel-64kb-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706434" comment="kernel-64kb-extra-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706435" comment="kernel-64kb-livepatch-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706436" comment="kernel-64kb-optional-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717649" comment="kernel-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717650" comment="kernel-azure-devel-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717666" comment="kernel-azure-extra-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717667" comment="kernel-azure-livepatch-devel-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717668" comment="kernel-azure-optional-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706437" comment="kernel-debug-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711138" comment="kernel-debug-base-4.12.14-150100.197.123.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706438" comment="kernel-debug-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706439" comment="kernel-debug-livepatch-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705843" comment="kernel-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705844" comment="kernel-default-base-5.3.18-150300.59.90.1.150300.18.52.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706440" comment="kernel-default-base-rebuild-5.3.18-150300.59.90.1.150300.18.52.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705845" comment="kernel-default-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706441" comment="kernel-default-extra-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706442" comment="kernel-default-livepatch-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706443" comment="kernel-default-livepatch-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009710986" comment="kernel-default-man-4.12.14-150100.197.123.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706444" comment="kernel-default-optional-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705846" comment="kernel-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717651" comment="kernel-devel-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705853" comment="kernel-docs-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706445" comment="kernel-docs-html-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706446" comment="kernel-kvmsmall-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711139" comment="kernel-kvmsmall-base-4.12.14-150100.197.123.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706447" comment="kernel-kvmsmall-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706448" comment="kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705847" comment="kernel-macros-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705854" comment="kernel-obs-build-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706449" comment="kernel-obs-qa-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705848" comment="kernel-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705855" comment="kernel-preempt-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706450" comment="kernel-preempt-extra-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706451" comment="kernel-preempt-livepatch-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706452" comment="kernel-preempt-optional-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705856" comment="kernel-source-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717652" comment="kernel-source-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706453" comment="kernel-source-vanilla-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705857" comment="kernel-syms-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717653" comment="kernel-syms-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711140" comment="kernel-vanilla-4.12.14-150100.197.123.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711141" comment="kernel-vanilla-base-4.12.14-150100.197.123.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711142" comment="kernel-vanilla-devel-4.12.14-150100.197.123.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711143" comment="kernel-vanilla-livepatch-devel-4.12.14-150100.197.123.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705849" comment="kernel-zfcpdump-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009711144" comment="kernel-zfcpdump-man-4.12.14-150100.197.123.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706454" comment="kselftests-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717669" comment="kselftests-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706455" comment="kselftests-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706456" comment="kselftests-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706457" comment="ocfs2-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717670" comment="ocfs2-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706099" comment="ocfs2-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706458" comment="ocfs2-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706459" comment="reiserfs-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717671" comment="reiserfs-kmp-azure-5.3.18-150300.38.80.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705858" comment="reiserfs-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706460" comment="reiserfs-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36518</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36518" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36518" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36518" ref_url="https://www.suse.com/security/cve/CVE-2020-36518" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011022.html" source="SUSE-SU"/>
    <description>
    jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36518/">CVE-2020-36518</cve>
	<bugzilla href="https://bugzilla.suse.com/1197132">SUSE bug 1197132</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679451" comment="jackson-annotations-2.13.0-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683869" comment="jackson-annotations is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679452" comment="jackson-annotations-javadoc-2.13.0-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683870" comment="jackson-annotations-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679580" comment="jackson-bom-2.13.0-150200.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683871" comment="jackson-bom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679453" comment="jackson-core-2.13.0-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683872" comment="jackson-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679454" comment="jackson-core-javadoc-2.13.0-150200.3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683873" comment="jackson-core-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679455" comment="jackson-databind-2.13.0-150200.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342652" comment="jackson-databind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679456" comment="jackson-databind-javadoc-2.13.0-150200.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342653" comment="jackson-databind-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680193" comment="jackson-dataformat-cbor-2.13.0-150200.3.3.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683874" comment="jackson-dataformat-cbor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680705" comment="jackson-dataformat-smile-2.13.0-150200.3.3.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683875" comment="jackson-dataformat-smile is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680706" comment="jackson-dataformats-binary-2.13.0-150200.3.3.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683876" comment="jackson-dataformats-binary is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680707" comment="jackson-dataformats-binary-javadoc-2.13.0-150200.3.3.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009683877" comment="jackson-dataformats-binary-javadoc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036557" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36557</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36557" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36557" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36557" ref_url="https://www.suse.com/security/cve/CVE-2020-36557" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:1081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2720-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011942.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011976.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2875-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2892-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2892-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013003.html" source="SUSE-SU"/>
    <description>
    A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-13"/>
	<updated date="2022-11-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36557/">CVE-2020-36557</cve>
	<bugzilla href="https://bugzilla.suse.com/1201429">SUSE bug 1201429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201742">SUSE bug 1201742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202874">SUSE bug 1202874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205313">SUSE bug 1205313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706405" comment="cluster-md-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705805" comment="cluster-md-kmp-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706096" comment="cluster-md-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706406" comment="cluster-md-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706407" comment="dlm-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705806" comment="dlm-kmp-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706097" comment="dlm-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706408" comment="dlm-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706409" comment="dtb-al-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706410" comment="dtb-allwinner-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706411" comment="dtb-altera-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706412" comment="dtb-amd-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706413" comment="dtb-amlogic-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706414" comment="dtb-apm-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706415" comment="dtb-arm-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706416" comment="dtb-broadcom-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706417" comment="dtb-cavium-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706418" comment="dtb-exynos-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706419" comment="dtb-freescale-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706420" comment="dtb-hisilicon-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706421" comment="dtb-lg-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706422" comment="dtb-marvell-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706423" comment="dtb-mediatek-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706424" comment="dtb-nvidia-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706425" comment="dtb-qcom-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706426" comment="dtb-renesas-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706427" comment="dtb-rockchip-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706428" comment="dtb-socionext-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706429" comment="dtb-sprd-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706430" comment="dtb-xilinx-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706431" comment="dtb-zte-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706432" comment="gfs2-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705807" comment="gfs2-kmp-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706098" comment="gfs2-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706433" comment="gfs2-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705841" comment="kernel-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705842" comment="kernel-64kb-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706434" comment="kernel-64kb-extra-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706435" comment="kernel-64kb-livepatch-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706436" comment="kernel-64kb-optional-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705633" comment="kernel-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705634" comment="kernel-azure-devel-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705808" comment="kernel-azure-extra-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705809" comment="kernel-azure-livepatch-devel-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705810" comment="kernel-azure-optional-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706437" comment="kernel-debug-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704482" comment="kernel-debug-base-4.12.14-150100.197.120.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706438" comment="kernel-debug-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706439" comment="kernel-debug-livepatch-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705843" comment="kernel-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705844" comment="kernel-default-base-5.3.18-150300.59.90.1.150300.18.52.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706440" comment="kernel-default-base-rebuild-5.3.18-150300.59.90.1.150300.18.52.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705845" comment="kernel-default-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706441" comment="kernel-default-extra-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706442" comment="kernel-default-livepatch-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706443" comment="kernel-default-livepatch-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704433" comment="kernel-default-man-4.12.14-150100.197.120.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706444" comment="kernel-default-optional-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705846" comment="kernel-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705635" comment="kernel-devel-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705853" comment="kernel-docs-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706445" comment="kernel-docs-html-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706446" comment="kernel-kvmsmall-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704483" comment="kernel-kvmsmall-base-4.12.14-150100.197.120.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706447" comment="kernel-kvmsmall-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706448" comment="kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705847" comment="kernel-macros-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705854" comment="kernel-obs-build-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706449" comment="kernel-obs-qa-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705848" comment="kernel-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705855" comment="kernel-preempt-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706450" comment="kernel-preempt-extra-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706451" comment="kernel-preempt-livepatch-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706452" comment="kernel-preempt-optional-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705856" comment="kernel-source-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705636" comment="kernel-source-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706453" comment="kernel-source-vanilla-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705857" comment="kernel-syms-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705637" comment="kernel-syms-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704484" comment="kernel-vanilla-4.12.14-150100.197.120.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704485" comment="kernel-vanilla-base-4.12.14-150100.197.120.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704486" comment="kernel-vanilla-devel-4.12.14-150100.197.120.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704487" comment="kernel-vanilla-livepatch-devel-4.12.14-150100.197.120.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705849" comment="kernel-zfcpdump-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704488" comment="kernel-zfcpdump-man-4.12.14-150100.197.120.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706454" comment="kselftests-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705811" comment="kselftests-kmp-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706455" comment="kselftests-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706456" comment="kselftests-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706457" comment="ocfs2-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705812" comment="ocfs2-kmp-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706099" comment="ocfs2-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706458" comment="ocfs2-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706459" comment="reiserfs-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705813" comment="reiserfs-kmp-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705858" comment="reiserfs-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706460" comment="reiserfs-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36558</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36558" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36558" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36558" ref_url="https://www.suse.com/security/cve/CVE-2020-36558" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:1081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2720-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011942.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011976.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2875-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2892-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2892-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013003.html" source="SUSE-SU"/>
    <description>
    A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-13"/>
	<updated date="2022-11-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36558/">CVE-2020-36558</cve>
	<bugzilla href="https://bugzilla.suse.com/1200910">SUSE bug 1200910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201752">SUSE bug 1201752</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205313">SUSE bug 1205313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706405" comment="cluster-md-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705805" comment="cluster-md-kmp-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706096" comment="cluster-md-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706406" comment="cluster-md-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706407" comment="dlm-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705806" comment="dlm-kmp-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706097" comment="dlm-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706408" comment="dlm-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706409" comment="dtb-al-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706410" comment="dtb-allwinner-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706411" comment="dtb-altera-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706412" comment="dtb-amd-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706413" comment="dtb-amlogic-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706414" comment="dtb-apm-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706415" comment="dtb-arm-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706416" comment="dtb-broadcom-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706417" comment="dtb-cavium-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706418" comment="dtb-exynos-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706419" comment="dtb-freescale-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706420" comment="dtb-hisilicon-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706421" comment="dtb-lg-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706422" comment="dtb-marvell-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706423" comment="dtb-mediatek-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706424" comment="dtb-nvidia-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706425" comment="dtb-qcom-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706426" comment="dtb-renesas-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706427" comment="dtb-rockchip-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706428" comment="dtb-socionext-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706429" comment="dtb-sprd-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706430" comment="dtb-xilinx-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706431" comment="dtb-zte-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706432" comment="gfs2-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705807" comment="gfs2-kmp-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706098" comment="gfs2-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706433" comment="gfs2-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705841" comment="kernel-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705842" comment="kernel-64kb-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706434" comment="kernel-64kb-extra-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706435" comment="kernel-64kb-livepatch-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706436" comment="kernel-64kb-optional-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705633" comment="kernel-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705634" comment="kernel-azure-devel-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705808" comment="kernel-azure-extra-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705809" comment="kernel-azure-livepatch-devel-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705810" comment="kernel-azure-optional-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706437" comment="kernel-debug-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704482" comment="kernel-debug-base-4.12.14-150100.197.120.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706438" comment="kernel-debug-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706439" comment="kernel-debug-livepatch-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705843" comment="kernel-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705844" comment="kernel-default-base-5.3.18-150300.59.90.1.150300.18.52.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706440" comment="kernel-default-base-rebuild-5.3.18-150300.59.90.1.150300.18.52.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705845" comment="kernel-default-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706441" comment="kernel-default-extra-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706442" comment="kernel-default-livepatch-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706443" comment="kernel-default-livepatch-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704433" comment="kernel-default-man-4.12.14-150100.197.120.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706444" comment="kernel-default-optional-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705846" comment="kernel-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705635" comment="kernel-devel-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705853" comment="kernel-docs-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706445" comment="kernel-docs-html-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706446" comment="kernel-kvmsmall-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704483" comment="kernel-kvmsmall-base-4.12.14-150100.197.120.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706447" comment="kernel-kvmsmall-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706448" comment="kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705847" comment="kernel-macros-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705854" comment="kernel-obs-build-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706449" comment="kernel-obs-qa-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705848" comment="kernel-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705855" comment="kernel-preempt-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706450" comment="kernel-preempt-extra-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706451" comment="kernel-preempt-livepatch-devel-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706452" comment="kernel-preempt-optional-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705856" comment="kernel-source-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705636" comment="kernel-source-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706453" comment="kernel-source-vanilla-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705857" comment="kernel-syms-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705637" comment="kernel-syms-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704484" comment="kernel-vanilla-4.12.14-150100.197.120.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704485" comment="kernel-vanilla-base-4.12.14-150100.197.120.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704486" comment="kernel-vanilla-devel-4.12.14-150100.197.120.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704487" comment="kernel-vanilla-livepatch-devel-4.12.14-150100.197.120.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705849" comment="kernel-zfcpdump-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009704488" comment="kernel-zfcpdump-man-4.12.14-150100.197.120.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706454" comment="kselftests-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705811" comment="kselftests-kmp-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706455" comment="kselftests-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706456" comment="kselftests-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706457" comment="ocfs2-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705812" comment="ocfs2-kmp-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706099" comment="ocfs2-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706458" comment="ocfs2-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706459" comment="reiserfs-kmp-64kb-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705813" comment="reiserfs-kmp-azure-5.3.18-150300.38.75.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009705858" comment="reiserfs-kmp-default-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706460" comment="reiserfs-kmp-preempt-5.3.18-150300.59.90.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202036619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-36619</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-36619" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36619" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-36619" ref_url="https://www.suse.com/security/cve/CVE-2020-36619" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2022:10253-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ACOFWRSAMX42Q5JHGBJ6MQJY7FRLPUHJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2023:0004-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L32DS6DZG7UVWWLTPMQBMKONSINMACOF/" source="SUSE-SU"/>
    <description>
    A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function add_ch of the file demod_flex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is e5a51c508ef952e81a6da25b43034dd1ed023c07. It is recommended to upgrade the affected component. The identifier VDB-216269 was assigned to this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-01-04"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36619/">CVE-2020-36619</cve>
	<bugzilla href="https://bugzilla.suse.com/1206542">SUSE bug 1206542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730948" comment="multimon-ng-1.2.0-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009730350" comment="multimon-ng is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20203702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-3702</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-3702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3702" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-3702" ref_url="https://www.suse.com/security/cve/CVE-2020-3702" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:37-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:80-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009654.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009674.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009689.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:750-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009690.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3389-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-October/020461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3447-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3929-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/020993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3969-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009872.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0254-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010155.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0257-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0295-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010184.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1357-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SS5B6JL55TTUNHHOGTFHK5JQ6EZOF7ZV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1365-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JSK2K2OLYKIFCAMBX4QB7AGV6SKS3BTM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3338-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H64LCXMISTZ7YB7R4ABO2Y73X23DJFXU/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3387-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MHXVHXC6JGHDS7W6EJQF3JKAPVYH3ES5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3447-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IAN74FTXJ7PFHCBV6YMLTPNW7VFYCPFV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3876-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JOIHHN3KQX7O34NG25NJOF7PFEZF2TVP/" source="SUSE-SU"/>
    <description>
    u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &amp; Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3702/">CVE-2020-3702</cve>
	<bugzilla href="https://bugzilla.suse.com/1191193">SUSE bug 1191193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191529">SUSE bug 1191529</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651963" comment="cluster-md-kmp-64kb-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651954" comment="cluster-md-kmp-azure-5.3.18-38.25.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651715" comment="cluster-md-kmp-default-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651964" comment="cluster-md-kmp-preempt-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651965" comment="dlm-kmp-64kb-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651955" comment="dlm-kmp-azure-5.3.18-38.25.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651716" comment="dlm-kmp-default-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651966" comment="dlm-kmp-preempt-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651967" comment="dtb-al-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651968" comment="dtb-allwinner-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651969" comment="dtb-altera-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651970" comment="dtb-amd-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651971" comment="dtb-amlogic-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651972" comment="dtb-apm-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651973" comment="dtb-arm-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651974" comment="dtb-broadcom-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651975" comment="dtb-cavium-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651976" comment="dtb-exynos-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651977" comment="dtb-freescale-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651978" comment="dtb-hisilicon-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651979" comment="dtb-lg-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651980" comment="dtb-marvell-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651981" comment="dtb-mediatek-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651982" comment="dtb-nvidia-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651983" comment="dtb-qcom-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651984" comment="dtb-renesas-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651985" comment="dtb-rockchip-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651986" comment="dtb-socionext-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651987" comment="dtb-sprd-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651988" comment="dtb-xilinx-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651989" comment="dtb-zte-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651990" comment="gfs2-kmp-64kb-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651956" comment="gfs2-kmp-azure-5.3.18-38.25.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651717" comment="gfs2-kmp-default-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651991" comment="gfs2-kmp-preempt-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651628" comment="kernel-64kb-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651629" comment="kernel-64kb-devel-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651992" comment="kernel-64kb-extra-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651993" comment="kernel-64kb-livepatch-devel-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651994" comment="kernel-64kb-optional-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651675" comment="kernel-azure-5.3.18-38.25.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651676" comment="kernel-azure-devel-5.3.18-38.25.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651957" comment="kernel-azure-extra-5.3.18-38.25.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651958" comment="kernel-azure-livepatch-devel-5.3.18-38.25.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651959" comment="kernel-azure-optional-5.3.18-38.25.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651995" comment="kernel-debug-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658245" comment="kernel-debug-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651996" comment="kernel-debug-devel-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651997" comment="kernel-debug-livepatch-devel-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651630" comment="kernel-default-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651631" comment="kernel-default-base-5.3.18-59.27.1.18.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651998" comment="kernel-default-base-rebuild-5.3.18-59.27.1.18.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651632" comment="kernel-default-devel-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651999" comment="kernel-default-extra-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652000" comment="kernel-default-livepatch-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652001" comment="kernel-default-livepatch-devel-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658155" comment="kernel-default-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652002" comment="kernel-default-optional-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651633" comment="kernel-devel-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651677" comment="kernel-devel-azure-5.3.18-38.25.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651660" comment="kernel-docs-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652003" comment="kernel-docs-html-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652004" comment="kernel-kvmsmall-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658246" comment="kernel-kvmsmall-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652005" comment="kernel-kvmsmall-devel-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652006" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651634" comment="kernel-macros-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651661" comment="kernel-obs-build-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652007" comment="kernel-obs-qa-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651635" comment="kernel-preempt-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651662" comment="kernel-preempt-devel-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652008" comment="kernel-preempt-extra-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652009" comment="kernel-preempt-livepatch-devel-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652010" comment="kernel-preempt-optional-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651663" comment="kernel-source-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651678" comment="kernel-source-azure-5.3.18-38.25.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652011" comment="kernel-source-vanilla-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651664" comment="kernel-syms-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651679" comment="kernel-syms-azure-5.3.18-38.25.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658247" comment="kernel-vanilla-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658248" comment="kernel-vanilla-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658249" comment="kernel-vanilla-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658250" comment="kernel-vanilla-livepatch-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651636" comment="kernel-zfcpdump-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658251" comment="kernel-zfcpdump-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652107" comment="kmod-compat-25-6.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009652586" comment="kmod-compat is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652012" comment="kselftests-kmp-64kb-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651960" comment="kselftests-kmp-azure-5.3.18-38.25.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652013" comment="kselftests-kmp-default-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652014" comment="kselftests-kmp-preempt-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652015" comment="ocfs2-kmp-64kb-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651961" comment="ocfs2-kmp-azure-5.3.18-38.25.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651718" comment="ocfs2-kmp-default-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652016" comment="ocfs2-kmp-preempt-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652017" comment="reiserfs-kmp-64kb-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651962" comment="reiserfs-kmp-azure-5.3.18-38.25.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009651665" comment="reiserfs-kmp-default-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009652018" comment="reiserfs-kmp-preempt-5.3.18-59.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20203862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-3862</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-3862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3862" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-3862" ref_url="https://www.suse.com/security/cve/CVE-2020-3862" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html" source="SUSE-SU"/>
    <description>
    A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. A malicious website may be able to cause a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-3862/">CVE-2020-3862</cve>
	<bugzilla href="https://bugzilla.suse.com/1163809">SUSE bug 1163809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20203864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-3864</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-3864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3864" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-3864" ref_url="https://www.suse.com/security/cve/CVE-2020-3864" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-3864/">CVE-2020-3864</cve>
	<bugzilla href="https://bugzilla.suse.com/1163809">SUSE bug 1163809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20203865" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-3865</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-3865" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3865" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-3865" ref_url="https://www.suse.com/security/cve/CVE-2020-3865" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3865/">CVE-2020-3865</cve>
	<bugzilla href="https://bugzilla.suse.com/1163809">SUSE bug 1163809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20203867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-3867</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-3867" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3867" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-3867" ref_url="https://www.suse.com/security/cve/CVE-2020-3867" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to universal cross site scripting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-3867/">CVE-2020-3867</cve>
	<bugzilla href="https://bugzilla.suse.com/1163809">SUSE bug 1163809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20203868" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-3868</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-3868" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3868" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-3868" ref_url="https://www.suse.com/security/cve/CVE-2020-3868" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3868/">CVE-2020-3868</cve>
	<bugzilla href="https://bugzilla.suse.com/1163809">SUSE bug 1163809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20203885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-3885</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-3885" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3885" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-3885" ref_url="https://www.suse.com/security/cve/CVE-2020-3885" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A file URL may be incorrectly processed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-3885/">CVE-2020-3885</cve>
	<bugzilla href="https://bugzilla.suse.com/1170643">SUSE bug 1170643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20203894" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-3894</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-3894" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3894" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-3894" ref_url="https://www.suse.com/security/cve/CVE-2020-3894" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
    <description>
    A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. An application may be able to read restricted memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3894/">CVE-2020-3894</cve>
	<bugzilla href="https://bugzilla.suse.com/1170643">SUSE bug 1170643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20203895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-3895</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-3895" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3895" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-3895" ref_url="https://www.suse.com/security/cve/CVE-2020-3895" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3895/">CVE-2020-3895</cve>
	<bugzilla href="https://bugzilla.suse.com/1170643">SUSE bug 1170643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20203897" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-3897</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-3897" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3897" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-3897" ref_url="https://www.suse.com/security/cve/CVE-2020-3897" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
    <description>
    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3897/">CVE-2020-3897</cve>
	<bugzilla href="https://bugzilla.suse.com/1170643">SUSE bug 1170643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20203898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-3898</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-3898" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3898" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-3898" ref_url="https://www.suse.com/security/cve/CVE-2020-3898" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1045-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006728.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14341-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006729.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0555-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00040.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3898/">CVE-2020-3898</cve>
	<bugzilla href="https://bugzilla.suse.com/1168422">SUSE bug 1168422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170671">SUSE bug 1170671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628382" comment="cups-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628383" comment="cups-client-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628384" comment="cups-config-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177129" comment="cups-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628386" comment="libcups2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177130" comment="libcups2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628387" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231805" comment="libcups2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628388" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177131" comment="libcupscgi1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628389" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177132" comment="libcupsimage2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628390" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177133" comment="libcupsmime1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628391" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177134" comment="libcupsppdc1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20203899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-3899</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-3899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3899" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-3899" ref_url="https://www.suse.com/security/cve/CVE-2020-3899" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006786.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006800.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0646-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00015.html" source="SUSE-SU"/>
    <description>
    A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3899/">CVE-2020-3899</cve>
	<bugzilla href="https://bugzilla.suse.com/1170643">SUSE bug 1170643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20203900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-3900</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-3900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3900" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-3900" ref_url="https://www.suse.com/security/cve/CVE-2020-3900" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3900/">CVE-2020-3900</cve>
	<bugzilla href="https://bugzilla.suse.com/1170643">SUSE bug 1170643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20203901" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-3901</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-3901" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3901" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-3901" ref_url="https://www.suse.com/security/cve/CVE-2020-3901" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
    <description>
    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3901/">CVE-2020-3901</cve>
	<bugzilla href="https://bugzilla.suse.com/1170643">SUSE bug 1170643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20203902" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-3902</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-3902" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3902" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-3902" ref_url="https://www.suse.com/security/cve/CVE-2020-3902" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to a cross site scripting attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-3902/">CVE-2020-3902</cve>
	<bugzilla href="https://bugzilla.suse.com/1170643">SUSE bug 1170643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20204030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-4030</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-4030" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-4030" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-4030" ref_url="https://www.suse.com/security/cve/CVE-2020-4030" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-4030/">CVE-2020-4030</cve>
	<bugzilla href="https://bugzilla.suse.com/1173247">SUSE bug 1173247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20204031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-4031</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-4031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-4031" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-4031" ref_url="https://www.suse.com/security/cve/CVE-2020-4031" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affected. This is fixed in version 2.1.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-4031/">CVE-2020-4031</cve>
	<bugzilla href="https://bugzilla.suse.com/1173247">SUSE bug 1173247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20204032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-4032</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-4032" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-4032" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-4032" ref_url="https://www.suse.com/security/cve/CVE-2020-4032" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-4032/">CVE-2020-4032</cve>
	<bugzilla href="https://bugzilla.suse.com/1173247">SUSE bug 1173247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20204033" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-4033</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-4033" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-4033" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-4033" ref_url="https://www.suse.com/security/cve/CVE-2020-4033" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html" source="SUSE-SU"/>
    <description>
    In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth &lt; 32 are affected. This is fixed in version 2.1.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-4033/">CVE-2020-4033</cve>
	<bugzilla href="https://bugzilla.suse.com/1173247">SUSE bug 1173247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694735" comment="freerdp-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694736" comment="libfreerdp2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694737" comment="libwinpr2-2.1.2-bp153.1.35 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177198" comment="libwinpr2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20204788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-4788</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-4788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-4788" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-4788" ref_url="https://www.suse.com/security/cve/CVE-2020-4788" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007937.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007978.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14630-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009856.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2161-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ICEKZTGIQ6MSKDFOTIOJ2RLWAWJFPSYA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2193-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4YRSQJNKLIOJJTD3P2UKMHRFMCIG3JDN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2260-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZYES3O2NEKKQXQ3R5CZOH5YCWJ3TJSKH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7EJISS2OPKUSJFJ2BG5ZWHA2Z6H3VQB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3876-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JOIHHN3KQX7O34NG25NJOF7PFEZF2TVP/" source="SUSE-SU"/>
    <description>
    IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-4788/">CVE-2020-4788</cve>
	<bugzilla href="https://bugzilla.suse.com/1177666">SUSE bug 1177666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181158">SUSE bug 1181158</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658245" comment="kernel-debug-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658155" comment="kernel-default-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658246" comment="kernel-kvmsmall-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658247" comment="kernel-vanilla-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658248" comment="kernel-vanilla-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658249" comment="kernel-vanilla-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658250" comment="kernel-vanilla-livepatch-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658251" comment="kernel-zfcpdump-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20205291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-5291</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-5291" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5291" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-5291" ref_url="https://www.suse.com/security/cve/CVE-2020-5291" source="SUSE CVE"/>
    <description>
    Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the setuid process keep running as root while being traceable. This can in turn be used to gain root permissions. Note that this only affects the combination of bubblewrap in setuid mode (which is typically used when unprivileged user namespaces are not supported) and the support of unprivileged user namespaces. Known to be affected are: * Debian testing/unstable, if unprivileged user namespaces enabled (not default) * Debian buster-backports, if unprivileged user namespaces enabled (not default) * Arch if using `linux-hardened`, if unprivileged user namespaces enabled (not default) * Centos 7 flatpak COPR, if unprivileged user namespaces enabled (not default) This has been fixed in the 0.4.1 release, and all affected users should update.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-5291/">CVE-2020-5291</cve>
	<bugzilla href="https://bugzilla.suse.com/1168291">SUSE bug 1168291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009481773" comment="bubblewrap-0.4.1-1.16 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177243" comment="bubblewrap is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6377</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6377" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6377" ref_url="https://www.suse.com/security/cve/CVE-2020-6377" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0004-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0006-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0009-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00023.html" source="SUSE-SU"/>
    <description>
    Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6377/">CVE-2020-6377</cve>
	<bugzilla href="https://bugzilla.suse.com/1160337">SUSE bug 1160337</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6378</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6378" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6378" ref_url="https://www.suse.com/security/cve/CVE-2020-6378" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00042.html" source="SUSE-SU"/>
    <description>
    Use after free in speech in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6378/">CVE-2020-6378</cve>
	<bugzilla href="https://bugzilla.suse.com/1161252">SUSE bug 1161252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6379</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6379" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6379" ref_url="https://www.suse.com/security/cve/CVE-2020-6379" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00042.html" source="SUSE-SU"/>
    <description>
    Use after free in V8 in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6379/">CVE-2020-6379</cve>
	<bugzilla href="https://bugzilla.suse.com/1161252">SUSE bug 1161252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6380</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6380" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6380" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6380" ref_url="https://www.suse.com/security/cve/CVE-2020-6380" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00042.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6380/">CVE-2020-6380</cve>
	<bugzilla href="https://bugzilla.suse.com/1161252">SUSE bug 1161252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6381</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6381" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6381" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6381" ref_url="https://www.suse.com/security/cve/CVE-2020-6381" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6381/">CVE-2020-6381</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6382</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6382" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6382" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6382" ref_url="https://www.suse.com/security/cve/CVE-2020-6382" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6382/">CVE-2020-6382</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6385</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6385" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6385" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6385" ref_url="https://www.suse.com/security/cve/CVE-2020-6385" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass site isolation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6385/">CVE-2020-6385</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6387</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6387" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6387" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6387" ref_url="https://www.suse.com/security/cve/CVE-2020-6387" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6387/">CVE-2020-6387</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6388</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6388" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6388" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6388" ref_url="https://www.suse.com/security/cve/CVE-2020-6388" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6388/">CVE-2020-6388</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6389</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6389" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6389" ref_url="https://www.suse.com/security/cve/CVE-2020-6389" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6389/">CVE-2020-6389</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6390</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6390" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6390" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6390" ref_url="https://www.suse.com/security/cve/CVE-2020-6390" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6390/">CVE-2020-6390</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6391</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6391" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6391" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6391" ref_url="https://www.suse.com/security/cve/CVE-2020-6391" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6391/">CVE-2020-6391</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6392</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6392" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6392" ref_url="https://www.suse.com/security/cve/CVE-2020-6392" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6392/">CVE-2020-6392</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6393</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6393" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6393" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6393" ref_url="https://www.suse.com/security/cve/CVE-2020-6393" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6393/">CVE-2020-6393</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206394" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6394</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6394" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6394" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6394" ref_url="https://www.suse.com/security/cve/CVE-2020-6394" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6394/">CVE-2020-6394</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6395</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6395" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6395" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6395" ref_url="https://www.suse.com/security/cve/CVE-2020-6395" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6395/">CVE-2020-6395</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6396</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6396" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6396" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6396" ref_url="https://www.suse.com/security/cve/CVE-2020-6396" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6396/">CVE-2020-6396</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206397" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6397</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6397" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6397" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6397" ref_url="https://www.suse.com/security/cve/CVE-2020-6397" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6397/">CVE-2020-6397</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206398" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6398</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6398" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6398" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6398" ref_url="https://www.suse.com/security/cve/CVE-2020-6398" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6398/">CVE-2020-6398</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6399</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6399" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6399" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6399" ref_url="https://www.suse.com/security/cve/CVE-2020-6399" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6399/">CVE-2020-6399</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206400" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6400</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6400" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6400" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6400" ref_url="https://www.suse.com/security/cve/CVE-2020-6400" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6400/">CVE-2020-6400</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6401</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6401" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6401" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6401" ref_url="https://www.suse.com/security/cve/CVE-2020-6401" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6401/">CVE-2020-6401</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6402</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6402" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6402" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6402" ref_url="https://www.suse.com/security/cve/CVE-2020-6402" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6402/">CVE-2020-6402</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206403" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6403</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6403" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6403" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6403" ref_url="https://www.suse.com/security/cve/CVE-2020-6403" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6403/">CVE-2020-6403</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206404" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6404</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6404" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6404" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6404" ref_url="https://www.suse.com/security/cve/CVE-2020-6404" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6404/">CVE-2020-6404</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6405</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6405" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6405" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6405" ref_url="https://www.suse.com/security/cve/CVE-2020-6405" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Out of bounds read in SQLite in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6405/">CVE-2020-6405</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206406" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6406</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6406" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6406" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6406" ref_url="https://www.suse.com/security/cve/CVE-2020-6406" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6406/">CVE-2020-6406</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6407</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6407" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6407" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6407" ref_url="https://www.suse.com/security/cve/CVE-2020-6407" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00033.html" source="SUSE-SU"/>
    <description>
    Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6407/">CVE-2020-6407</cve>
	<bugzilla href="https://bugzilla.suse.com/1164828">SUSE bug 1164828</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6408</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6408" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6408" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6408" ref_url="https://www.suse.com/security/cve/CVE-2020-6408" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain potentially sensitive information via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6408/">CVE-2020-6408</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206409" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6409</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6409" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6409" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6409" ref_url="https://www.suse.com/security/cve/CVE-2020-6409" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convinced the user to enter a URI to bypass navigation restrictions via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6409/">CVE-2020-6409</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6410</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6410" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6410" ref_url="https://www.suse.com/security/cve/CVE-2020-6410" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in navigation in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to confuse the user via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6410/">CVE-2020-6410</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6411</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6411" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6411" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6411" ref_url="https://www.suse.com/security/cve/CVE-2020-6411" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6411/">CVE-2020-6411</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6412</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6412" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6412" ref_url="https://www.suse.com/security/cve/CVE-2020-6412" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6412/">CVE-2020-6412</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206413" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6413</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6413" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6413" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6413" ref_url="https://www.suse.com/security/cve/CVE-2020-6413" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML validators via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6413/">CVE-2020-6413</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206414" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6414</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6414" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6414" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6414" ref_url="https://www.suse.com/security/cve/CVE-2020-6414" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6414/">CVE-2020-6414</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6415</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6415" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6415" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6415" ref_url="https://www.suse.com/security/cve/CVE-2020-6415" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6415/">CVE-2020-6415</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6416</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6416" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6416" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6416" ref_url="https://www.suse.com/security/cve/CVE-2020-6416" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6416/">CVE-2020-6416</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6417</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6417" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6417" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6417" ref_url="https://www.suse.com/security/cve/CVE-2020-6417" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute arbitrary code via a crafted registry entry.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6417/">CVE-2020-6417</cve>
	<bugzilla href="https://bugzilla.suse.com/1162833">SUSE bug 1162833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6418</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6418" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6418" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6418" ref_url="https://www.suse.com/security/cve/CVE-2020-6418" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00033.html" source="SUSE-SU"/>
    <description>
    Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6418/">CVE-2020-6418</cve>
	<bugzilla href="https://bugzilla.suse.com/1164828">SUSE bug 1164828</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6420</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6420" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6420" ref_url="https://www.suse.com/security/cve/CVE-2020-6420" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00017.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6420/">CVE-2020-6420</cve>
	<bugzilla href="https://bugzilla.suse.com/1165826">SUSE bug 1165826</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6422</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6422" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6422" ref_url="https://www.suse.com/security/cve/CVE-2020-6422" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0365-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html" source="SUSE-SU"/>
    <description>
    Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6422/">CVE-2020-6422</cve>
	<bugzilla href="https://bugzilla.suse.com/1167090">SUSE bug 1167090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6423</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6423" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6423" ref_url="https://www.suse.com/security/cve/CVE-2020-6423" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6423/">CVE-2020-6423</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6424</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6424" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6424" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6424" ref_url="https://www.suse.com/security/cve/CVE-2020-6424" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0365-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html" source="SUSE-SU"/>
    <description>
    Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6424/">CVE-2020-6424</cve>
	<bugzilla href="https://bugzilla.suse.com/1167090">SUSE bug 1167090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6425</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6425" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6425" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6425" ref_url="https://www.suse.com/security/cve/CVE-2020-6425" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0365-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6425/">CVE-2020-6425</cve>
	<bugzilla href="https://bugzilla.suse.com/1167090">SUSE bug 1167090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6426</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6426" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6426" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6426" ref_url="https://www.suse.com/security/cve/CVE-2020-6426" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0365-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6426/">CVE-2020-6426</cve>
	<bugzilla href="https://bugzilla.suse.com/1167090">SUSE bug 1167090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6427</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6427" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6427" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6427" ref_url="https://www.suse.com/security/cve/CVE-2020-6427" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0365-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html" source="SUSE-SU"/>
    <description>
    Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6427/">CVE-2020-6427</cve>
	<bugzilla href="https://bugzilla.suse.com/1167090">SUSE bug 1167090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206428" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6428</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6428" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6428" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6428" ref_url="https://www.suse.com/security/cve/CVE-2020-6428" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0365-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html" source="SUSE-SU"/>
    <description>
    Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6428/">CVE-2020-6428</cve>
	<bugzilla href="https://bugzilla.suse.com/1167090">SUSE bug 1167090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6429</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6429" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6429" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6429" ref_url="https://www.suse.com/security/cve/CVE-2020-6429" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0365-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html" source="SUSE-SU"/>
    <description>
    Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6429/">CVE-2020-6429</cve>
	<bugzilla href="https://bugzilla.suse.com/1167090">SUSE bug 1167090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206430" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6430</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6430" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6430" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6430" ref_url="https://www.suse.com/security/cve/CVE-2020-6430" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6430/">CVE-2020-6430</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206431" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6431</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6431" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6431" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6431" ref_url="https://www.suse.com/security/cve/CVE-2020-6431" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6431/">CVE-2020-6431</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206432" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6432</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6432" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6432" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6432" ref_url="https://www.suse.com/security/cve/CVE-2020-6432" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6432/">CVE-2020-6432</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6433</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6433" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6433" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6433" ref_url="https://www.suse.com/security/cve/CVE-2020-6433" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6433/">CVE-2020-6433</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6434</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6434" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6434" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6434" ref_url="https://www.suse.com/security/cve/CVE-2020-6434" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Use after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6434/">CVE-2020-6434</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6435</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6435" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6435" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6435" ref_url="https://www.suse.com/security/cve/CVE-2020-6435" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6435/">CVE-2020-6435</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6436</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6436" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6436" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6436" ref_url="https://www.suse.com/security/cve/CVE-2020-6436" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Use after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6436/">CVE-2020-6436</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6437</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6437" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6437" ref_url="https://www.suse.com/security/cve/CVE-2020-6437" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6437/">CVE-2020-6437</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6438</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6438" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6438" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6438" ref_url="https://www.suse.com/security/cve/CVE-2020-6438" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6438/">CVE-2020-6438</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6439</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6439" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6439" ref_url="https://www.suse.com/security/cve/CVE-2020-6439" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6439/">CVE-2020-6439</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6440</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6440" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6440" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6440" ref_url="https://www.suse.com/security/cve/CVE-2020-6440" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6440/">CVE-2020-6440</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6441</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6441" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6441" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6441" ref_url="https://www.suse.com/security/cve/CVE-2020-6441" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in omnibox in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6441/">CVE-2020-6441</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6442</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6442" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6442" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6442" ref_url="https://www.suse.com/security/cve/CVE-2020-6442" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6442/">CVE-2020-6442</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206443" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6443</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6443" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6443" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6443" ref_url="https://www.suse.com/security/cve/CVE-2020-6443" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6443/">CVE-2020-6443</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6444</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6444" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6444" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6444" ref_url="https://www.suse.com/security/cve/CVE-2020-6444" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Uninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-6444/">CVE-2020-6444</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6445</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6445" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6445" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6445" ref_url="https://www.suse.com/security/cve/CVE-2020-6445" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6445/">CVE-2020-6445</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206446" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6446</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6446" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6446" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6446" ref_url="https://www.suse.com/security/cve/CVE-2020-6446" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6446/">CVE-2020-6446</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6447</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6447" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6447" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6447" ref_url="https://www.suse.com/security/cve/CVE-2020-6447" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6447/">CVE-2020-6447</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6448</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6448" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6448" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6448" ref_url="https://www.suse.com/security/cve/CVE-2020-6448" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Use after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6448/">CVE-2020-6448</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6449</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6449" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6449" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6449" ref_url="https://www.suse.com/security/cve/CVE-2020-6449" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0365-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html" source="SUSE-SU"/>
    <description>
    Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6449/">CVE-2020-6449</cve>
	<bugzilla href="https://bugzilla.suse.com/1167090">SUSE bug 1167090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6450</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6450" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6450" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6450" ref_url="https://www.suse.com/security/cve/CVE-2020-6450" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0512-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6450/">CVE-2020-6450</cve>
	<bugzilla href="https://bugzilla.suse.com/1168421">SUSE bug 1168421</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6451</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6451" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6451" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6451" ref_url="https://www.suse.com/security/cve/CVE-2020-6451" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0512-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6451/">CVE-2020-6451</cve>
	<bugzilla href="https://bugzilla.suse.com/1168421">SUSE bug 1168421</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206452" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6452</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6452" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6452" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6452" ref_url="https://www.suse.com/security/cve/CVE-2020-6452" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0512-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6452/">CVE-2020-6452</cve>
	<bugzilla href="https://bugzilla.suse.com/1168421">SUSE bug 1168421</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6454</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6454" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6454" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6454" ref_url="https://www.suse.com/security/cve/CVE-2020-6454" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Use after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6454/">CVE-2020-6454</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206455" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6455</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6455" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6455" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6455" ref_url="https://www.suse.com/security/cve/CVE-2020-6455" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Out of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6455/">CVE-2020-6455</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6456</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6456" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6456" ref_url="https://www.suse.com/security/cve/CVE-2020-6456" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in clipboard in Google Chrome prior to 81.0.4044.92 allowed a local attacker to bypass site isolation via crafted clipboard contents.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6456/">CVE-2020-6456</cve>
	<bugzilla href="https://bugzilla.suse.com/1168911">SUSE bug 1168911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206457" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6457</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6457" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6457" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6457" ref_url="https://www.suse.com/security/cve/CVE-2020-6457" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0635-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00028.html" source="SUSE-SU"/>
    <description>
    Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6457/">CVE-2020-6457</cve>
	<bugzilla href="https://bugzilla.suse.com/1169729">SUSE bug 1169729</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6458</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6458" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6458" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6458" ref_url="https://www.suse.com/security/cve/CVE-2020-6458" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0635-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00028.html" source="SUSE-SU"/>
    <description>
    Out of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6458/">CVE-2020-6458</cve>
	<bugzilla href="https://bugzilla.suse.com/1170107">SUSE bug 1170107</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6459</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6459" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6459" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6459" ref_url="https://www.suse.com/security/cve/CVE-2020-6459" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0635-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00028.html" source="SUSE-SU"/>
    <description>
    Use after free in payments in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6459/">CVE-2020-6459</cve>
	<bugzilla href="https://bugzilla.suse.com/1170107">SUSE bug 1170107</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6460</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6460" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6460" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6460" ref_url="https://www.suse.com/security/cve/CVE-2020-6460" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0635-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00028.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in URL formatting in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to perform domain spoofing via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6460/">CVE-2020-6460</cve>
	<bugzilla href="https://bugzilla.suse.com/1170107">SUSE bug 1170107</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6462</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6462" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6462" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6462" ref_url="https://www.suse.com/security/cve/CVE-2020-6462" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0635-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00028.html" source="SUSE-SU"/>
    <description>
    Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6462/">CVE-2020-6462</cve>
	<bugzilla href="https://bugzilla.suse.com/1170707">SUSE bug 1170707</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6463</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6463" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6463" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6463" ref_url="https://www.suse.com/security/cve/CVE-2020-6463" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007233.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007246.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1179-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00032.html" source="SUSE-SU"/>
    <description>
    Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-6463/">CVE-2020-6463</cve>
	<bugzilla href="https://bugzilla.suse.com/1171975">SUSE bug 1171975</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174538">SUSE bug 1174538</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6464</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6464" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6464" ref_url="https://www.suse.com/security/cve/CVE-2020-6464" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0648-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0709-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0917-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00000.html" source="SUSE-SU"/>
    <description>
    Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6464/">CVE-2020-6464</cve>
	<bugzilla href="https://bugzilla.suse.com/1171247">SUSE bug 1171247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206465" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6465</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6465" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6465" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6465" ref_url="https://www.suse.com/security/cve/CVE-2020-6465" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6465/">CVE-2020-6465</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6466</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6466" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6466" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6466" ref_url="https://www.suse.com/security/cve/CVE-2020-6466" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6466/">CVE-2020-6466</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6467</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6467" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6467" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6467" ref_url="https://www.suse.com/security/cve/CVE-2020-6467" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6467/">CVE-2020-6467</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206468" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6468</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6468" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6468" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6468" ref_url="https://www.suse.com/security/cve/CVE-2020-6468" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6468/">CVE-2020-6468</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6469</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6469" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6469" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6469" ref_url="https://www.suse.com/security/cve/CVE-2020-6469" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6469/">CVE-2020-6469</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6470</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6470" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6470" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6470" ref_url="https://www.suse.com/security/cve/CVE-2020-6470" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker to inject arbitrary scripts or HTML (UXSS) via crafted clipboard contents.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6470/">CVE-2020-6470</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206471" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6471</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6471" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6471" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6471" ref_url="https://www.suse.com/security/cve/CVE-2020-6471" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6471/">CVE-2020-6471</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6472</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6472" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6472" ref_url="https://www.suse.com/security/cve/CVE-2020-6472" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory or disk via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6472/">CVE-2020-6472</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6473</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6473" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6473" ref_url="https://www.suse.com/security/cve/CVE-2020-6473" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6473/">CVE-2020-6473</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6474</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6474" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6474" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6474" ref_url="https://www.suse.com/security/cve/CVE-2020-6474" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6474/">CVE-2020-6474</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6475</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6475" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6475" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6475" ref_url="https://www.suse.com/security/cve/CVE-2020-6475" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6475/">CVE-2020-6475</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6476</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6476" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6476" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6476" ref_url="https://www.suse.com/security/cve/CVE-2020-6476" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6476/">CVE-2020-6476</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6477</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6477" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6477" ref_url="https://www.suse.com/security/cve/CVE-2020-6477" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escalation via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6477/">CVE-2020-6477</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6478</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6478" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6478" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6478" ref_url="https://www.suse.com/security/cve/CVE-2020-6478" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6478/">CVE-2020-6478</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6479</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6479" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6479" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6479" ref_url="https://www.suse.com/security/cve/CVE-2020-6479" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6479/">CVE-2020-6479</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206480" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6480</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6480" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6480" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6480" ref_url="https://www.suse.com/security/cve/CVE-2020-6480" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass navigation restrictions via UI actions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6480/">CVE-2020-6480</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206481" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6481</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6481" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6481" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6481" ref_url="https://www.suse.com/security/cve/CVE-2020-6481" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to perform domain spoofing via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6481/">CVE-2020-6481</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6482</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6482" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6482" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6482" ref_url="https://www.suse.com/security/cve/CVE-2020-6482" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6482/">CVE-2020-6482</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6483</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6483" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6483" ref_url="https://www.suse.com/security/cve/CVE-2020-6483" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6483/">CVE-2020-6483</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6484</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6484" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6484" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6484" ref_url="https://www.suse.com/security/cve/CVE-2020-6484" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6484/">CVE-2020-6484</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6485</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6485" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6485" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6485" ref_url="https://www.suse.com/security/cve/CVE-2020-6485" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6485/">CVE-2020-6485</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6486</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6486" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6486" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6486" ref_url="https://www.suse.com/security/cve/CVE-2020-6486" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6486/">CVE-2020-6486</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206487" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6487</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6487" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6487" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6487" ref_url="https://www.suse.com/security/cve/CVE-2020-6487" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6487/">CVE-2020-6487</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6488</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6488" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6488" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6488" ref_url="https://www.suse.com/security/cve/CVE-2020-6488" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6488/">CVE-2020-6488</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6489</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6489" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6489" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6489" ref_url="https://www.suse.com/security/cve/CVE-2020-6489" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had convinced the user to take certain actions in developer tools to obtain potentially sensitive information from disk via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6489/">CVE-2020-6489</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6490</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6490" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6490" ref_url="https://www.suse.com/security/cve/CVE-2020-6490" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6490/">CVE-2020-6490</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6491</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6491" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6491" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6491" ref_url="https://www.suse.com/security/cve/CVE-2020-6491" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6491/">CVE-2020-6491</cve>
	<bugzilla href="https://bugzilla.suse.com/1171910">SUSE bug 1171910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6493</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6493" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6493" ref_url="https://www.suse.com/security/cve/CVE-2020-6493" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6493/">CVE-2020-6493</cve>
	<bugzilla href="https://bugzilla.suse.com/1172496">SUSE bug 1172496</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6494</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6494" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6494" ref_url="https://www.suse.com/security/cve/CVE-2020-6494" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6494/">CVE-2020-6494</cve>
	<bugzilla href="https://bugzilla.suse.com/1172496">SUSE bug 1172496</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6495</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6495" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6495" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6495" ref_url="https://www.suse.com/security/cve/CVE-2020-6495" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6495/">CVE-2020-6495</cve>
	<bugzilla href="https://bugzilla.suse.com/1172496">SUSE bug 1172496</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6496</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6496" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6496" ref_url="https://www.suse.com/security/cve/CVE-2020-6496" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html" source="SUSE-SU"/>
    <description>
    Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6496/">CVE-2020-6496</cve>
	<bugzilla href="https://bugzilla.suse.com/1172496">SUSE bug 1172496</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6505</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6505" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6505" ref_url="https://www.suse.com/security/cve/CVE-2020-6505" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0845-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0856-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00061.html" source="SUSE-SU"/>
    <description>
    Use after free in speech in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6505/">CVE-2020-6505</cve>
	<bugzilla href="https://bugzilla.suse.com/1173029">SUSE bug 1173029</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6506</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6506" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6506" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6506" ref_url="https://www.suse.com/security/cve/CVE-2020-6506" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0845-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0856-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00061.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83.0.4103.106 allowed a remote attacker to bypass site isolation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6506/">CVE-2020-6506</cve>
	<bugzilla href="https://bugzilla.suse.com/1173029">SUSE bug 1173029</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6507</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6507" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6507" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6507" ref_url="https://www.suse.com/security/cve/CVE-2020-6507" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0845-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0856-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00061.html" source="SUSE-SU"/>
    <description>
    Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6507/">CVE-2020-6507</cve>
	<bugzilla href="https://bugzilla.suse.com/1173029">SUSE bug 1173029</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6509</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6509" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6509" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6509" ref_url="https://www.suse.com/security/cve/CVE-2020-6509" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:0887-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0949-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0950-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1032-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00040.html" source="SUSE-SU"/>
    <description>
    Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-21"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6509/">CVE-2020-6509</cve>
	<bugzilla href="https://bugzilla.suse.com/1173251">SUSE bug 1173251</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6510</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6510" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6510" ref_url="https://www.suse.com/security/cve/CVE-2020-6510" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6510/">CVE-2020-6510</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6511</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6511" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6511" ref_url="https://www.suse.com/security/cve/CVE-2020-6511" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6511/">CVE-2020-6511</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6512</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6512" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6512" ref_url="https://www.suse.com/security/cve/CVE-2020-6512" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6512/">CVE-2020-6512</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6513</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6513" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6513" ref_url="https://www.suse.com/security/cve/CVE-2020-6513" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6513/">CVE-2020-6513</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206514" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6514</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6514" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6514" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6514" ref_url="https://www.suse.com/security/cve/CVE-2020-6514" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007233.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007246.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1179-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1189-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00032.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6514/">CVE-2020-6514</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174538">SUSE bug 1174538</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6515</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6515" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6515" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6515" ref_url="https://www.suse.com/security/cve/CVE-2020-6515" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6515/">CVE-2020-6515</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206516" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6516</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6516" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6516" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6516" ref_url="https://www.suse.com/security/cve/CVE-2020-6516" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6516/">CVE-2020-6516</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6517</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6517" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6517" ref_url="https://www.suse.com/security/cve/CVE-2020-6517" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6517/">CVE-2020-6517</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6518</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6518" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6518" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6518" ref_url="https://www.suse.com/security/cve/CVE-2020-6518" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced the user to use developer tools to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6518/">CVE-2020-6518</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6519</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6519" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6519" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6519" ref_url="https://www.suse.com/security/cve/CVE-2020-6519" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6519/">CVE-2020-6519</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206520" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6520</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6520" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6520" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6520" ref_url="https://www.suse.com/security/cve/CVE-2020-6520" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6520/">CVE-2020-6520</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6521</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6521" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6521" ref_url="https://www.suse.com/security/cve/CVE-2020-6521" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Side-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6521/">CVE-2020-6521</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6522</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6522" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6522" ref_url="https://www.suse.com/security/cve/CVE-2020-6522" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6522/">CVE-2020-6522</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6523</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6523" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6523" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6523" ref_url="https://www.suse.com/security/cve/CVE-2020-6523" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6523/">CVE-2020-6523</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6524</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6524" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6524" ref_url="https://www.suse.com/security/cve/CVE-2020-6524" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6524/">CVE-2020-6524</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6525</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6525" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6525" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6525" ref_url="https://www.suse.com/security/cve/CVE-2020-6525" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6525/">CVE-2020-6525</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6526</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6526" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6526" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6526" ref_url="https://www.suse.com/security/cve/CVE-2020-6526" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6526/">CVE-2020-6526</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206527" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6527</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6527" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6527" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6527" ref_url="https://www.suse.com/security/cve/CVE-2020-6527" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6527/">CVE-2020-6527</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6528</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6528" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6528" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6528" ref_url="https://www.suse.com/security/cve/CVE-2020-6528" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6528/">CVE-2020-6528</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6529</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6529" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6529" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6529" ref_url="https://www.suse.com/security/cve/CVE-2020-6529" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6529/">CVE-2020-6529</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206530" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6530</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6530" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6530" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6530" ref_url="https://www.suse.com/security/cve/CVE-2020-6530" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6530/">CVE-2020-6530</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6531</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6531" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6531" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6531" ref_url="https://www.suse.com/security/cve/CVE-2020-6531" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Side-channel information leakage in scroll to text in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6531/">CVE-2020-6531</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6532</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6532" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6532" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6532" ref_url="https://www.suse.com/security/cve/CVE-2020-6532" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Use after free in SCTP in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6532/">CVE-2020-6532</cve>
	<bugzilla href="https://bugzilla.suse.com/1174582">SUSE bug 1174582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6533</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6533" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6533" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6533" ref_url="https://www.suse.com/security/cve/CVE-2020-6533" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6533/">CVE-2020-6533</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6534</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6534" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6534" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6534" ref_url="https://www.suse.com/security/cve/CVE-2020-6534" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6534/">CVE-2020-6534</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206535" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6535</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6535" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6535" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6535" ref_url="https://www.suse.com/security/cve/CVE-2020-6535" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6535/">CVE-2020-6535</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206536" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6536</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6536" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6536" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6536" ref_url="https://www.suse.com/security/cve/CVE-2020-6536" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-09/msg00130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in PWAs in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had persuaded the user to install a PWA to spoof the contents of the Omnibox (URL bar) via a crafted PWA.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6536/">CVE-2020-6536</cve>
	<bugzilla href="https://bugzilla.suse.com/1174189">SUSE bug 1174189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6537</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6537" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6537" ref_url="https://www.suse.com/security/cve/CVE-2020-6537" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Type confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6537/">CVE-2020-6537</cve>
	<bugzilla href="https://bugzilla.suse.com/1174582">SUSE bug 1174582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6538</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6538" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6538" ref_url="https://www.suse.com/security/cve/CVE-2020-6538" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6538/">CVE-2020-6538</cve>
	<bugzilla href="https://bugzilla.suse.com/1174582">SUSE bug 1174582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6539</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6539" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6539" ref_url="https://www.suse.com/security/cve/CVE-2020-6539" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Use after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6539/">CVE-2020-6539</cve>
	<bugzilla href="https://bugzilla.suse.com/1174582">SUSE bug 1174582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6540</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6540" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6540" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6540" ref_url="https://www.suse.com/security/cve/CVE-2020-6540" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Skia in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6540/">CVE-2020-6540</cve>
	<bugzilla href="https://bugzilla.suse.com/1174582">SUSE bug 1174582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6541</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6541" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6541" ref_url="https://www.suse.com/security/cve/CVE-2020-6541" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6541/">CVE-2020-6541</cve>
	<bugzilla href="https://bugzilla.suse.com/1174582">SUSE bug 1174582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6542</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6542" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6542" ref_url="https://www.suse.com/security/cve/CVE-2020-6542" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Use after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6542/">CVE-2020-6542</cve>
	<bugzilla href="https://bugzilla.suse.com/1175085">SUSE bug 1175085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6543</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6543" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6543" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6543" ref_url="https://www.suse.com/security/cve/CVE-2020-6543" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Use after free in task scheduling in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6543/">CVE-2020-6543</cve>
	<bugzilla href="https://bugzilla.suse.com/1175085">SUSE bug 1175085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6544</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6544" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6544" ref_url="https://www.suse.com/security/cve/CVE-2020-6544" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6544/">CVE-2020-6544</cve>
	<bugzilla href="https://bugzilla.suse.com/1175085">SUSE bug 1175085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6545</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6545" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6545" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6545" ref_url="https://www.suse.com/security/cve/CVE-2020-6545" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Use after free in audio in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6545/">CVE-2020-6545</cve>
	<bugzilla href="https://bugzilla.suse.com/1175085">SUSE bug 1175085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6546</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6546" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6546" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6546" ref_url="https://www.suse.com/security/cve/CVE-2020-6546" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6546/">CVE-2020-6546</cve>
	<bugzilla href="https://bugzilla.suse.com/1175085">SUSE bug 1175085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6547</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6547" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6547" ref_url="https://www.suse.com/security/cve/CVE-2020-6547" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Incorrect security UI in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6547/">CVE-2020-6547</cve>
	<bugzilla href="https://bugzilla.suse.com/1175085">SUSE bug 1175085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6548</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6548" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6548" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6548" ref_url="https://www.suse.com/security/cve/CVE-2020-6548" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.125 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6548/">CVE-2020-6548</cve>
	<bugzilla href="https://bugzilla.suse.com/1175085">SUSE bug 1175085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6549</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6549" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6549" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6549" ref_url="https://www.suse.com/security/cve/CVE-2020-6549" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6549/">CVE-2020-6549</cve>
	<bugzilla href="https://bugzilla.suse.com/1175085">SUSE bug 1175085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206550" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6550</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6550" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6550" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6550" ref_url="https://www.suse.com/security/cve/CVE-2020-6550" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Use after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6550/">CVE-2020-6550</cve>
	<bugzilla href="https://bugzilla.suse.com/1175085">SUSE bug 1175085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6551</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6551" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6551" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6551" ref_url="https://www.suse.com/security/cve/CVE-2020-6551" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Use after free in WebXR in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6551/">CVE-2020-6551</cve>
	<bugzilla href="https://bugzilla.suse.com/1175085">SUSE bug 1175085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6552</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6552" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6552" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6552" ref_url="https://www.suse.com/security/cve/CVE-2020-6552" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Use after free in Blink in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6552/">CVE-2020-6552</cve>
	<bugzilla href="https://bugzilla.suse.com/1175085">SUSE bug 1175085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6553</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6553" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6553" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6553" ref_url="https://www.suse.com/security/cve/CVE-2020-6553" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Use after free in offline mode in Google Chrome on iOS prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6553/">CVE-2020-6553</cve>
	<bugzilla href="https://bugzilla.suse.com/1175085">SUSE bug 1175085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6554</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6554" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6554" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6554" ref_url="https://www.suse.com/security/cve/CVE-2020-6554" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6554/">CVE-2020-6554</cve>
	<bugzilla href="https://bugzilla.suse.com/1175085">SUSE bug 1175085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6555</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6555" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6555" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6555" ref_url="https://www.suse.com/security/cve/CVE-2020-6555" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00006.html" source="SUSE-SU"/>
    <description>
    Out of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-6555/">CVE-2020-6555</cve>
	<bugzilla href="https://bugzilla.suse.com/1175085">SUSE bug 1175085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6556</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6556" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6556" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6556" ref_url="https://www.suse.com/security/cve/CVE-2020-6556" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6556/">CVE-2020-6556</cve>
	<bugzilla href="https://bugzilla.suse.com/1175505">SUSE bug 1175505</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206557" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6557</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6557" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6557" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6557" ref_url="https://www.suse.com/security/cve/CVE-2020-6557" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1715-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6557/">CVE-2020-6557</cve>
	<bugzilla href="https://bugzilla.suse.com/1177408">SUSE bug 1177408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6558</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6558" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6558" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6558" ref_url="https://www.suse.com/security/cve/CVE-2020-6558" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6558/">CVE-2020-6558</cve>
	<bugzilla href="https://bugzilla.suse.com/1175757">SUSE bug 1175757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6559</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6559" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6559" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6559" ref_url="https://www.suse.com/security/cve/CVE-2020-6559" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
    <description>
    Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6559/">CVE-2020-6559</cve>
	<bugzilla href="https://bugzilla.suse.com/1175757">SUSE bug 1175757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6560</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6560" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6560" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6560" ref_url="https://www.suse.com/security/cve/CVE-2020-6560" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6560/">CVE-2020-6560</cve>
	<bugzilla href="https://bugzilla.suse.com/1175757">SUSE bug 1175757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206561" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6561</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6561" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6561" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6561" ref_url="https://www.suse.com/security/cve/CVE-2020-6561" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6561/">CVE-2020-6561</cve>
	<bugzilla href="https://bugzilla.suse.com/1175757">SUSE bug 1175757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6562</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6562" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6562" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6562" ref_url="https://www.suse.com/security/cve/CVE-2020-6562" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6562/">CVE-2020-6562</cve>
	<bugzilla href="https://bugzilla.suse.com/1175757">SUSE bug 1175757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6563</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6563" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6563" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6563" ref_url="https://www.suse.com/security/cve/CVE-2020-6563" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6563/">CVE-2020-6563</cve>
	<bugzilla href="https://bugzilla.suse.com/1175757">SUSE bug 1175757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6564</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6564" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6564" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6564" ref_url="https://www.suse.com/security/cve/CVE-2020-6564" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of a permission dialog via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6564/">CVE-2020-6564</cve>
	<bugzilla href="https://bugzilla.suse.com/1175757">SUSE bug 1175757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206565" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6565</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6565" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6565" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6565" ref_url="https://www.suse.com/security/cve/CVE-2020-6565" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6565/">CVE-2020-6565</cve>
	<bugzilla href="https://bugzilla.suse.com/1175757">SUSE bug 1175757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206566" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6566</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6566" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6566" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6566" ref_url="https://www.suse.com/security/cve/CVE-2020-6566" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6566/">CVE-2020-6566</cve>
	<bugzilla href="https://bugzilla.suse.com/1175757">SUSE bug 1175757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6567</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6567" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6567" ref_url="https://www.suse.com/security/cve/CVE-2020-6567" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6567/">CVE-2020-6567</cve>
	<bugzilla href="https://bugzilla.suse.com/1175757">SUSE bug 1175757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6568</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6568" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6568" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6568" ref_url="https://www.suse.com/security/cve/CVE-2020-6568" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-6568/">CVE-2020-6568</cve>
	<bugzilla href="https://bugzilla.suse.com/1175757">SUSE bug 1175757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6569</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6569" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6569" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6569" ref_url="https://www.suse.com/security/cve/CVE-2020-6569" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
    <description>
    Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-6569/">CVE-2020-6569</cve>
	<bugzilla href="https://bugzilla.suse.com/1175757">SUSE bug 1175757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6570</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6570" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6570" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6570" ref_url="https://www.suse.com/security/cve/CVE-2020-6570" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
    <description>
    Information leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sensitive information via a crafted WebRTC interaction.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6570/">CVE-2020-6570</cve>
	<bugzilla href="https://bugzilla.suse.com/1175757">SUSE bug 1175757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6571</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6571" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6571" ref_url="https://www.suse.com/security/cve/CVE-2020-6571" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
    <description>
    Insufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6571/">CVE-2020-6571</cve>
	<bugzilla href="https://bugzilla.suse.com/1175757">SUSE bug 1175757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6573</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6573" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6573" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6573" ref_url="https://www.suse.com/security/cve/CVE-2020-6573" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html" source="SUSE-SU"/>
    <description>
    Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-01"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6573/">CVE-2020-6573</cve>
	<bugzilla href="https://bugzilla.suse.com/1176306">SUSE bug 1176306</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6574</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6574" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6574" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6574" ref_url="https://www.suse.com/security/cve/CVE-2020-6574" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102 allowed a local attacker to potentially achieve privilege escalation via a crafted binary.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-01"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6574/">CVE-2020-6574</cve>
	<bugzilla href="https://bugzilla.suse.com/1176306">SUSE bug 1176306</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6575</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6575" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6575" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6575" ref_url="https://www.suse.com/security/cve/CVE-2020-6575" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html" source="SUSE-SU"/>
    <description>
    Race in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-01"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6575/">CVE-2020-6575</cve>
	<bugzilla href="https://bugzilla.suse.com/1176306">SUSE bug 1176306</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6576</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6576" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6576" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6576" ref_url="https://www.suse.com/security/cve/CVE-2020-6576" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2020:1499-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html" source="SUSE-SU"/>
    <description>
    Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-01"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6576/">CVE-2020-6576</cve>
	<bugzilla href="https://bugzilla.suse.com/1176306">SUSE bug 1176306</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6750</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6750" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6750" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6750" ref_url="https://www.suse.com/security/cve/CVE-2020-6750" source="SUSE CVE"/>
    <description>
    GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there is no technical barrier to a direct connection. NOTE: versions before 2.60 are unaffected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-20"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6750/">CVE-2020-6750</cve>
	<bugzilla href="https://bugzilla.suse.com/1160668">SUSE bug 1160668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628466" comment="glib2-lang-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151143" comment="glib2-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628467" comment="glib2-tools-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151144" comment="glib2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628468" comment="libgio-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151145" comment="libgio-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628469" comment="libgio-2_0-0-32bit-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151146" comment="libgio-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628470" comment="libglib-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151147" comment="libglib-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628471" comment="libglib-2_0-0-32bit-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151148" comment="libglib-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628472" comment="libgmodule-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151149" comment="libgmodule-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628473" comment="libgmodule-2_0-0-32bit-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151150" comment="libgmodule-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628474" comment="libgobject-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151151" comment="libgobject-2_0-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628475" comment="libgobject-2_0-0-32bit-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151152" comment="libgobject-2_0-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628476" comment="libgthread-2_0-0-2.62.6-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151153" comment="libgthread-2_0-0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6792</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6792" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6792" ref_url="https://www.suse.com/security/cve/CVE-2020-6792" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006480.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00023.html" source="SUSE-SU"/>
    <description>
    When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affects Thunderbird &lt; 68.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6792/">CVE-2020-6792</cve>
	<bugzilla href="https://bugzilla.suse.com/1163368">SUSE bug 1163368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6793</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6793" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6793" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6793" ref_url="https://www.suse.com/security/cve/CVE-2020-6793" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006480.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00023.html" source="SUSE-SU"/>
    <description>
    When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability affects Thunderbird &lt; 68.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6793/">CVE-2020-6793</cve>
	<bugzilla href="https://bugzilla.suse.com/1163368">SUSE bug 1163368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6794</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6794" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6794" ref_url="https://www.suse.com/security/cve/CVE-2020-6794" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006480.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00023.html" source="SUSE-SU"/>
    <description>
    If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Thunderbird 60. The new master password is added only on the new file. This could allow the exposure of stored password data outside of user expectations. This vulnerability affects Thunderbird &lt; 68.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6794/">CVE-2020-6794</cve>
	<bugzilla href="https://bugzilla.suse.com/1163368">SUSE bug 1163368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206795" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6795</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6795" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6795" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6795" ref_url="https://www.suse.com/security/cve/CVE-2020-6795" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006480.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00023.html" source="SUSE-SU"/>
    <description>
    When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null pointer dereference, leading to an unexploitable crash. This vulnerability affects Thunderbird &lt; 68.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-6795/">CVE-2020-6795</cve>
	<bugzilla href="https://bugzilla.suse.com/1163368">SUSE bug 1163368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206796" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6796</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6796" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6796" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6796" ref_url="https://www.suse.com/security/cve/CVE-2020-6796" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0384-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14290-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006514.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0230-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00024.html" source="SUSE-SU"/>
    <description>
    A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox &lt; 73 and Firefox &lt; ESR68.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6796/">CVE-2020-6796</cve>
	<bugzilla href="https://bugzilla.suse.com/1163368">SUSE bug 1163368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6797</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6797" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6797" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6797" ref_url="https://www.suse.com/security/cve/CVE-2020-6797" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0384-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14290-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006514.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0230-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00023.html" source="SUSE-SU"/>
    <description>
    By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, limiting the impact. Note: this issue only occurs on Mac OSX. Other operating systems are unaffected. This vulnerability affects Thunderbird &lt; 68.5, Firefox &lt; 73, and Firefox &lt; ESR68.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6797/">CVE-2020-6797</cve>
	<bugzilla href="https://bugzilla.suse.com/1163368">SUSE bug 1163368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6798</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6798" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6798" ref_url="https://www.suse.com/security/cve/CVE-2020-6798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0384-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14290-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006514.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0230-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00023.html" source="SUSE-SU"/>
    <description>
    If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but is potentially a risk in browser or browser-like contexts. This vulnerability affects Thunderbird &lt; 68.5, Firefox &lt; 73, and Firefox &lt; ESR68.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-6798/">CVE-2020-6798</cve>
	<bugzilla href="https://bugzilla.suse.com/1163368">SUSE bug 1163368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6799</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6799" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6799" ref_url="https://www.suse.com/security/cve/CVE-2020-6799" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0384-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14290-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006514.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0230-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00024.html" source="SUSE-SU"/>
    <description>
    Command line arguments could have been injected during Firefox invocation as a shell handler for certain unsupported file types. This required Firefox to be configured as the default handler for a given file type and for a file downloaded to be opened in a third party application that insufficiently sanitized URL data. In that situation, clicking a link in the third party application could have been used to retrieve and execute files whose location was supplied through command line arguments. Note: This issue only affects Windows operating systems and when Firefox is configured as the default handler for non-default filetypes. Other operating systems are unaffected. This vulnerability affects Firefox &lt; 73 and Firefox &lt; ESR68.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6799/">CVE-2020-6799</cve>
	<bugzilla href="https://bugzilla.suse.com/1163368">SUSE bug 1163368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6800</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6800" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6800" ref_url="https://www.suse.com/security/cve/CVE-2020-6800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0384-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14290-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006514.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0230-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00023.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts. This vulnerability affects Thunderbird &lt; 68.5, Firefox &lt; 73, and Firefox &lt; ESR68.5.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6800/">CVE-2020-6800</cve>
	<bugzilla href="https://bugzilla.suse.com/1163368">SUSE bug 1163368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6805</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6805" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6805" ref_url="https://www.suse.com/security/cve/CVE-2020-6805" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006599.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0340-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0366-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00030.html" source="SUSE-SU"/>
    <description>
    When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 68.6, Firefox &lt; 74, Firefox &lt; ESR68.6, and Firefox ESR &lt; 68.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6805/">CVE-2020-6805</cve>
	<bugzilla href="https://bugzilla.suse.com/1166238">SUSE bug 1166238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6806</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6806" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6806" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6806" ref_url="https://www.suse.com/security/cve/CVE-2020-6806" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006599.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0340-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0366-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00030.html" source="SUSE-SU"/>
    <description>
    By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resized during script execution. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 68.6, Firefox &lt; 74, Firefox &lt; ESR68.6, and Firefox ESR &lt; 68.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6806/">CVE-2020-6806</cve>
	<bugzilla href="https://bugzilla.suse.com/1166238">SUSE bug 1166238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6807</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6807" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6807" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6807" ref_url="https://www.suse.com/security/cve/CVE-2020-6807" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006599.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0340-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0366-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00030.html" source="SUSE-SU"/>
    <description>
    When a device was changed while a stream was about to be destroyed, the &lt;code&gt;stream-reinit&lt;/code&gt; task may have been executed after the stream was destroyed, causing a use-after-free and a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 68.6, Firefox &lt; 74, Firefox &lt; ESR68.6, and Firefox ESR &lt; 68.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6807/">CVE-2020-6807</cve>
	<bugzilla href="https://bugzilla.suse.com/1166238">SUSE bug 1166238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6811</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6811" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6811" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6811" ref_url="https://www.suse.com/security/cve/CVE-2020-6811" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006599.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0340-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0366-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00030.html" source="SUSE-SU"/>
    <description>
    The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the 'Copy as Curl' feature and pasted the command into a terminal, it could have resulted in command injection and arbitrary command execution. This vulnerability affects Thunderbird &lt; 68.6, Firefox &lt; 74, Firefox &lt; ESR68.6, and Firefox ESR &lt; 68.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6811/">CVE-2020-6811</cve>
	<bugzilla href="https://bugzilla.suse.com/1166238">SUSE bug 1166238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6812</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6812" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6812" ref_url="https://www.suse.com/security/cve/CVE-2020-6812" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006599.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0340-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0366-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00030.html" source="SUSE-SU"/>
    <description>
    The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's AirPods.) Websites with camera or microphone permission are able to enumerate device names, disclosing the user's name. To resolve this issue, Firefox added a special case that renames devices containing the substring 'AirPods' to simply 'AirPods'. This vulnerability affects Thunderbird &lt; 68.6, Firefox &lt; 74, Firefox &lt; ESR68.6, and Firefox ESR &lt; 68.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.7/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6812/">CVE-2020-6812</cve>
	<bugzilla href="https://bugzilla.suse.com/1166238">SUSE bug 1166238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6814</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6814" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6814" ref_url="https://www.suse.com/security/cve/CVE-2020-6814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006626.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006599.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0340-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0366-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00030.html" source="SUSE-SU"/>
    <description>
    Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 68.6, Firefox &lt; 74, Firefox &lt; ESR68.6, and Firefox ESR &lt; 68.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6814/">CVE-2020-6814</cve>
	<bugzilla href="https://bugzilla.suse.com/1166238">SUSE bug 1166238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6819</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6819" ref_url="https://www.suse.com/security/cve/CVE-2020-6819" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006677.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006684.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0461-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0520-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0544-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-04/msg00106.html" source="SUSE-SU"/>
    <description>
    Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird &lt; 68.7.0, Firefox &lt; 74.0.1, and Firefox ESR &lt; 68.6.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6819/">CVE-2020-6819</cve>
	<bugzilla href="https://bugzilla.suse.com/1168630">SUSE bug 1168630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168874">SUSE bug 1168874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6820</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6820" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6820" ref_url="https://www.suse.com/security/cve/CVE-2020-6820" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006677.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006684.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0461-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0520-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0544-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-04/msg00106.html" source="SUSE-SU"/>
    <description>
    Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird &lt; 68.7.0, Firefox &lt; 74.0.1, and Firefox ESR &lt; 68.6.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6820/">CVE-2020-6820</cve>
	<bugzilla href="https://bugzilla.suse.com/1168630">SUSE bug 1168630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168874">SUSE bug 1168874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6821</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6821" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6821" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6821" ref_url="https://www.suse.com/security/cve/CVE-2020-6821" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006698.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0493-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0520-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0544-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-04/msg00106.html" source="SUSE-SU"/>
    <description>
    When reading from areas partially or fully outside the source resource with WebGL's &lt;code&gt;copyTexSubImage&lt;/code&gt; method, the specification requires the returned values be zero. Previously, this memory was uninitialized, leading to potentially sensitive data disclosure. This vulnerability affects Thunderbird &lt; 68.7.0, Firefox ESR &lt; 68.7, and Firefox &lt; 75.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6821/">CVE-2020-6821</cve>
	<bugzilla href="https://bugzilla.suse.com/1168630">SUSE bug 1168630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168874">SUSE bug 1168874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6822</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6822" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6822" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6822" ref_url="https://www.suse.com/security/cve/CVE-2020-6822" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006698.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0493-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0520-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0544-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-04/msg00106.html" source="SUSE-SU"/>
    <description>
    On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in &lt;code&gt;GMPDecodeData&lt;/code&gt;. It is possible that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 68.7.0, Firefox ESR &lt; 68.7, and Firefox &lt; 75.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6822/">CVE-2020-6822</cve>
	<bugzilla href="https://bugzilla.suse.com/1168630">SUSE bug 1168630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168874">SUSE bug 1168874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6825</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6825" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6825" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6825" ref_url="https://www.suse.com/security/cve/CVE-2020-6825" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006698.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0493-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0520-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0544-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-04/msg00106.html" source="SUSE-SU"/>
    <description>
    Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 68.7.0, Firefox ESR &lt; 68.7, and Firefox &lt; 75.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6825/">CVE-2020-6825</cve>
	<bugzilla href="https://bugzilla.suse.com/1168630">SUSE bug 1168630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168874">SUSE bug 1168874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6827</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6827" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6827" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6827" ref_url="https://www.suse.com/security/cve/CVE-2020-6827" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006698.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0493-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00012.html" source="SUSE-SU"/>
    <description>
    When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI. &lt;br&gt; *Note: This issue only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR &lt; 68.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.7/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6827/">CVE-2020-6827</cve>
	<bugzilla href="https://bugzilla.suse.com/1168874">SUSE bug 1168874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6828</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6828" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6828" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6828" ref_url="https://www.suse.com/security/cve/CVE-2020-6828" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006698.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0493-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00012.html" source="SUSE-SU"/>
    <description>
    A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the user's profile directory. One exploitation vector for this would be to supply a user.js file providing arbitrary malicious preference values. Control of arbitrary preferences can lead to sufficient compromise such that it is generally equivalent to arbitrary code execution.&lt;br&gt; *Note: This issue only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR &lt; 68.7.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6828/">CVE-2020-6828</cve>
	<bugzilla href="https://bugzilla.suse.com/1168874">SUSE bug 1168874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6829</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6829" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6829" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6829" ref_url="https://www.suse.com/security/cve/CVE-2020-6829" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009654.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009674.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
    <description>
    When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation. Given an electro-magnetic trace of a few signature generations, the private key could have been computed. This vulnerability affects Firefox &lt; 80 and Firefox for Android &lt; 80.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6829/">CVE-2020-6829</cve>
	<bugzilla href="https://bugzilla.suse.com/1174763">SUSE bug 1174763</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175686">SUSE bug 1175686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632974" comment="libfreebl3-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632957" comment="libfreebl3-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632975" comment="libfreebl3-hmac-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244408" comment="libfreebl3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632959" comment="libfreebl3-hmac-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244409" comment="libfreebl3-hmac-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632976" comment="libsoftokn3-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632961" comment="libsoftokn3-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632977" comment="libsoftokn3-hmac-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244410" comment="libsoftokn3-hmac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632963" comment="libsoftokn3-hmac-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244411" comment="libsoftokn3-hmac-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632978" comment="mozilla-nspr-4.32-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152084" comment="mozilla-nspr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632965" comment="mozilla-nspr-32bit-4.32-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152812" comment="mozilla-nspr-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632979" comment="mozilla-nspr-devel-4.32-3.20.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152085" comment="mozilla-nspr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632980" comment="mozilla-nss-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632968" comment="mozilla-nss-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632981" comment="mozilla-nss-certs-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632970" comment="mozilla-nss-certs-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632982" comment="mozilla-nss-devel-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632983" comment="mozilla-nss-sysinit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633200" comment="mozilla-nss-sysinit-32bit-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632984" comment="mozilla-nss-tools-3.68-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6831</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6831" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6831" ref_url="https://www.suse.com/security/cve/CVE-2020-6831" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006803.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1225-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006809.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0643-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0648-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0709-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0917-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00000.html" source="SUSE-SU"/>
    <description>
    A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR &lt; 68.8, Firefox &lt; 76, and Thunderbird &lt; 68.8.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6831/">CVE-2020-6831</cve>
	<bugzilla href="https://bugzilla.suse.com/1171186">SUSE bug 1171186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171247">SUSE bug 1171247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629084" comment="MozillaFirefox-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629086" comment="MozillaFirefox-translations-common-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629087" comment="MozillaFirefox-translations-other-78.10.0-8.38.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694708" comment="MozillaThunderbird-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694709" comment="MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694710" comment="MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20206851" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-6851</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-6851" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6851" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-6851" ref_url="https://www.suse.com/security/cve/CVE-2020-6851" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010745.html" source="SUSE-SU"/>
    <description>
    OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6851/">CVE-2020-6851</cve>
	<bugzilla href="https://bugzilla.suse.com/1160782">SUSE bug 1160782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162090">SUSE bug 1162090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677917" comment="libopenjp2-7-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678643" comment="libopenjp2-7-32bit-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677918" comment="openjpeg2-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677919" comment="openjpeg2-devel-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20207039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-7039</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-7039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7039" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-7039" ref_url="https://www.suse.com/security/cve/CVE-2020-7039" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006662.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006664.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14396-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006868.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1514-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006872.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1523-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006874.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008673.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00007.html" source="SUSE-SU"/>
    <description>
    tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds access which can lead to a DoS or potential execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-7039/">CVE-2020-7039</cve>
	<bugzilla href="https://bugzilla.suse.com/1161066">SUSE bug 1161066</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20207062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-7062</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-7062" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7062" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-7062" ref_url="https://www.suse.com/security/cve/CVE-2020-7062" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0622-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006596.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0341-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html" source="SUSE-SU"/>
    <description>
    In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7062/">CVE-2020-7062</cve>
	<bugzilla href="https://bugzilla.suse.com/1165280">SUSE bug 1165280</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20207063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-7063</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-7063" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7063" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-7063" ref_url="https://www.suse.com/security/cve/CVE-2020-7063" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0622-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006596.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0341-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html" source="SUSE-SU"/>
    <description>
    In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7063/">CVE-2020-7063</cve>
	<bugzilla href="https://bugzilla.suse.com/1165289">SUSE bug 1165289</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630004" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630005" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630009" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630013" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630023" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630025" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630028" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630033" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630034" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630043" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630048" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630049" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630051" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20207068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-7068</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-7068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7068" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-7068" ref_url="https://www.suse.com/security/cve/CVE-2020-7068" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2403-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007321.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2404-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007325.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007333.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007334.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2477-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012985.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00016.html" source="SUSE-SU"/>
    <description>
    In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7068/">CVE-2020-7068</cve>
	<bugzilla href="https://bugzilla.suse.com/1175203">SUSE bug 1175203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175223">SUSE bug 1175223</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501287" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501288" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723659" comment="php7-bcmath-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723660" comment="php7-bz2-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723661" comment="php7-calendar-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501292" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723663" comment="php7-curl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723664" comment="php7-dba-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723665" comment="php7-devel-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501296" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723653" comment="php7-embed-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230509" comment="php7-embed is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723667" comment="php7-enchant-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723668" comment="php7-exif-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723669" comment="php7-fastcgi-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723670" comment="php7-fileinfo-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723624" comment="php7-firebird-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723671" comment="php7-fpm-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723672" comment="php7-ftp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723673" comment="php7-gd-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723674" comment="php7-gettext-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723675" comment="php7-gmp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501306" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723677" comment="php7-intl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501308" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723679" comment="php7-ldap-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723680" comment="php7-mbstring-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501311" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723682" comment="php7-odbc-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723683" comment="php7-opcache-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723684" comment="php7-openssl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723685" comment="php7-pcntl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501316" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501317" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723688" comment="php7-phar-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723689" comment="php7-posix-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723690" comment="php7-readline-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723691" comment="php7-shmop-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723692" comment="php7-snmp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723693" comment="php7-soap-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723694" comment="php7-sockets-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723695" comment="php7-sodium-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230510" comment="php7-sodium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501326" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723697" comment="php7-sysvmsg-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723698" comment="php7-sysvsem-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723699" comment="php7-sysvshm-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009724322" comment="php7-test-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009270016" comment="php7-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723700" comment="php7-tidy-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501331" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501332" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723703" comment="php7-xmlrpc-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501334" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723705" comment="php7-xsl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723706" comment="php7-zip-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723707" comment="php7-zlib-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20207069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-7069</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-7069" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7069" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-7069" ref_url="https://www.suse.com/security/cve/CVE-2020-7069" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2941-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2943-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007581.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012985.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00067.html" source="SUSE-SU"/>
    <description>
    In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-7069/">CVE-2020-7069</cve>
	<bugzilla href="https://bugzilla.suse.com/1177351">SUSE bug 1177351</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501287" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501288" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723659" comment="php7-bcmath-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723660" comment="php7-bz2-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723661" comment="php7-calendar-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501292" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723663" comment="php7-curl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723664" comment="php7-dba-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723665" comment="php7-devel-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501296" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723653" comment="php7-embed-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230509" comment="php7-embed is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723667" comment="php7-enchant-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723668" comment="php7-exif-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723669" comment="php7-fastcgi-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723670" comment="php7-fileinfo-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723624" comment="php7-firebird-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723671" comment="php7-fpm-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723672" comment="php7-ftp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723673" comment="php7-gd-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723674" comment="php7-gettext-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723675" comment="php7-gmp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501306" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723677" comment="php7-intl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501308" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723679" comment="php7-ldap-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723680" comment="php7-mbstring-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501311" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723682" comment="php7-odbc-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723683" comment="php7-opcache-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723684" comment="php7-openssl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723685" comment="php7-pcntl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501316" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501317" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723688" comment="php7-phar-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723689" comment="php7-posix-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723690" comment="php7-readline-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723691" comment="php7-shmop-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723692" comment="php7-snmp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723693" comment="php7-soap-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723694" comment="php7-sockets-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723695" comment="php7-sodium-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230510" comment="php7-sodium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501326" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723697" comment="php7-sysvmsg-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723698" comment="php7-sysvsem-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723699" comment="php7-sysvshm-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009724322" comment="php7-test-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009270016" comment="php7-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723700" comment="php7-tidy-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501331" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501332" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723703" comment="php7-xmlrpc-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501334" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723705" comment="php7-xsl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723706" comment="php7-zip-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723707" comment="php7-zlib-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20207070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-7070</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-7070" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7070" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-7070" ref_url="https://www.suse.com/security/cve/CVE-2020-7070" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14516-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2894-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007538.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007558.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2941-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2943-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007581.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012985.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00067.html" source="SUSE-SU"/>
    <description>
    In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-7070/">CVE-2020-7070</cve>
	<bugzilla href="https://bugzilla.suse.com/1177352">SUSE bug 1177352</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501287" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501288" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723659" comment="php7-bcmath-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723660" comment="php7-bz2-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723661" comment="php7-calendar-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501292" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723663" comment="php7-curl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723664" comment="php7-dba-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723665" comment="php7-devel-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501296" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723653" comment="php7-embed-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230509" comment="php7-embed is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723667" comment="php7-enchant-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723668" comment="php7-exif-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723669" comment="php7-fastcgi-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723670" comment="php7-fileinfo-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723624" comment="php7-firebird-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723671" comment="php7-fpm-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723672" comment="php7-ftp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723673" comment="php7-gd-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723674" comment="php7-gettext-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723675" comment="php7-gmp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501306" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723677" comment="php7-intl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501308" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723679" comment="php7-ldap-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723680" comment="php7-mbstring-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501311" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723682" comment="php7-odbc-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723683" comment="php7-opcache-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723684" comment="php7-openssl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723685" comment="php7-pcntl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501316" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501317" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723688" comment="php7-phar-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723689" comment="php7-posix-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723690" comment="php7-readline-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723691" comment="php7-shmop-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723692" comment="php7-snmp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723693" comment="php7-soap-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723694" comment="php7-sockets-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723695" comment="php7-sodium-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230510" comment="php7-sodium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501326" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723697" comment="php7-sysvmsg-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723698" comment="php7-sysvsem-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723699" comment="php7-sysvshm-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009724322" comment="php7-test-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009270016" comment="php7-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723700" comment="php7-tidy-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501331" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501332" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723703" comment="php7-xmlrpc-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501334" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723705" comment="php7-xsl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723706" comment="php7-zip-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723707" comment="php7-zlib-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20207071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-7071</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-7071" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7071" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-7071" ref_url="https://www.suse.com/security/cve/CVE-2020-7071" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0126-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012985.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0101-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZK6WI45JWQQCL3UANARH52Z3ZFW35EEN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0106-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AVZV746EP7YN4PYD2GLL5MXDCB5X5DPB/" source="SUSE-SU"/>
    <description>
    In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filter_var($url, FILTER_VALIDATE_URL), PHP will accept an URL with invalid password as valid URL. This may lead to functions that rely on URL being valid to mis-parse the URL and produce wrong data as components of the URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-7071/">CVE-2020-7071</cve>
	<bugzilla href="https://bugzilla.suse.com/1180706">SUSE bug 1180706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182049">SUSE bug 1182049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501287" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501288" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723659" comment="php7-bcmath-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723660" comment="php7-bz2-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723661" comment="php7-calendar-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501292" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723663" comment="php7-curl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723664" comment="php7-dba-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723665" comment="php7-devel-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501296" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723653" comment="php7-embed-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230509" comment="php7-embed is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723667" comment="php7-enchant-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723668" comment="php7-exif-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723669" comment="php7-fastcgi-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723670" comment="php7-fileinfo-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723624" comment="php7-firebird-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723671" comment="php7-fpm-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723672" comment="php7-ftp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723673" comment="php7-gd-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723674" comment="php7-gettext-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723675" comment="php7-gmp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501306" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723677" comment="php7-intl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501308" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723679" comment="php7-ldap-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723680" comment="php7-mbstring-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501311" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723682" comment="php7-odbc-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723683" comment="php7-opcache-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723684" comment="php7-openssl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723685" comment="php7-pcntl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501316" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501317" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723688" comment="php7-phar-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723689" comment="php7-posix-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723690" comment="php7-readline-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723691" comment="php7-shmop-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723692" comment="php7-snmp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723693" comment="php7-soap-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723694" comment="php7-sockets-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723695" comment="php7-sodium-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230510" comment="php7-sodium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501326" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723697" comment="php7-sysvmsg-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723698" comment="php7-sysvsem-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723699" comment="php7-sysvshm-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009724322" comment="php7-test-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009270016" comment="php7-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723700" comment="php7-tidy-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501331" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501332" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723703" comment="php7-xmlrpc-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501334" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723705" comment="php7-xsl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723706" comment="php7-zip-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723707" comment="php7-zlib-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20207216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-7216</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-7216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7216" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-7216" ref_url="https://www.suse.com/security/cve/CVE-2020-7216" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006472.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0369-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006473.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006499.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0165-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00005.html" source="SUSE-SU"/>
    <description>
    An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets without a message type option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7216/">CVE-2020-7216</cve>
	<bugzilla href="https://bugzilla.suse.com/1160905">SUSE bug 1160905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629048" comment="wicked-0.6.65-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009277410" comment="wicked is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629049" comment="wicked-service-0.6.65-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009277411" comment="wicked-service is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20207217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-7217</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-7217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7217" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-7217" ref_url="https://www.suse.com/security/cve/CVE-2020-7217" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006472.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0369-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006473.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0370-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006475.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006499.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00011.html" source="SUSE-SU"/>
    <description>
    An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets with a different client-id.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7217/">CVE-2020-7217</cve>
	<bugzilla href="https://bugzilla.suse.com/1160906">SUSE bug 1160906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629048" comment="wicked-0.6.65-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009277410" comment="wicked is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629049" comment="wicked-service-0.6.65-2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009277411" comment="wicked-service is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20207221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-7221</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-7221" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7221" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-7221" ref_url="https://www.suse.com/security/cve/CVE-2020-7221" source="SUSE CVE"/>
    <description>
    mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of auth_pam_tool_dir/auth_pam_tool. NOTE: this does not affect the Oracle MySQL product, which implements mysql_install_db differently.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-7221/">CVE-2020-7221</cve>
	<bugzilla href="https://bugzilla.suse.com/1160285">SUSE bug 1160285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160868">SUSE bug 1160868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160895">SUSE bug 1160895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629835" comment="mariadb-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629836" comment="mariadb-client-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629837" comment="mariadb-errormessages-10.5.8-1.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20207595" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-7595</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-7595" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7595" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-7595" ref_url="https://www.suse.com/security/cve/CVE-2020-7595" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007415.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007409.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008797.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0681-1" ref_url="https://lists.opensuse.org/opensuse-updates/2020-05/msg00124.html" source="SUSE-SU"/>
    <description>
    xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7595/">CVE-2020-7595</cve>
	<bugzilla href="https://bugzilla.suse.com/1161517">SUSE bug 1161517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191860">SUSE bug 1191860</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694895" comment="libxml2-2-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694896" comment="libxml2-2-32bit-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694897" comment="libxml2-tools-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694898" comment="python3-libxml2-python-2.9.7-3.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177126" comment="python3-libxml2-python is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20207774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-7774</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-7774" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7774" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-7774" ref_url="https://www.suse.com/security/cve/CVE-2020-7774" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2323-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2354-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-July/019612.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2618-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009256.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ZO2DR7PIGZWRPXIGYAZCAL4X64BSDZJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1060-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OF3JILGLPQ2UFZS55L7Z33X7S4K562O7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1061-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SR22RRAXGLDTLSDJRAQ4O3Q67G2PNEGJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1113-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QQFKBXOTTNWYS2GOQXWGPFT7H3TPVQVC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2327-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OFQOZ4RLN343RY5DDFVA2KWFMZHZD2KS/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2353-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVLFLECFVPSHO4SQBVWDO2CBAU5LB7IS/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2354-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DYHLAI3M6J7NTEFF5DUEXHFHPTDMGRCD/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2618-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KZHYVND24KFSRRA7YPSSI2T72HICGJ3Z/" source="SUSE-SU"/>
    <description>
    The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-7774/">CVE-2020-7774</cve>
	<bugzilla href="https://bugzilla.suse.com/1184450">SUSE bug 1184450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624544" comment="nodejs10-10.24.1-1.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251313" comment="nodejs10 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624545" comment="nodejs10-devel-10.24.1-1.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251314" comment="nodejs10-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624546" comment="nodejs10-docs-10.24.1-1.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251315" comment="nodejs10-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624229" comment="nodejs12-12.22.2-4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294935" comment="nodejs12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624230" comment="nodejs12-devel-12.22.2-4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294936" comment="nodejs12-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624231" comment="nodejs12-docs-12.22.2-4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294937" comment="nodejs12-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624540" comment="nodejs14-14.17.2-5.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009341817" comment="nodejs14 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624541" comment="nodejs14-devel-14.17.2-5.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009341818" comment="nodejs14-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624542" comment="nodejs14-docs-14.17.2-5.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009341819" comment="nodejs14-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626297" comment="nodejs8-8.17.0-10.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230278" comment="nodejs8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626298" comment="nodejs8-devel-8.17.0-10.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230279" comment="nodejs8-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626299" comment="nodejs8-docs-8.17.0-10.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230280" comment="nodejs8-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624547" comment="npm10-10.24.1-1.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251316" comment="npm10 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624232" comment="npm12-12.22.2-4.16.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294938" comment="npm12 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624543" comment="npm14-14.17.2-5.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009341820" comment="npm14 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626300" comment="npm8-8.17.0-10.12.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230281" comment="npm8 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8013</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8013" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8013" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8013" ref_url="https://www.suse.com/security/cve/CVE-2020-8013" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006718.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006559.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006560.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:81-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-March/014050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:82-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-March/014051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006772.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14304-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006558.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009118.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1520-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CDE67H3SKCA2N6SED6KU5T3MBX3UVI6N/" source="SUSE-SU"/>
    <description>
    A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12 permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to 2013.1.7-0.6.12.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8013/">CVE-2020-8013</cve>
	<bugzilla href="https://bugzilla.suse.com/1163922">SUSE bug 1163922</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009619692" comment="permissions-20181225-23.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009273426" comment="permissions is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658913" comment="permissions-zypp-plugin-20200127-lp153.24.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009273427" comment="permissions-zypp-plugin is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208023" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8023</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8023" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8023" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8023" ref_url="https://www.suse.com/security/cve/CVE-2020-8023" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:360-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:363-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:364-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14419-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1856-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0976-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00029.html" source="SUSE-SU"/>
    <description>
    A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE Enterprise Storage 5, SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Point of Sale 11-SP3, SUSE Linux Enterprise Server 11-SECURITY, SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Server for SAP 15, SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud Crowbar 8; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to escalate privileges from user ldap to root. This issue affects: SUSE Enterprise Storage 5 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Debuginfo 11-SP3 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Debuginfo 11-SP4 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Point of Sale 11-SP3 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Server 11-SECURITY openldap2-client-openssl1 versions prior to 2.4.26-0.74.13.1. SUSE Linux Enterprise Server 11-SP4-LTSS openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Server 12-SP2-BCL openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP2-LTSS openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP3-BCL openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP3-LTSS openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP4 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP5 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 15-LTSS openldap2 versions prior to 2.4.46-9.31.1. SUSE Linux Enterprise Server for SAP 12-SP2 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server for SAP 12-SP3 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server for SAP 15 openldap2 versions prior to 2.4.46-9.31.1. SUSE OpenStack Cloud 7 openldap2 versions prior to 2.4.41-18.71.2. SUSE OpenStack Cloud 8 openldap2 versions prior to 2.4.41-18.71.2. SUSE OpenStack Cloud Crowbar 8 openldap2 versions prior to 2.4.41-18.71.2. openSUSE Leap 15.1 openldap2 versions prior to 2.4.46-lp151.10.12.1. openSUSE Leap 15.2 openldap2 versions prior to 2.4.46-lp152.14.3.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8023/">CVE-2020-8023</cve>
	<bugzilla href="https://bugzilla.suse.com/1172698">SUSE bug 1172698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190347">SUSE bug 1190347</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8025</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8025" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8025" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8025" ref_url="https://www.suse.com/security/cve/CVE-2020-8025" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008243.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:45-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008277.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:50-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:51-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008286.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008241.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010922.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1873-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011172.html" source="SUSE-SU"/>
    <description>
    A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Tumbleweed sets the permissions for some of the directories of the pcp package to unintended settings. This issue affects: SUSE Linux Enterprise Server 12-SP4 permissions versions prior to 20170707-3.24.1. SUSE Linux Enterprise Server 15-LTSS permissions versions prior to 20180125-3.27.1. SUSE Linux Enterprise Server for SAP 15 permissions versions prior to 20180125-3.27.1. openSUSE Leap 15.1 permissions versions prior to 20181116-lp151.4.24.1. openSUSE Tumbleweed permissions versions prior to 20200624.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-8025/">CVE-2020-8025</cve>
	<bugzilla href="https://bugzilla.suse.com/1171883">SUSE bug 1171883</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009681147" comment="pcp-pmda-kvm-3.11.9-150000.5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623966" comment="pcp-pmda-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009681148" comment="pcp-pmda-postgresql-3.11.9-150000.5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623967" comment="pcp-pmda-postgresql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694909" comment="permissions-20181225-23.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009273426" comment="permissions is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009681149" comment="python-pcp-3.11.9-150000.5.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623968" comment="python-pcp is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208027" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8027</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8027" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8027" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8027" ref_url="https://www.suse.com/security/cve/CVE-2020-8027" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007456.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007475.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007526.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007454.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2712-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007612.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1539-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00094.html" source="SUSE-SU"/>
    <description>
    A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to overwrite arbitrary files and gain access to the openldap2 configuration This issue affects: SUSE Linux Enterprise Server 15-LTSS openldap2 versions prior to 2.4.46-9.37.1. SUSE Linux Enterprise Server for SAP 15 openldap2 versions prior to 2.4.46-9.37.1. openSUSE Leap 15.1 openldap2 versions prior to 2.4.46-lp151.10.18.1. openSUSE Leap 15.2 openldap2 versions prior to 2.4.46-lp152.14.9.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8027/">CVE-2020-8027</cve>
	<bugzilla href="https://bugzilla.suse.com/1175568">SUSE bug 1175568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694854" comment="libldap-2_4-2-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694855" comment="libldap-2_4-2-32bit-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694856" comment="libldap-data-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694857" comment="openldap2-client-2.4.46-9.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8032</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8032" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8032" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8032" ref_url="https://www.suse.com/security/cve/CVE-2020-8032" source="SUSE CVE"/>
    <description>
    A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 and prior versions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8032/">CVE-2020-8032</cve>
	<bugzilla href="https://bugzilla.suse.com/1180669">SUSE bug 1180669</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628396" comment="cyrus-sasl-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151195" comment="cyrus-sasl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628397" comment="cyrus-sasl-32bit-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177136" comment="cyrus-sasl-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628398" comment="cyrus-sasl-crammd5-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151196" comment="cyrus-sasl-crammd5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628399" comment="cyrus-sasl-crammd5-32bit-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177137" comment="cyrus-sasl-crammd5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628401" comment="cyrus-sasl-digestmd5-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151198" comment="cyrus-sasl-digestmd5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628402" comment="cyrus-sasl-digestmd5-32bit-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177138" comment="cyrus-sasl-digestmd5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628403" comment="cyrus-sasl-gssapi-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151199" comment="cyrus-sasl-gssapi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628404" comment="cyrus-sasl-gssapi-32bit-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177139" comment="cyrus-sasl-gssapi-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628406" comment="cyrus-sasl-plain-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151200" comment="cyrus-sasl-plain is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628407" comment="cyrus-sasl-plain-32bit-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177140" comment="cyrus-sasl-plain-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628408" comment="libsasl2-3-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151201" comment="libsasl2-3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628409" comment="libsasl2-3-32bit-2.1.27-2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151202" comment="libsasl2-3-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8112</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8112" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8112" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8112" ref_url="https://www.suse.com/security/cve/CVE-2020-8112" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010666.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010791.html" source="SUSE-SU"/>
    <description>
    opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-8112/">CVE-2020-8112</cve>
	<bugzilla href="https://bugzilla.suse.com/1162090">SUSE bug 1162090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677917" comment="libopenjp2-7-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009678643" comment="libopenjp2-7-32bit-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679714" comment="libopenjpeg1-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679751" comment="libopenjpeg1-32bit-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153809" comment="libopenjpeg1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679752" comment="openjpeg-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153810" comment="openjpeg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679715" comment="openjpeg-devel-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153811" comment="openjpeg-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679753" comment="openjpeg-devel-32bit-1.5.2-150000.4.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153812" comment="openjpeg-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677918" comment="openjpeg2-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009677919" comment="openjpeg2-devel-2.3.0-150000.3.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8130</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8130" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8130" ref_url="https://www.suse.com/security/cve/CVE-2020-8130" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012195.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html" source="SUSE-SU"/>
    <description>
    There is an OS command injection vulnerability in Ruby Rake &lt; 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-8130/">CVE-2020-8130</cve>
	<bugzilla href="https://bugzilla.suse.com/1164804">SUSE bug 1164804</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628862" comment="libruby2_5-2_5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260282" comment="libruby2_5-2_5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628863" comment="ruby2.5-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260286" comment="ruby2.5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628866" comment="ruby2.5-stdlib-2.5.9-4.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009260296" comment="ruby2.5-stdlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8161</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8161" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8161" ref_url="https://www.suse.com/security/cve/CVE-2020-8161" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012347.html" source="SUSE-SU"/>
    <description>
    A directory traversal vulnerability exists in rack &lt; 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-24"/>
	<updated date="2022-09-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8161/">CVE-2020-8161</cve>
	<bugzilla href="https://bugzilla.suse.com/1172037">SUSE bug 1172037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009713886" comment="ruby2.5-rubygem-rack-2.0.8-150000.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009278437" comment="ruby2.5-rubygem-rack is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009713931" comment="ruby2.5-rubygem-rack-doc-2.0.8-150000.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009278438" comment="ruby2.5-rubygem-rack-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009713932" comment="ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009278439" comment="ruby2.5-rubygem-rack-testsuite is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8169</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8169" ref_url="https://www.suse.com/security/cve/CVE-2020-8169" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0883-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00058.html" source="SUSE-SU"/>
    <description>
    curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8169/">CVE-2020-8169</cve>
	<bugzilla href="https://bugzilla.suse.com/1173026">SUSE bug 1173026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186108">SUSE bug 1186108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8177</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8177" ref_url="https://www.suse.com/security/cve/CVE-2020-8177" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:356-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14409-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1732-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1734-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0883-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00072.html" source="SUSE-SU"/>
    <description>
    curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8177/">CVE-2020-8177</cve>
	<bugzilla href="https://bugzilla.suse.com/1173027">SUSE bug 1173027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186108">SUSE bug 1186108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8184</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8184" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8184" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8184" ref_url="https://www.suse.com/security/cve/CVE-2020-8184" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3036-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007625.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3160-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012347.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1993-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2W26GJJ7QXIADWB6ZCQWC2BUZD2ALYVT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2000-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7MCDUWQEXA3XGI7X2XPATA7YTNVDYTSF/" source="SUSE-SU"/>
    <description>
    A reliance on cookies without validation/integrity check security vulnerability exists in rack &lt; 2.2.3, rack &lt; 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-24"/>
	<updated date="2022-09-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-8184/">CVE-2020-8184</cve>
	<bugzilla href="https://bugzilla.suse.com/1173351">SUSE bug 1173351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177352">SUSE bug 1177352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193081">SUSE bug 1193081</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009713886" comment="ruby2.5-rubygem-rack-2.0.8-150000.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009278437" comment="ruby2.5-rubygem-rack is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009713931" comment="ruby2.5-rubygem-rack-doc-2.0.8-150000.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009278438" comment="ruby2.5-rubygem-rack-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009713932" comment="ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009278439" comment="ruby2.5-rubygem-rack-testsuite is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8231</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8231" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8231" ref_url="https://www.suse.com/security/cve/CVE-2020-8231" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:436-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007394.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007397.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008881.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007457.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007458.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007337.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007328.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2445-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007329.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2446-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007327.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008879.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00069.html" source="SUSE-SU"/>
    <description>
    Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8231/">CVE-2020-8231</cve>
	<bugzilla href="https://bugzilla.suse.com/1175109">SUSE bug 1175109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179399">SUSE bug 1179399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186108">SUSE bug 1186108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8277</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8277" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8277" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8277" ref_url="https://www.suse.com/security/cve/CVE-2020-8277" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007840.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0062-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008168.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2045-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MTWRQJHU72Z3SIFY23FTPWRPBJZFDROF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2092-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L7UCQ5MCCDUAGSMKN2NKE5XIFE37DNED/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0064-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EIIX5B6YLG6I6J4WR546EWZU23BNUSV6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0066-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WYFKSVZAWD7RDU5OST2FANHMDWL4VNM7/" source="SUSE-SU"/>
    <description>
    A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions &lt; 15.2.1, &lt; 14.15.1, and &lt; 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is fixed in 15.2.1, 14.15.1, and 12.19.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8277/">CVE-2020-8277</cve>
	<bugzilla href="https://bugzilla.suse.com/1178882">SUSE bug 1178882</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628330" comment="libcares2-1.17.0-3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153706" comment="libcares2 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208284" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8284</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8284" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8284" ref_url="https://www.suse.com/security/cve/CVE-2020-8284" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:20-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008164.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008881.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:8-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:9-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3739-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008879.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2238-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PRXMLUV5IZ4L22JUMUBU3FUW7BWHV7J7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2249-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W7TJUGEIZONXKJD6DWVYASM2KTYWZ6RI/" source="SUSE-SU"/>
    <description>
    A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8284/">CVE-2020-8284</cve>
	<bugzilla href="https://bugzilla.suse.com/1179398">SUSE bug 1179398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179399">SUSE bug 1179399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186108">SUSE bug 1186108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8285</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8285" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8285" ref_url="https://www.suse.com/security/cve/CVE-2020-8285" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:20-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008164.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008881.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:8-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:9-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3739-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008879.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2238-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PRXMLUV5IZ4L22JUMUBU3FUW7BWHV7J7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2249-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W7TJUGEIZONXKJD6DWVYASM2KTYWZ6RI/" source="SUSE-SU"/>
    <description>
    curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8285/">CVE-2020-8285</cve>
	<bugzilla href="https://bugzilla.suse.com/1179399">SUSE bug 1179399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186108">SUSE bug 1186108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8286</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8286" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8286" ref_url="https://www.suse.com/security/cve/CVE-2020-8286" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007956.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:20-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008164.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008881.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008899.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008900.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:8-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:9-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3739-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008879.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2238-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PRXMLUV5IZ4L22JUMUBU3FUW7BWHV7J7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2249-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W7TJUGEIZONXKJD6DWVYASM2KTYWZ6RI/" source="SUSE-SU"/>
    <description>
    curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-8286/">CVE-2020-8286</cve>
	<bugzilla href="https://bugzilla.suse.com/1179593">SUSE bug 1179593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186108">SUSE bug 1186108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628392" comment="curl-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628394" comment="libcurl4-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628395" comment="libcurl4-32bit-7.66.0-4.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208293" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8293</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8293" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8293" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8293" ref_url="https://www.suse.com/security/cve/CVE-2020-8293" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0262-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RL6T5BYT4RSAM4DNXPXTDKBKHKKNDVHW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0274-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IKPTLKOGRYW4NVA4XTNRDXSK534SPTR2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1068-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XBA6BUWCG7GXG6XVXJPYJLSFVWJRSYU7/" source="SUSE-SU"/>
    <description>
    A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage with those rules.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8293/">CVE-2020-8293</cve>
	<bugzilla href="https://bugzilla.suse.com/1181445">SUSE bug 1181445</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625709" comment="nextcloud-20.0.11-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164979" comment="nextcloud is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625710" comment="nextcloud-apache-20.0.11-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342908" comment="nextcloud-apache is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8294</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8294" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8294" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8294" ref_url="https://www.suse.com/security/cve/CVE-2020-8294" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0262-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RL6T5BYT4RSAM4DNXPXTDKBKHKKNDVHW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0274-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IKPTLKOGRYW4NVA4XTNRDXSK534SPTR2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1068-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XBA6BUWCG7GXG6XVXJPYJLSFVWJRSYU7/" source="SUSE-SU"/>
    <description>
    A missing link validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows execution of a stored XSS attack using Internet Explorer when saving a 'javascript:' URL in markdown format.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8294/">CVE-2020-8294</cve>
	<bugzilla href="https://bugzilla.suse.com/1181803">SUSE bug 1181803</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625709" comment="nextcloud-20.0.11-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164979" comment="nextcloud is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625710" comment="nextcloud-apache-20.0.11-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342908" comment="nextcloud-apache is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8295</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8295" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8295" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8295" ref_url="https://www.suse.com/security/cve/CVE-2020-8295" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0262-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RL6T5BYT4RSAM4DNXPXTDKBKHKKNDVHW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0274-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IKPTLKOGRYW4NVA4XTNRDXSK534SPTR2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1068-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XBA6BUWCG7GXG6XVXJPYJLSFVWJRSYU7/" source="SUSE-SU"/>
    <description>
    A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8295/">CVE-2020-8295</cve>
	<bugzilla href="https://bugzilla.suse.com/1181804">SUSE bug 1181804</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625709" comment="nextcloud-20.0.11-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164979" comment="nextcloud is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625710" comment="nextcloud-apache-20.0.11-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342908" comment="nextcloud-apache is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208428" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8428</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8428" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8428" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8428" ref_url="https://www.suse.com/security/cve/CVE-2020-8428" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0558-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0667-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free, which allows local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9. One attack vector may be an open system call for a UNIX domain socket, if the socket is being moved to a new parent directory and its old parent directory is being removed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8428/">CVE-2020-8428</cve>
	<bugzilla href="https://bugzilla.suse.com/1162109">SUSE bug 1162109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208432" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8432</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8432" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8432" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8432" ref_url="https://www.suse.com/security/cve/CVE-2020-8432" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3256-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007758.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007760.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1930-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HY7PFRXKSIEBEZBSKFM57JGCIQJEJZL6/" source="SUSE-SU"/>
    <description>
    In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a memory leak identified by static analysis.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8432/">CVE-2020-8432</cve>
	<bugzilla href="https://bugzilla.suse.com/1162198">SUSE bug 1162198</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629037" comment="u-boot-rpiarm64-2021.01-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623523" comment="u-boot-rpiarm64 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629038" comment="u-boot-rpiarm64-doc-2021.01-5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623524" comment="u-boot-rpiarm64-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8492</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8492" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8492" ref_url="https://www.suse.com/security/cve/CVE-2020-8492" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:17-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:18-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:19-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3228-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013165.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013169.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3262-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013170.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3378-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:4-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:5-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:7-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1144-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013284.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1145-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013286.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0467-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006520.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006545.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006666.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006878.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007892.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3865-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013149.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2332-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S3JTHM6LLDKL7VPNRJUSRPNZAD2FZ25H/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2333-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FLGERALYYFTBIX3ZKPM6EQ2WJVUXLOXY/" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8492/">CVE-2020-8492</cve>
	<bugzilla href="https://bugzilla.suse.com/1162367">SUSE bug 1162367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628840" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493893" comment="libpython3_6m1_0-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177173" comment="libpython3_6m1_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726418" comment="libpython3_6m1_0-32bit-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009244052" comment="libpython3_6m1_0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628841" comment="python-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628842" comment="python-base-2.7.18-7.55.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493894" comment="python3-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493895" comment="python3-base-3.6.13-3.81.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493896" comment="python3-curses-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493897" comment="python3-dbm-3.6.13-3.81.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726423" comment="python3-devel-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152173" comment="python3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726424" comment="python3-doc-3.6.15-150300.10.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152174" comment="python3-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726425" comment="python3-doc-devhelp-3.6.15-150300.10.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009340456" comment="python3-doc-devhelp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726426" comment="python3-idle-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152176" comment="python3-idle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726427" comment="python3-testsuite-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152177" comment="python3-testsuite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726428" comment="python3-tk-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151919" comment="python3-tk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009726429" comment="python3-tools-3.6.15-150300.10.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152178" comment="python3-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8597</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8597" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8597" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8597" ref_url="https://www.suse.com/security/cve/CVE-2020-8597" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006530.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006528.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0286-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00006.html" source="SUSE-SU"/>
    <description>
    eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2020-8597/">CVE-2020-8597</cve>
	<bugzilla href="https://bugzilla.suse.com/1162610">SUSE bug 1162610</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009487583" comment="ppp-2.4.7-5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152115" comment="ppp is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208608" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8608</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8608" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8608" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8608" ref_url="https://www.suse.com/security/cve/CVE-2020-8608" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006662.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006664.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14396-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14448-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006868.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1514-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006872.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1523-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006874.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2171-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007243.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008673.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008910.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008916.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1894-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1895-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1942-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008990.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1043-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1942-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEKBDJBTGKO53MSKM3SRYVUQDWIJ2N5I/" source="SUSE-SU"/>
    <description>
    In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-8608/">CVE-2020-8608</cve>
	<bugzilla href="https://bugzilla.suse.com/1163018">SUSE bug 1163018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163019">SUSE bug 1163019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695666" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695667" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625288" comment="qemu-audio-alsa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625289" comment="qemu-audio-pa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695668" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695669" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625291" comment="qemu-block-dmg-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625292" comment="qemu-block-gluster-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500107" comment="qemu-block-iscsi-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625293" comment="qemu-block-nfs-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695670" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695671" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500110" comment="qemu-chardev-baum-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695672" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625295" comment="qemu-extra-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695673" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695674" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695675" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695676" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695677" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625300" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695678" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695679" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695680" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625303" comment="qemu-ivshmem-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695681" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500121" comment="qemu-kvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500122" comment="qemu-lang-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695682" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695683" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625305" comment="qemu-s390x-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695684" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695685" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500127" comment="qemu-skiboot-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695686" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695687" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695688" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695689" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695690" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695691" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695692" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625310" comment="qemu-vhost-user-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695693" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8616</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8616" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8616" ref_url="https://www.suse.com/security/cve/CVE-2020-8616" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14400-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007552.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html" source="SUSE-SU"/>
    <description>
    A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to process the referral. This has at least two potential effects: The performance of the recursing server can potentially be degraded by the additional work required to perform these fetches, and The attacker can exploit this behavior to use the recursing server as a reflector in a reflection attack with a high amplification factor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8616/">CVE-2020-8616</cve>
	<bugzilla href="https://bugzilla.suse.com/1109160">SUSE bug 1109160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171740">SUSE bug 1171740</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208617" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8617</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8617" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8617" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8617" ref_url="https://www.suse.com/security/cve/CVE-2020-8617" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14400-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007552.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html" source="SUSE-SU"/>
    <description>
    Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. In releases of BIND dating from March 2018 and after, an assertion check in tsig.c detects this inconsistent state and deliberately exits. Prior to the introduction of the check the server would continue operating in an inconsistent state, with potentially harmful results.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8617/">CVE-2020-8617</cve>
	<bugzilla href="https://bugzilla.suse.com/1109160">SUSE bug 1109160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171740">SUSE bug 1171740</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8618</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8618" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8618" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8618" ref_url="https://www.suse.com/security/cve/CVE-2020-8618" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007552.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html" source="SUSE-SU"/>
    <description>
    An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8618/">CVE-2020-8618</cve>
	<bugzilla href="https://bugzilla.suse.com/1172958">SUSE bug 1172958</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8619</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8619" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8619" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8619" ref_url="https://www.suse.com/security/cve/CVE-2020-8619" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007552.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html" source="SUSE-SU"/>
    <description>
    In ISC BIND9 versions BIND 9.11.14 -&gt; 9.11.19, BIND 9.14.9 -&gt; 9.14.12, BIND 9.16.0 -&gt; 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -&gt; 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains an empty non-terminal entry containing an asterisk ("*") character, this defect cannot be encountered. A would-be attacker who is allowed to change zone content could theoretically introduce such a record in order to exploit this condition to cause denial of service, though we consider the use of this vector unlikely because any such attack would require a significant privilege level and be easily traceable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8619/">CVE-2020-8619</cve>
	<bugzilla href="https://bugzilla.suse.com/1172958">SUSE bug 1172958</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8620</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8620" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8620" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8620" ref_url="https://www.suse.com/security/cve/CVE-2020-8620" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007552.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html" source="SUSE-SU"/>
    <description>
    In BIND 9.15.6 -&gt; 9.16.5, 9.17.0 -&gt; 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8620/">CVE-2020-8620</cve>
	<bugzilla href="https://bugzilla.suse.com/1175443">SUSE bug 1175443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191120">SUSE bug 1191120</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8621</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8621" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8621" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8621" ref_url="https://www.suse.com/security/cve/CVE-2020-8621" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007552.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html" source="SUSE-SU"/>
    <description>
    In BIND 9.14.0 -&gt; 9.16.5, 9.17.0 -&gt; 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8621/">CVE-2020-8621</cve>
	<bugzilla href="https://bugzilla.suse.com/1175443">SUSE bug 1175443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191120">SUSE bug 1191120</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8622</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8622" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8622" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8622" ref_url="https://www.suse.com/security/cve/CVE-2020-8622" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007552.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009368.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html" source="SUSE-SU"/>
    <description>
    In BIND 9.0.0 -&gt; 9.11.21, 9.12.0 -&gt; 9.16.5, 9.17.0 -&gt; 9.17.3, also affects 9.9.3-S1 -&gt; 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, could send a truncated response to that request, triggering an assertion failure, causing the server to exit. Alternately, an off-path attacker would have to correctly guess when a TSIG-signed request was sent, along with other characteristics of the packet and message, and spoof a truncated response to trigger an assertion failure, causing the server to exit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8622/">CVE-2020-8622</cve>
	<bugzilla href="https://bugzilla.suse.com/1175443">SUSE bug 1175443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188888">SUSE bug 1188888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191120">SUSE bug 1191120</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8623</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8623" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8623" ref_url="https://www.suse.com/security/cve/CVE-2020-8623" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007552.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html" source="SUSE-SU"/>
    <description>
    In BIND 9.10.0 -&gt; 9.11.21, 9.12.0 -&gt; 9.16.5, 9.17.0 -&gt; 9.17.3, also affects 9.10.5-S1 -&gt; 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the system must: * be running BIND that was built with "--enable-native-pkcs11" * be signing one or more zones with an RSA key * be able to receive queries from a possible attacker
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8623/">CVE-2020-8623</cve>
	<bugzilla href="https://bugzilla.suse.com/1175443">SUSE bug 1175443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191120">SUSE bug 1191120</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8624</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8624" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8624" ref_url="https://www.suse.com/security/cve/CVE-2020-8624" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007552.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html" source="SUSE-SU"/>
    <description>
    In BIND 9.9.12 -&gt; 9.9.13, 9.10.7 -&gt; 9.10.8, 9.11.3 -&gt; 9.11.21, 9.12.1 -&gt; 9.16.5, 9.17.0 -&gt; 9.17.3, also affects 9.9.12-S1 -&gt; 9.9.13-S1, 9.11.3-S1 -&gt; 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the zone's content could abuse these unintended additional privileges to update other contents of the zone.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8624/">CVE-2020-8624</cve>
	<bugzilla href="https://bugzilla.suse.com/1175443">SUSE bug 1175443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191120">SUSE bug 1191120</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629761" comment="bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629762" comment="bind-chrootenv-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628313" comment="bind-utils-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628314" comment="libbind9-1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296220" comment="libbind9-1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628315" comment="libdns1605-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296222" comment="libdns1605 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628317" comment="libirs1601-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296224" comment="libirs1601 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628318" comment="libisc1606-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296226" comment="libisc1606 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628319" comment="libisccc1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296228" comment="libisccc1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628320" comment="libisccfg1600-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296230" comment="libisccfg1600 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628321" comment="libns1604-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009296232" comment="libns1604 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628322" comment="python3-bind-9.16.6-20.39 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177148" comment="python3-bind is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208647" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8647</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8647" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8647" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8647" ref_url="https://www.suse.com/security/cve/CVE-2020-8647" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1085-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006753.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00039.html" source="SUSE-SU"/>
    <description>
    There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8647/">CVE-2020-8647</cve>
	<bugzilla href="https://bugzilla.suse.com/1162929">SUSE bug 1162929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164078">SUSE bug 1164078</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8648</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8648" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8648" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8648" ref_url="https://www.suse.com/security/cve/CVE-2020-8648" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0558-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0667-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0688-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006612.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8648/">CVE-2020-8648</cve>
	<bugzilla href="https://bugzilla.suse.com/1162928">SUSE bug 1162928</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208649" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8649</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8649" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8649" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8649" ref_url="https://www.suse.com/security/cve/CVE-2020-8649" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1085-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006753.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00039.html" source="SUSE-SU"/>
    <description>
    There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8649/">CVE-2020-8649</cve>
	<bugzilla href="https://bugzilla.suse.com/1162929">SUSE bug 1162929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162931">SUSE bug 1162931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8663</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8663" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8663" ref_url="https://www.suse.com/security/cve/CVE-2020-8663" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:50-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:51-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008286.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WUFXLLYPEPLGLE3CNOENBUDET76YJXPI/" source="SUSE-SU"/>
    <description>
    Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may exhaust file descriptors and/or memory when accepting too many connections.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8663/">CVE-2020-8663</cve>
	<bugzilla href="https://bugzilla.suse.com/1173559">SUSE bug 1173559</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670542" comment="envoy-proxy-1.14.6-bp153.3.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009670589" comment="envoy-proxy is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009670543" comment="envoy-proxy-source-1.14.6-bp153.3.4.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009670590" comment="envoy-proxy-source is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8694</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8694" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007969.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007971.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007748.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007876.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3651-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007930.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007937.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007938.html" source="SUSE-SU"/>
		<reference ref_id="TID000019778" ref_url="https://www.suse.com/support/kb/doc/?id=000019778" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1906-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W7MTGDUP74HR4XORTRYN7I7MANTKWCGQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2112-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0242-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOAUJM2XDOB5Y2JL726SBZNXGQBPQC75/" source="SUSE-SU"/>
    <description>
    Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<bugzilla href="https://bugzilla.suse.com/1170415">SUSE bug 1170415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170446">SUSE bug 1170446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178591">SUSE bug 1178591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178700">SUSE bug 1178700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179661">SUSE bug 1179661</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8695</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8695" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8695" ref_url="https://www.suse.com/security/cve/CVE-2020-8695" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007804.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3271-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-November/016830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007744.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007757.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007796.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3373-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007808.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3457-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3514-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007937.html" source="SUSE-SU"/>
		<reference ref_id="TID000019778" ref_url="https://www.suse.com/support/kb/doc/?id=000019778" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1915-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RDFLVEOG7TX6Q4WKP6Q53CLGQ3KKC2GT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1923-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L4M7N2LSLXLVXOCOXVRUDWN2YU7CBOGZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JAVL7PXBHMY5MEXAKSQM6PTNW6CHJJC2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2098-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TF4HQIBGSJ2IFTYIDCJW5IFFEG62DCU5/" source="SUSE-SU"/>
    <description>
    Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8695/">CVE-2020-8695</cve>
	<bugzilla href="https://bugzilla.suse.com/1170415">SUSE bug 1170415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170446">SUSE bug 1170446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178591">SUSE bug 1178591</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629040" comment="ucode-intel-20210216-2.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8696</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8696" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8696" ref_url="https://www.suse.com/security/cve/CVE-2020-8696" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007804.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007796.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3373-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007808.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3457-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3514-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007857.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JAVL7PXBHMY5MEXAKSQM6PTNW6CHJJC2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2098-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TF4HQIBGSJ2IFTYIDCJW5IFFEG62DCU5/" source="SUSE-SU"/>
    <description>
    Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8696/">CVE-2020-8696</cve>
	<bugzilla href="https://bugzilla.suse.com/1173592">SUSE bug 1173592</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629040" comment="ucode-intel-20210216-2.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8698</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8698" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8698" ref_url="https://www.suse.com/security/cve/CVE-2020-8698" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007804.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3271-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-November/016830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007744.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007757.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007796.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3373-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007808.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3457-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3514-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007857.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1915-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RDFLVEOG7TX6Q4WKP6Q53CLGQ3KKC2GT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1923-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L4M7N2LSLXLVXOCOXVRUDWN2YU7CBOGZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2075-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JAVL7PXBHMY5MEXAKSQM6PTNW6CHJJC2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2098-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TF4HQIBGSJ2IFTYIDCJW5IFFEG62DCU5/" source="SUSE-SU"/>
    <description>
    Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8698/">CVE-2020-8698</cve>
	<bugzilla href="https://bugzilla.suse.com/1173594">SUSE bug 1173594</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629040" comment="ucode-intel-20210216-2.19.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8835</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8835" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8835" ref_url="https://www.suse.com/security/cve/CVE-2020-8835" source="SUSE CVE"/>
    <description>
    In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8835/">CVE-2020-8835</cve>
	<bugzilla href="https://bugzilla.suse.com/1167722">SUSE bug 1167722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173755">SUSE bug 1173755</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208927" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8927</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8927" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8927" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8927" ref_url="https://www.suse.com/security/cve/CVE-2020-8927" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3942-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009849.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1578-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3942-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EBYPFIZJBUFNGB65ETC2USVDXZRAANZW/" source="SUSE-SU"/>
    <description>
    A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8927/">CVE-2020-8927</cve>
	<bugzilla href="https://bugzilla.suse.com/1175825">SUSE bug 1175825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658749" comment="brotli-1.0.7-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294770" comment="brotli is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658531" comment="libbrotli-devel-1.0.7-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294771" comment="libbrotli-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658532" comment="libbrotlicommon1-1.0.7-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294772" comment="libbrotlicommon1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658750" comment="libbrotlicommon1-32bit-1.0.7-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294773" comment="libbrotlicommon1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658533" comment="libbrotlidec1-1.0.7-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294774" comment="libbrotlidec1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658751" comment="libbrotlidec1-32bit-1.0.7-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294775" comment="libbrotlidec1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658534" comment="libbrotlienc1-1.0.7-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294776" comment="libbrotlienc1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658752" comment="libbrotlienc1-32bit-1.0.7-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009294777" comment="libbrotlienc1-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20208992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-8992</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-8992" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8992" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-8992" ref_url="https://www.suse.com/security/cve/CVE-2020-8992" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0558-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006576.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0667-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0688-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006612.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html" source="SUSE-SU"/>
    <description>
    ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8992/">CVE-2020-8992</cve>
	<bugzilla href="https://bugzilla.suse.com/1164069">SUSE bug 1164069</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209327" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9327</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9327" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9327" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9327" ref_url="https://www.suse.com/security/cve/CVE-2020-9327" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-9327/">CVE-2020-9327</cve>
	<bugzilla href="https://bugzilla.suse.com/1164719">SUSE bug 1164719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625114" comment="sqlite3-doc-3.36.0-3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209359" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9359</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9359" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9359" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9359" ref_url="https://www.suse.com/security/cve/CVE-2020-9359" source="SUSE CVE"/>
    <description>
    KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9359/">CVE-2020-9359</cve>
	<bugzilla href="https://bugzilla.suse.com/1167435">SUSE bug 1167435</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694904" comment="okular-20.04.2-bp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009234588" comment="okular is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694905" comment="okular-lang-20.04.2-bp153.1.31 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009234592" comment="okular-lang is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9383</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9383" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9383" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9383" ref_url="https://www.suse.com/security/cve/CVE-2020-9383" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1085-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006753.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006770.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006971.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00039.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it, aka CID-2e90ca68b0d2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-9383/">CVE-2020-9383</cve>
	<bugzilla href="https://bugzilla.suse.com/1165111">SUSE bug 1165111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9490</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9490" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9490" ref_url="https://www.suse.com/security/cve/CVE-2020-9490" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007291.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2450-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007655.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1792-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00081.html" source="SUSE-SU"/>
    <description>
    Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability for unpatched servers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-9490/">CVE-2020-9490</cve>
	<bugzilla href="https://bugzilla.suse.com/1175071">SUSE bug 1175071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178074">SUSE bug 1178074</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628269" comment="apache2-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629758" comment="apache2-doc-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694714" comment="apache2-example-pages-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628270" comment="apache2-prefork-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628271" comment="apache2-utils-2.4.43-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9802</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9802" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9802" ref_url="https://www.suse.com/security/cve/CVE-2020-9802" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9802/">CVE-2020-9802</cve>
	<bugzilla href="https://bugzilla.suse.com/1173998">SUSE bug 1173998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9803</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9803" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9803" ref_url="https://www.suse.com/security/cve/CVE-2020-9803" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9803/">CVE-2020-9803</cve>
	<bugzilla href="https://bugzilla.suse.com/1173998">SUSE bug 1173998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9805</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9805" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9805" ref_url="https://www.suse.com/security/cve/CVE-2020-9805" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to universal cross site scripting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9805/">CVE-2020-9805</cve>
	<bugzilla href="https://bugzilla.suse.com/1173998">SUSE bug 1173998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9806</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9806" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9806" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9806" ref_url="https://www.suse.com/security/cve/CVE-2020-9806" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007191.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00074.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9806/">CVE-2020-9806</cve>
	<bugzilla href="https://bugzilla.suse.com/1173998">SUSE bug 1173998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9807</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9807" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9807" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9807" ref_url="https://www.suse.com/security/cve/CVE-2020-9807" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007191.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00074.html" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9807/">CVE-2020-9807</cve>
	<bugzilla href="https://bugzilla.suse.com/1173998">SUSE bug 1173998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9843</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9843" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9843" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9843" ref_url="https://www.suse.com/security/cve/CVE-2020-9843" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007191.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00074.html" source="SUSE-SU"/>
    <description>
    An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to a cross site scripting attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9843/">CVE-2020-9843</cve>
	<bugzilla href="https://bugzilla.suse.com/1173998">SUSE bug 1173998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209850" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9850</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9850" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9850" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9850" ref_url="https://www.suse.com/security/cve/CVE-2020-9850" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007191.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00074.html" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. A remote attacker may be able to cause arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9850/">CVE-2020-9850</cve>
	<bugzilla href="https://bugzilla.suse.com/1173998">SUSE bug 1173998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9862</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9862" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9862" ref_url="https://www.suse.com/security/cve/CVE-2020-9862" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007250.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007263.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00062.html" source="SUSE-SU"/>
    <description>
    A command injection issue existed in Web Inspector. This issue was addressed with improved escaping. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Copying a URL from Web Inspector may lead to command injection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9862/">CVE-2020-9862</cve>
	<bugzilla href="https://bugzilla.suse.com/1174662">SUSE bug 1174662</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209893" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9893</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9893" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9893" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9893" ref_url="https://www.suse.com/security/cve/CVE-2020-9893" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007250.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007263.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00062.html" source="SUSE-SU"/>
    <description>
    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9893/">CVE-2020-9893</cve>
	<bugzilla href="https://bugzilla.suse.com/1174662">SUSE bug 1174662</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209894" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9894</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9894" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9894" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9894" ref_url="https://www.suse.com/security/cve/CVE-2020-9894" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007250.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007263.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00062.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-9894/">CVE-2020-9894</cve>
	<bugzilla href="https://bugzilla.suse.com/1174662">SUSE bug 1174662</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9895</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9895" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9895" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9895" ref_url="https://www.suse.com/security/cve/CVE-2020-9895" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007250.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007263.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00062.html" source="SUSE-SU"/>
    <description>
    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9895/">CVE-2020-9895</cve>
	<bugzilla href="https://bugzilla.suse.com/1174662">SUSE bug 1174662</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209915" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9915</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9915" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9915" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9915" ref_url="https://www.suse.com/security/cve/CVE-2020-9915" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007250.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007263.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00062.html" source="SUSE-SU"/>
    <description>
    An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-9915/">CVE-2020-9915</cve>
	<bugzilla href="https://bugzilla.suse.com/1174662">SUSE bug 1174662</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209925" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9925</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9925" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9925" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9925" ref_url="https://www.suse.com/security/cve/CVE-2020-9925" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007250.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007263.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00062.html" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may lead to universal cross site scripting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-9925/">CVE-2020-9925</cve>
	<bugzilla href="https://bugzilla.suse.com/1174662">SUSE bug 1174662</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9947</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9947" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9947" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9947" ref_url="https://www.suse.com/security/cve/CVE-2020-9947" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9947/">CVE-2020-9947</cve>
	<bugzilla href="https://bugzilla.suse.com/1184262">SUSE bug 1184262</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664283" comment="libjavascriptcoregtk-4_0-18-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664284" comment="libwebkit2gtk-4_0-37-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664285" comment="libwebkit2gtk3-lang-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664296" comment="typelib-1_0-JavaScriptCore-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664297" comment="typelib-1_0-WebKit2-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664286" comment="webkit2gtk-4_0-injected-bundles-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209948" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9948</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9948" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9948" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9948" ref_url="https://www.suse.com/security/cve/CVE-2020-9948" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3867-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2304-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7IUIQR7TXEJAY36F5QQB7QCCGHWKYG7E/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2310-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GFB3TOJ4CYRIFTJV3HUC6V24BQQDJYA4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9948/">CVE-2020-9948</cve>
	<bugzilla href="https://bugzilla.suse.com/1179122">SUSE bug 1179122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179910">SUSE bug 1179910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179911">SUSE bug 1179911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179912">SUSE bug 1179912</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209951" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9951</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9951" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9951" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9951" ref_url="https://www.suse.com/security/cve/CVE-2020-9951" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3867-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2304-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7IUIQR7TXEJAY36F5QQB7QCCGHWKYG7E/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2310-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GFB3TOJ4CYRIFTJV3HUC6V24BQQDJYA4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9951/">CVE-2020-9951</cve>
	<bugzilla href="https://bugzilla.suse.com/1179122">SUSE bug 1179122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179910">SUSE bug 1179910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179911">SUSE bug 1179911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179912">SUSE bug 1179912</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209952" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9952</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9952" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9952" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9952" ref_url="https://www.suse.com/security/cve/CVE-2020-9952" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scripting attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-9952/">CVE-2020-9952</cve>
	<bugzilla href="https://bugzilla.suse.com/1179122">SUSE bug 1179122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179910">SUSE bug 1179910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179911">SUSE bug 1179911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179912">SUSE bug 1179912</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664283" comment="libjavascriptcoregtk-4_0-18-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664284" comment="libwebkit2gtk-4_0-37-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664285" comment="libwebkit2gtk3-lang-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664296" comment="typelib-1_0-JavaScriptCore-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664297" comment="typelib-1_0-WebKit2-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664286" comment="webkit2gtk-4_0-injected-bundles-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20209983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2020-9983</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2020-9983" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9983" source="CVE"/>
    <reference ref_id="SUSE CVE-2020-9983" ref_url="https://www.suse.com/security/cve/CVE-2020-9983" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3867-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2304-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7IUIQR7TXEJAY36F5QQB7QCCGHWKYG7E/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2310-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GFB3TOJ4CYRIFTJV3HUC6V24BQQDJYA4/" source="SUSE-SU"/>
    <description>
    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9983/">CVE-2020-9983</cve>
	<bugzilla href="https://bugzilla.suse.com/1179122">SUSE bug 1179122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179910">SUSE bug 1179910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179911">SUSE bug 1179911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179912">SUSE bug 1179912</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0066</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0066" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0066" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0066" ref_url="https://www.suse.com/security/cve/CVE-2021-0066" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2/" source="SUSE-SU"/>
    <description>
    Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0066/">CVE-2021-0066</cve>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671003" comment="kernel-firmware-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671024" comment="kernel-firmware-all-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671025" comment="kernel-firmware-amdgpu-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671026" comment="kernel-firmware-ath10k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671027" comment="kernel-firmware-ath11k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671028" comment="kernel-firmware-atheros-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671029" comment="kernel-firmware-bluetooth-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671030" comment="kernel-firmware-bnx2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671004" comment="kernel-firmware-brcm-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671031" comment="kernel-firmware-chelsio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671032" comment="kernel-firmware-dpaa2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671033" comment="kernel-firmware-i915-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671034" comment="kernel-firmware-intel-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671035" comment="kernel-firmware-iwlwifi-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671036" comment="kernel-firmware-liquidio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671037" comment="kernel-firmware-marvell-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671038" comment="kernel-firmware-media-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671039" comment="kernel-firmware-mediatek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671040" comment="kernel-firmware-mellanox-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671041" comment="kernel-firmware-mwifiex-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671042" comment="kernel-firmware-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671043" comment="kernel-firmware-nfp-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671044" comment="kernel-firmware-nvidia-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671045" comment="kernel-firmware-platform-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671046" comment="kernel-firmware-prestera-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671047" comment="kernel-firmware-qlogic-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671048" comment="kernel-firmware-radeon-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671049" comment="kernel-firmware-realtek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671050" comment="kernel-firmware-serial-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671051" comment="kernel-firmware-sound-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671052" comment="kernel-firmware-ti-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671053" comment="kernel-firmware-ueagle-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671054" comment="kernel-firmware-usb-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671005" comment="ucode-amd-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0071</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0071" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0071" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0071" ref_url="https://www.suse.com/security/cve/CVE-2021-0071" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010613.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2/" source="SUSE-SU"/>
    <description>
    Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0071/">CVE-2021-0071</cve>
	<bugzilla href="https://bugzilla.suse.com/1192953">SUSE bug 1192953</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671003" comment="kernel-firmware-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671024" comment="kernel-firmware-all-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671025" comment="kernel-firmware-amdgpu-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671026" comment="kernel-firmware-ath10k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671027" comment="kernel-firmware-ath11k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671028" comment="kernel-firmware-atheros-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671029" comment="kernel-firmware-bluetooth-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671030" comment="kernel-firmware-bnx2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671004" comment="kernel-firmware-brcm-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671031" comment="kernel-firmware-chelsio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671032" comment="kernel-firmware-dpaa2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671033" comment="kernel-firmware-i915-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671034" comment="kernel-firmware-intel-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671035" comment="kernel-firmware-iwlwifi-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671036" comment="kernel-firmware-liquidio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671037" comment="kernel-firmware-marvell-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671038" comment="kernel-firmware-media-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671039" comment="kernel-firmware-mediatek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671040" comment="kernel-firmware-mellanox-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671041" comment="kernel-firmware-mwifiex-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671042" comment="kernel-firmware-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671043" comment="kernel-firmware-nfp-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671044" comment="kernel-firmware-nvidia-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671045" comment="kernel-firmware-platform-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671046" comment="kernel-firmware-prestera-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671047" comment="kernel-firmware-qlogic-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671048" comment="kernel-firmware-radeon-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671049" comment="kernel-firmware-realtek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671050" comment="kernel-firmware-serial-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671051" comment="kernel-firmware-sound-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671052" comment="kernel-firmware-ti-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671053" comment="kernel-firmware-ueagle-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671054" comment="kernel-firmware-usb-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671005" comment="ucode-amd-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0072</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0072" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0072" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0072" ref_url="https://www.suse.com/security/cve/CVE-2021-0072" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2/" source="SUSE-SU"/>
    <description>
    Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable information disclosure via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0072/">CVE-2021-0072</cve>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671003" comment="kernel-firmware-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671024" comment="kernel-firmware-all-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671025" comment="kernel-firmware-amdgpu-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671026" comment="kernel-firmware-ath10k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671027" comment="kernel-firmware-ath11k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671028" comment="kernel-firmware-atheros-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671029" comment="kernel-firmware-bluetooth-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671030" comment="kernel-firmware-bnx2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671004" comment="kernel-firmware-brcm-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671031" comment="kernel-firmware-chelsio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671032" comment="kernel-firmware-dpaa2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671033" comment="kernel-firmware-i915-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671034" comment="kernel-firmware-intel-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671035" comment="kernel-firmware-iwlwifi-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671036" comment="kernel-firmware-liquidio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671037" comment="kernel-firmware-marvell-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671038" comment="kernel-firmware-media-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671039" comment="kernel-firmware-mediatek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671040" comment="kernel-firmware-mellanox-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671041" comment="kernel-firmware-mwifiex-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671042" comment="kernel-firmware-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671043" comment="kernel-firmware-nfp-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671044" comment="kernel-firmware-nvidia-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671045" comment="kernel-firmware-platform-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671046" comment="kernel-firmware-prestera-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671047" comment="kernel-firmware-qlogic-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671048" comment="kernel-firmware-radeon-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671049" comment="kernel-firmware-realtek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671050" comment="kernel-firmware-serial-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671051" comment="kernel-firmware-sound-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671052" comment="kernel-firmware-ti-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671053" comment="kernel-firmware-ueagle-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671054" comment="kernel-firmware-usb-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671005" comment="ucode-amd-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0076</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0076" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0076" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0076" ref_url="https://www.suse.com/security/cve/CVE-2021-0076" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2/" source="SUSE-SU"/>
    <description>
    Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable denial of service via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0076/">CVE-2021-0076</cve>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671003" comment="kernel-firmware-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671024" comment="kernel-firmware-all-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671025" comment="kernel-firmware-amdgpu-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671026" comment="kernel-firmware-ath10k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671027" comment="kernel-firmware-ath11k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671028" comment="kernel-firmware-atheros-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671029" comment="kernel-firmware-bluetooth-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671030" comment="kernel-firmware-bnx2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671004" comment="kernel-firmware-brcm-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671031" comment="kernel-firmware-chelsio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671032" comment="kernel-firmware-dpaa2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671033" comment="kernel-firmware-i915-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671034" comment="kernel-firmware-intel-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671035" comment="kernel-firmware-iwlwifi-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671036" comment="kernel-firmware-liquidio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671037" comment="kernel-firmware-marvell-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671038" comment="kernel-firmware-media-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671039" comment="kernel-firmware-mediatek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671040" comment="kernel-firmware-mellanox-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671041" comment="kernel-firmware-mwifiex-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671042" comment="kernel-firmware-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671043" comment="kernel-firmware-nfp-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671044" comment="kernel-firmware-nvidia-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671045" comment="kernel-firmware-platform-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671046" comment="kernel-firmware-prestera-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671047" comment="kernel-firmware-qlogic-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671048" comment="kernel-firmware-radeon-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671049" comment="kernel-firmware-realtek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671050" comment="kernel-firmware-serial-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671051" comment="kernel-firmware-sound-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671052" comment="kernel-firmware-ti-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671053" comment="kernel-firmware-ueagle-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671054" comment="kernel-firmware-usb-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671005" comment="ucode-amd-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0089</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0089" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0089" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0089" ref_url="https://www.suse.com/security/cve/CVE-2021-0089" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:659-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009437.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:660-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-September/020142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2922-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009389.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2923-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009381.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2924-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009390.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009395.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2943-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2955-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2957-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009548.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1236-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VYJVCSKTOQY75TLGWH3HDYZAS33JTOTQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2923-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JLC632KAG76ZVELO6CCNNSZVUXPDVXOQ/" source="SUSE-SU"/>
    <description>
    Observable response discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0089/">CVE-2021-0089</cve>
	<bugzilla href="https://bugzilla.suse.com/1186433">SUSE bug 1186433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632337" comment="xen-4.14.2_04-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632338" comment="xen-devel-4.14.2_04-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632339" comment="xen-doc-html-4.14.2_04-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632340" comment="xen-libs-4.14.2_04-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632341" comment="xen-libs-32bit-4.14.2_04-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632342" comment="xen-tools-4.14.2_04-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632343" comment="xen-tools-domU-4.14.2_04-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009632254" comment="xen-tools-xendomains-wait-disk-4.14.2_04-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291434" comment="xen-tools-xendomains-wait-disk is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0127</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0127" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0127" ref_url="https://www.suse.com/security/cve/CVE-2021-0127" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010310.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0576-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010309.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0574-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W7QEMHXA4R2RUIQPQL2RSCQ7TBADKDOH/" source="SUSE-SU"/>
    <description>
    Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0127/">CVE-2021-0127</cve>
	<bugzilla href="https://bugzilla.suse.com/1195779">SUSE bug 1195779</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667863" comment="ucode-intel-20220207-10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0129</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0129" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0129" ref_url="https://www.suse.com/security/cve/CVE-2021-0129" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2406-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2422-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2426-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3691-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012602.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2184-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GJZ4RMNGAPDHTNV6KJGNPSEJH2RUZFKU/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2202-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/T4PWFRJWECGAGZTBIOYHZ6KUMSA6KC43/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2291-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FGEHNTYN7DOZBN7IPNNCVSIU2JNPC226/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2427-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HJIMD6XIKYMKE35TUYXKKYPX4737LEVU/" source="SUSE-SU"/>
    <description>
    Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-0129/">CVE-2021-0129</cve>
	<bugzilla href="https://bugzilla.suse.com/1186463">SUSE bug 1186463</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615874" comment="bluez-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165944" comment="bluez is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624651" comment="bluez-auto-enable-devices-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009242424" comment="bluez-auto-enable-devices is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625355" comment="bluez-cups-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165946" comment="bluez-cups is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625356" comment="bluez-deprecated-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009624698" comment="bluez-deprecated is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615895" comment="bluez-devel-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165948" comment="bluez-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624655" comment="bluez-devel-32bit-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165950" comment="bluez-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625357" comment="bluez-test-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165952" comment="bluez-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621377" comment="cluster-md-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621419" comment="cluster-md-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615914" comment="cluster-md-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621378" comment="cluster-md-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621379" comment="dlm-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621420" comment="dlm-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615915" comment="dlm-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621380" comment="dlm-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621381" comment="gfs2-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621421" comment="gfs2-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615916" comment="gfs2-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621382" comment="gfs2-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615876" comment="kernel-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615877" comment="kernel-64kb-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621383" comment="kernel-64kb-extra-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621384" comment="kernel-64kb-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621385" comment="kernel-64kb-optional-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615909" comment="kernel-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615910" comment="kernel-azure-devel-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621422" comment="kernel-azure-extra-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621423" comment="kernel-azure-livepatch-devel-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621424" comment="kernel-azure-optional-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621386" comment="kernel-debug-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625875" comment="kernel-debug-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621387" comment="kernel-debug-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621388" comment="kernel-debug-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615878" comment="kernel-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615879" comment="kernel-default-base-5.3.18-59.10.1.18.4.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621389" comment="kernel-default-base-rebuild-5.3.18-59.10.1.18.4.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615880" comment="kernel-default-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621390" comment="kernel-default-extra-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621391" comment="kernel-default-livepatch-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621392" comment="kernel-default-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625696" comment="kernel-default-man-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621393" comment="kernel-default-optional-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615881" comment="kernel-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615911" comment="kernel-devel-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615897" comment="kernel-docs-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621394" comment="kernel-docs-html-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621395" comment="kernel-kvmsmall-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625876" comment="kernel-kvmsmall-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621396" comment="kernel-kvmsmall-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621397" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615882" comment="kernel-macros-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615898" comment="kernel-obs-build-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621399" comment="kernel-obs-qa-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615883" comment="kernel-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615899" comment="kernel-preempt-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621400" comment="kernel-preempt-extra-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621401" comment="kernel-preempt-livepatch-devel-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621402" comment="kernel-preempt-optional-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615900" comment="kernel-source-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615912" comment="kernel-source-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621403" comment="kernel-source-vanilla-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615901" comment="kernel-syms-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615913" comment="kernel-syms-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625877" comment="kernel-vanilla-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625878" comment="kernel-vanilla-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625879" comment="kernel-vanilla-devel-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625880" comment="kernel-vanilla-livepatch-devel-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615884" comment="kernel-zfcpdump-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625881" comment="kernel-zfcpdump-man-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621404" comment="kselftests-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621425" comment="kselftests-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621405" comment="kselftests-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621406" comment="kselftests-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615875" comment="libbluetooth3-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165954" comment="libbluetooth3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624659" comment="libbluetooth3-32bit-5.55-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009165956" comment="libbluetooth3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621407" comment="ocfs2-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621426" comment="ocfs2-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615917" comment="ocfs2-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621408" comment="ocfs2-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621409" comment="reiserfs-kmp-64kb-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621427" comment="reiserfs-kmp-azure-5.3.18-38.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009615902" comment="reiserfs-kmp-default-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621410" comment="reiserfs-kmp-preempt-5.3.18-59.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0145</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0145" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0145" ref_url="https://www.suse.com/security/cve/CVE-2021-0145" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010310.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0576-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010309.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0574-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W7QEMHXA4R2RUIQPQL2RSCQ7TBADKDOH/" source="SUSE-SU"/>
    <description>
    Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0145/">CVE-2021-0145</cve>
	<bugzilla href="https://bugzilla.suse.com/1195780">SUSE bug 1195780</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667863" comment="ucode-intel-20220207-10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0146</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0146" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0146" ref_url="https://www.suse.com/security/cve/CVE-2021-0146" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010310.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0576-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010309.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0574-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W7QEMHXA4R2RUIQPQL2RSCQ7TBADKDOH/" source="SUSE-SU"/>
    <description>
    Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0146/">CVE-2021-0146</cve>
	<bugzilla href="https://bugzilla.suse.com/1192615">SUSE bug 1192615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193500">SUSE bug 1193500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200661">SUSE bug 1200661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200663">SUSE bug 1200663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205062">SUSE bug 1205062</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667863" comment="ucode-intel-20220207-10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009169251" comment="ucode-intel is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0161</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0161" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0161" ref_url="https://www.suse.com/security/cve/CVE-2021-0161" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2/" source="SUSE-SU"/>
    <description>
    Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0161/">CVE-2021-0161</cve>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671003" comment="kernel-firmware-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671024" comment="kernel-firmware-all-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671025" comment="kernel-firmware-amdgpu-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671026" comment="kernel-firmware-ath10k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671027" comment="kernel-firmware-ath11k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671028" comment="kernel-firmware-atheros-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671029" comment="kernel-firmware-bluetooth-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671030" comment="kernel-firmware-bnx2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671004" comment="kernel-firmware-brcm-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671031" comment="kernel-firmware-chelsio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671032" comment="kernel-firmware-dpaa2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671033" comment="kernel-firmware-i915-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671034" comment="kernel-firmware-intel-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671035" comment="kernel-firmware-iwlwifi-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671036" comment="kernel-firmware-liquidio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671037" comment="kernel-firmware-marvell-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671038" comment="kernel-firmware-media-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671039" comment="kernel-firmware-mediatek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671040" comment="kernel-firmware-mellanox-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671041" comment="kernel-firmware-mwifiex-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671042" comment="kernel-firmware-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671043" comment="kernel-firmware-nfp-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671044" comment="kernel-firmware-nvidia-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671045" comment="kernel-firmware-platform-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671046" comment="kernel-firmware-prestera-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671047" comment="kernel-firmware-qlogic-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671048" comment="kernel-firmware-radeon-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671049" comment="kernel-firmware-realtek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671050" comment="kernel-firmware-serial-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671051" comment="kernel-firmware-sound-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671052" comment="kernel-firmware-ti-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671053" comment="kernel-firmware-ueagle-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671054" comment="kernel-firmware-usb-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671005" comment="ucode-amd-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0164</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0164" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0164" ref_url="https://www.suse.com/security/cve/CVE-2021-0164" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2/" source="SUSE-SU"/>
    <description>
    Improper access control in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0164/">CVE-2021-0164</cve>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671003" comment="kernel-firmware-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671024" comment="kernel-firmware-all-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671025" comment="kernel-firmware-amdgpu-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671026" comment="kernel-firmware-ath10k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671027" comment="kernel-firmware-ath11k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671028" comment="kernel-firmware-atheros-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671029" comment="kernel-firmware-bluetooth-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671030" comment="kernel-firmware-bnx2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671004" comment="kernel-firmware-brcm-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671031" comment="kernel-firmware-chelsio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671032" comment="kernel-firmware-dpaa2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671033" comment="kernel-firmware-i915-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671034" comment="kernel-firmware-intel-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671035" comment="kernel-firmware-iwlwifi-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671036" comment="kernel-firmware-liquidio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671037" comment="kernel-firmware-marvell-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671038" comment="kernel-firmware-media-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671039" comment="kernel-firmware-mediatek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671040" comment="kernel-firmware-mellanox-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671041" comment="kernel-firmware-mwifiex-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671042" comment="kernel-firmware-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671043" comment="kernel-firmware-nfp-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671044" comment="kernel-firmware-nvidia-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671045" comment="kernel-firmware-platform-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671046" comment="kernel-firmware-prestera-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671047" comment="kernel-firmware-qlogic-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671048" comment="kernel-firmware-radeon-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671049" comment="kernel-firmware-realtek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671050" comment="kernel-firmware-serial-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671051" comment="kernel-firmware-sound-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671052" comment="kernel-firmware-ti-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671053" comment="kernel-firmware-ueagle-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671054" comment="kernel-firmware-usb-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671005" comment="ucode-amd-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0165</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0165" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0165" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0165" ref_url="https://www.suse.com/security/cve/CVE-2021-0165" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2/" source="SUSE-SU"/>
    <description>
    Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0165/">CVE-2021-0165</cve>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671003" comment="kernel-firmware-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671024" comment="kernel-firmware-all-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671025" comment="kernel-firmware-amdgpu-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671026" comment="kernel-firmware-ath10k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671027" comment="kernel-firmware-ath11k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671028" comment="kernel-firmware-atheros-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671029" comment="kernel-firmware-bluetooth-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671030" comment="kernel-firmware-bnx2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671004" comment="kernel-firmware-brcm-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671031" comment="kernel-firmware-chelsio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671032" comment="kernel-firmware-dpaa2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671033" comment="kernel-firmware-i915-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671034" comment="kernel-firmware-intel-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671035" comment="kernel-firmware-iwlwifi-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671036" comment="kernel-firmware-liquidio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671037" comment="kernel-firmware-marvell-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671038" comment="kernel-firmware-media-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671039" comment="kernel-firmware-mediatek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671040" comment="kernel-firmware-mellanox-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671041" comment="kernel-firmware-mwifiex-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671042" comment="kernel-firmware-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671043" comment="kernel-firmware-nfp-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671044" comment="kernel-firmware-nvidia-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671045" comment="kernel-firmware-platform-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671046" comment="kernel-firmware-prestera-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671047" comment="kernel-firmware-qlogic-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671048" comment="kernel-firmware-radeon-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671049" comment="kernel-firmware-realtek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671050" comment="kernel-firmware-serial-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671051" comment="kernel-firmware-sound-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671052" comment="kernel-firmware-ti-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671053" comment="kernel-firmware-ueagle-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671054" comment="kernel-firmware-usb-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671005" comment="ucode-amd-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0166</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0166" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0166" ref_url="https://www.suse.com/security/cve/CVE-2021-0166" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2/" source="SUSE-SU"/>
    <description>
    Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0166/">CVE-2021-0166</cve>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671003" comment="kernel-firmware-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671024" comment="kernel-firmware-all-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671025" comment="kernel-firmware-amdgpu-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671026" comment="kernel-firmware-ath10k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671027" comment="kernel-firmware-ath11k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671028" comment="kernel-firmware-atheros-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671029" comment="kernel-firmware-bluetooth-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671030" comment="kernel-firmware-bnx2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671004" comment="kernel-firmware-brcm-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671031" comment="kernel-firmware-chelsio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671032" comment="kernel-firmware-dpaa2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671033" comment="kernel-firmware-i915-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671034" comment="kernel-firmware-intel-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671035" comment="kernel-firmware-iwlwifi-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671036" comment="kernel-firmware-liquidio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671037" comment="kernel-firmware-marvell-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671038" comment="kernel-firmware-media-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671039" comment="kernel-firmware-mediatek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671040" comment="kernel-firmware-mellanox-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671041" comment="kernel-firmware-mwifiex-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671042" comment="kernel-firmware-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671043" comment="kernel-firmware-nfp-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671044" comment="kernel-firmware-nvidia-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671045" comment="kernel-firmware-platform-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671046" comment="kernel-firmware-prestera-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671047" comment="kernel-firmware-qlogic-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671048" comment="kernel-firmware-radeon-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671049" comment="kernel-firmware-realtek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671050" comment="kernel-firmware-serial-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671051" comment="kernel-firmware-sound-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671052" comment="kernel-firmware-ti-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671053" comment="kernel-firmware-ueagle-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671054" comment="kernel-firmware-usb-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671005" comment="ucode-amd-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0168</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0168" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0168" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0168" ref_url="https://www.suse.com/security/cve/CVE-2021-0168" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2/" source="SUSE-SU"/>
    <description>
    Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0168/">CVE-2021-0168</cve>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671003" comment="kernel-firmware-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671024" comment="kernel-firmware-all-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671025" comment="kernel-firmware-amdgpu-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671026" comment="kernel-firmware-ath10k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671027" comment="kernel-firmware-ath11k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671028" comment="kernel-firmware-atheros-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671029" comment="kernel-firmware-bluetooth-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671030" comment="kernel-firmware-bnx2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671004" comment="kernel-firmware-brcm-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671031" comment="kernel-firmware-chelsio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671032" comment="kernel-firmware-dpaa2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671033" comment="kernel-firmware-i915-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671034" comment="kernel-firmware-intel-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671035" comment="kernel-firmware-iwlwifi-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671036" comment="kernel-firmware-liquidio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671037" comment="kernel-firmware-marvell-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671038" comment="kernel-firmware-media-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671039" comment="kernel-firmware-mediatek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671040" comment="kernel-firmware-mellanox-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671041" comment="kernel-firmware-mwifiex-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671042" comment="kernel-firmware-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671043" comment="kernel-firmware-nfp-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671044" comment="kernel-firmware-nvidia-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671045" comment="kernel-firmware-platform-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671046" comment="kernel-firmware-prestera-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671047" comment="kernel-firmware-qlogic-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671048" comment="kernel-firmware-radeon-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671049" comment="kernel-firmware-realtek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671050" comment="kernel-firmware-serial-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671051" comment="kernel-firmware-sound-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671052" comment="kernel-firmware-ti-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671053" comment="kernel-firmware-ueagle-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671054" comment="kernel-firmware-usb-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671005" comment="ucode-amd-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0170</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0170" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0170" ref_url="https://www.suse.com/security/cve/CVE-2021-0170" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2/" source="SUSE-SU"/>
    <description>
    Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an authenticated user to potentially enable information disclosure via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0170/">CVE-2021-0170</cve>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671003" comment="kernel-firmware-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671024" comment="kernel-firmware-all-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671025" comment="kernel-firmware-amdgpu-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671026" comment="kernel-firmware-ath10k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671027" comment="kernel-firmware-ath11k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671028" comment="kernel-firmware-atheros-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671029" comment="kernel-firmware-bluetooth-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671030" comment="kernel-firmware-bnx2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671004" comment="kernel-firmware-brcm-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671031" comment="kernel-firmware-chelsio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671032" comment="kernel-firmware-dpaa2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671033" comment="kernel-firmware-i915-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671034" comment="kernel-firmware-intel-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671035" comment="kernel-firmware-iwlwifi-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671036" comment="kernel-firmware-liquidio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671037" comment="kernel-firmware-marvell-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671038" comment="kernel-firmware-media-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671039" comment="kernel-firmware-mediatek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671040" comment="kernel-firmware-mellanox-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671041" comment="kernel-firmware-mwifiex-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671042" comment="kernel-firmware-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671043" comment="kernel-firmware-nfp-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671044" comment="kernel-firmware-nvidia-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671045" comment="kernel-firmware-platform-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671046" comment="kernel-firmware-prestera-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671047" comment="kernel-firmware-qlogic-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671048" comment="kernel-firmware-radeon-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671049" comment="kernel-firmware-realtek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671050" comment="kernel-firmware-serial-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671051" comment="kernel-firmware-sound-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671052" comment="kernel-firmware-ti-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671053" comment="kernel-firmware-ueagle-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671054" comment="kernel-firmware-usb-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671005" comment="ucode-amd-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0172</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0172" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0172" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0172" ref_url="https://www.suse.com/security/cve/CVE-2021-0172" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2/" source="SUSE-SU"/>
    <description>
    Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0172/">CVE-2021-0172</cve>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671003" comment="kernel-firmware-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671024" comment="kernel-firmware-all-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671025" comment="kernel-firmware-amdgpu-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671026" comment="kernel-firmware-ath10k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671027" comment="kernel-firmware-ath11k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671028" comment="kernel-firmware-atheros-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671029" comment="kernel-firmware-bluetooth-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671030" comment="kernel-firmware-bnx2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671004" comment="kernel-firmware-brcm-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671031" comment="kernel-firmware-chelsio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671032" comment="kernel-firmware-dpaa2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671033" comment="kernel-firmware-i915-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671034" comment="kernel-firmware-intel-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671035" comment="kernel-firmware-iwlwifi-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671036" comment="kernel-firmware-liquidio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671037" comment="kernel-firmware-marvell-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671038" comment="kernel-firmware-media-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671039" comment="kernel-firmware-mediatek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671040" comment="kernel-firmware-mellanox-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671041" comment="kernel-firmware-mwifiex-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671042" comment="kernel-firmware-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671043" comment="kernel-firmware-nfp-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671044" comment="kernel-firmware-nvidia-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671045" comment="kernel-firmware-platform-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671046" comment="kernel-firmware-prestera-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671047" comment="kernel-firmware-qlogic-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671048" comment="kernel-firmware-radeon-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671049" comment="kernel-firmware-realtek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671050" comment="kernel-firmware-serial-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671051" comment="kernel-firmware-sound-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671052" comment="kernel-firmware-ti-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671053" comment="kernel-firmware-ueagle-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671054" comment="kernel-firmware-usb-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671005" comment="ucode-amd-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0173</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0173" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0173" ref_url="https://www.suse.com/security/cve/CVE-2021-0173" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2/" source="SUSE-SU"/>
    <description>
    Improper Validation of Consistency within input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a unauthenticated user to potentially enable denial of service via adjacent access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0173/">CVE-2021-0173</cve>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671003" comment="kernel-firmware-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671024" comment="kernel-firmware-all-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671025" comment="kernel-firmware-amdgpu-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671026" comment="kernel-firmware-ath10k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671027" comment="kernel-firmware-ath11k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671028" comment="kernel-firmware-atheros-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671029" comment="kernel-firmware-bluetooth-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671030" comment="kernel-firmware-bnx2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671004" comment="kernel-firmware-brcm-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671031" comment="kernel-firmware-chelsio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671032" comment="kernel-firmware-dpaa2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671033" comment="kernel-firmware-i915-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671034" comment="kernel-firmware-intel-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671035" comment="kernel-firmware-iwlwifi-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671036" comment="kernel-firmware-liquidio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671037" comment="kernel-firmware-marvell-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671038" comment="kernel-firmware-media-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671039" comment="kernel-firmware-mediatek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671040" comment="kernel-firmware-mellanox-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671041" comment="kernel-firmware-mwifiex-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671042" comment="kernel-firmware-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671043" comment="kernel-firmware-nfp-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671044" comment="kernel-firmware-nvidia-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671045" comment="kernel-firmware-platform-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671046" comment="kernel-firmware-prestera-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671047" comment="kernel-firmware-qlogic-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671048" comment="kernel-firmware-radeon-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671049" comment="kernel-firmware-realtek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671050" comment="kernel-firmware-serial-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671051" comment="kernel-firmware-sound-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671052" comment="kernel-firmware-ti-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671053" comment="kernel-firmware-ueagle-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671054" comment="kernel-firmware-usb-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671005" comment="ucode-amd-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0174</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0174" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0174" ref_url="https://www.suse.com/security/cve/CVE-2021-0174" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2/" source="SUSE-SU"/>
    <description>
    Improper Use of Validation Framework in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a unauthenticated user to potentially enable denial of service via adjacent access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0174/">CVE-2021-0174</cve>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671003" comment="kernel-firmware-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671024" comment="kernel-firmware-all-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671025" comment="kernel-firmware-amdgpu-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671026" comment="kernel-firmware-ath10k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671027" comment="kernel-firmware-ath11k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671028" comment="kernel-firmware-atheros-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671029" comment="kernel-firmware-bluetooth-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671030" comment="kernel-firmware-bnx2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671004" comment="kernel-firmware-brcm-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671031" comment="kernel-firmware-chelsio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671032" comment="kernel-firmware-dpaa2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671033" comment="kernel-firmware-i915-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671034" comment="kernel-firmware-intel-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671035" comment="kernel-firmware-iwlwifi-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671036" comment="kernel-firmware-liquidio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671037" comment="kernel-firmware-marvell-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671038" comment="kernel-firmware-media-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671039" comment="kernel-firmware-mediatek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671040" comment="kernel-firmware-mellanox-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671041" comment="kernel-firmware-mwifiex-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671042" comment="kernel-firmware-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671043" comment="kernel-firmware-nfp-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671044" comment="kernel-firmware-nvidia-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671045" comment="kernel-firmware-platform-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671046" comment="kernel-firmware-prestera-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671047" comment="kernel-firmware-qlogic-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671048" comment="kernel-firmware-radeon-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671049" comment="kernel-firmware-realtek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671050" comment="kernel-firmware-serial-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671051" comment="kernel-firmware-sound-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671052" comment="kernel-firmware-ti-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671053" comment="kernel-firmware-ueagle-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671054" comment="kernel-firmware-usb-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671005" comment="ucode-amd-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0175</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0175" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0175" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0175" ref_url="https://www.suse.com/security/cve/CVE-2021-0175" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2/" source="SUSE-SU"/>
    <description>
    Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0175/">CVE-2021-0175</cve>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671003" comment="kernel-firmware-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671024" comment="kernel-firmware-all-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671025" comment="kernel-firmware-amdgpu-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671026" comment="kernel-firmware-ath10k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671027" comment="kernel-firmware-ath11k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671028" comment="kernel-firmware-atheros-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671029" comment="kernel-firmware-bluetooth-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671030" comment="kernel-firmware-bnx2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671004" comment="kernel-firmware-brcm-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671031" comment="kernel-firmware-chelsio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671032" comment="kernel-firmware-dpaa2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671033" comment="kernel-firmware-i915-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671034" comment="kernel-firmware-intel-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671035" comment="kernel-firmware-iwlwifi-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671036" comment="kernel-firmware-liquidio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671037" comment="kernel-firmware-marvell-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671038" comment="kernel-firmware-media-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671039" comment="kernel-firmware-mediatek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671040" comment="kernel-firmware-mellanox-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671041" comment="kernel-firmware-mwifiex-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671042" comment="kernel-firmware-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671043" comment="kernel-firmware-nfp-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671044" comment="kernel-firmware-nvidia-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671045" comment="kernel-firmware-platform-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671046" comment="kernel-firmware-prestera-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671047" comment="kernel-firmware-qlogic-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671048" comment="kernel-firmware-radeon-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671049" comment="kernel-firmware-realtek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671050" comment="kernel-firmware-serial-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671051" comment="kernel-firmware-sound-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671052" comment="kernel-firmware-ti-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671053" comment="kernel-firmware-ueagle-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671054" comment="kernel-firmware-usb-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671005" comment="ucode-amd-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0176</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0176" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0176" ref_url="https://www.suse.com/security/cve/CVE-2021-0176" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2/" source="SUSE-SU"/>
    <description>
    Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable denial of service via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0176/">CVE-2021-0176</cve>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671003" comment="kernel-firmware-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671024" comment="kernel-firmware-all-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671025" comment="kernel-firmware-amdgpu-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671026" comment="kernel-firmware-ath10k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671027" comment="kernel-firmware-ath11k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671028" comment="kernel-firmware-atheros-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671029" comment="kernel-firmware-bluetooth-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671030" comment="kernel-firmware-bnx2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671004" comment="kernel-firmware-brcm-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671031" comment="kernel-firmware-chelsio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671032" comment="kernel-firmware-dpaa2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671033" comment="kernel-firmware-i915-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671034" comment="kernel-firmware-intel-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671035" comment="kernel-firmware-iwlwifi-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671036" comment="kernel-firmware-liquidio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671037" comment="kernel-firmware-marvell-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671038" comment="kernel-firmware-media-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671039" comment="kernel-firmware-mediatek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671040" comment="kernel-firmware-mellanox-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671041" comment="kernel-firmware-mwifiex-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671042" comment="kernel-firmware-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671043" comment="kernel-firmware-nfp-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671044" comment="kernel-firmware-nvidia-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671045" comment="kernel-firmware-platform-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671046" comment="kernel-firmware-prestera-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671047" comment="kernel-firmware-qlogic-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671048" comment="kernel-firmware-radeon-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671049" comment="kernel-firmware-realtek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671050" comment="kernel-firmware-serial-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671051" comment="kernel-firmware-sound-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671052" comment="kernel-firmware-ti-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671053" comment="kernel-firmware-ueagle-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671054" comment="kernel-firmware-usb-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671005" comment="ucode-amd-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0183</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0183" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0183" ref_url="https://www.suse.com/security/cve/CVE-2021-0183" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1065-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2/" source="SUSE-SU"/>
    <description>
    Improper Validation of Specified Index, Position, or Offset in Input in software for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0183/">CVE-2021-0183</cve>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671003" comment="kernel-firmware-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671024" comment="kernel-firmware-all-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677871" comment="kernel-firmware-all is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671025" comment="kernel-firmware-amdgpu-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677872" comment="kernel-firmware-amdgpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671026" comment="kernel-firmware-ath10k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677873" comment="kernel-firmware-ath10k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671027" comment="kernel-firmware-ath11k-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677874" comment="kernel-firmware-ath11k is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671028" comment="kernel-firmware-atheros-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677875" comment="kernel-firmware-atheros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671029" comment="kernel-firmware-bluetooth-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677876" comment="kernel-firmware-bluetooth is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671030" comment="kernel-firmware-bnx2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677877" comment="kernel-firmware-bnx2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671004" comment="kernel-firmware-brcm-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677878" comment="kernel-firmware-brcm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671031" comment="kernel-firmware-chelsio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677879" comment="kernel-firmware-chelsio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671032" comment="kernel-firmware-dpaa2-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677880" comment="kernel-firmware-dpaa2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671033" comment="kernel-firmware-i915-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677881" comment="kernel-firmware-i915 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671034" comment="kernel-firmware-intel-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677882" comment="kernel-firmware-intel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671035" comment="kernel-firmware-iwlwifi-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677883" comment="kernel-firmware-iwlwifi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671036" comment="kernel-firmware-liquidio-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677884" comment="kernel-firmware-liquidio is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671037" comment="kernel-firmware-marvell-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677885" comment="kernel-firmware-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671038" comment="kernel-firmware-media-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677886" comment="kernel-firmware-media is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671039" comment="kernel-firmware-mediatek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677887" comment="kernel-firmware-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671040" comment="kernel-firmware-mellanox-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677888" comment="kernel-firmware-mellanox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671041" comment="kernel-firmware-mwifiex-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677889" comment="kernel-firmware-mwifiex is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671042" comment="kernel-firmware-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677890" comment="kernel-firmware-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671043" comment="kernel-firmware-nfp-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677891" comment="kernel-firmware-nfp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671044" comment="kernel-firmware-nvidia-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677892" comment="kernel-firmware-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671045" comment="kernel-firmware-platform-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677893" comment="kernel-firmware-platform is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671046" comment="kernel-firmware-prestera-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677894" comment="kernel-firmware-prestera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671047" comment="kernel-firmware-qlogic-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677895" comment="kernel-firmware-qlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671048" comment="kernel-firmware-radeon-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677896" comment="kernel-firmware-radeon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671049" comment="kernel-firmware-realtek-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677897" comment="kernel-firmware-realtek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671050" comment="kernel-firmware-serial-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677898" comment="kernel-firmware-serial is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671051" comment="kernel-firmware-sound-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677899" comment="kernel-firmware-sound is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671052" comment="kernel-firmware-ti-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677900" comment="kernel-firmware-ti is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671053" comment="kernel-firmware-ueagle-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677901" comment="kernel-firmware-ueagle is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671054" comment="kernel-firmware-usb-network-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009677902" comment="kernel-firmware-usb-network is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671005" comment="ucode-amd-20210208-150300.4.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210326" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0326</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0326" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0326" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0326" ref_url="https://www.suse.com/security/cve/CVE-2021-0326" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008316.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0477-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008328.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008327.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0284-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YI2F4UP2SUM3KDNM2O5RK57I3NEYBJ26/" source="SUSE-SU"/>
    <description>
    In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0326/">CVE-2021-0326</cve>
	<bugzilla href="https://bugzilla.suse.com/1181777">SUSE bug 1181777</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629050" comment="wpa_supplicant-2.9-4.29.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0342</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0342" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0342" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008288.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008292.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008305.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008512.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0818-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-March/018289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008502.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0241-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GZRN6BW22C4S3GVCJVPHDT4HHTLVGVZE/" source="SUSE-SU"/>
    <description>
    In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. User interaction is not required for exploitation. Product: Android; Versions: Android kernel; Android ID: A-146554327.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<bugzilla href="https://bugzilla.suse.com/1180812">SUSE bug 1180812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180859">SUSE bug 1180859</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0512</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0512" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009134.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2377-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2406-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2422-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2426-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009202.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2305-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BBGE5AIDX3NT46HPS2IYLFESAEFCTG6O/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2352-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2GU2EJMYFONMKDLPFYPCAPSOFXO5ZISM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2427-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HJIMD6XIKYMKE35TUYXKKYPX4737LEVU/" source="SUSE-SU"/>
    <description>
    In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-173843328References: Upstream kernel
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<bugzilla href="https://bugzilla.suse.com/1187595">SUSE bug 1187595</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187597">SUSE bug 1187597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625365" comment="cluster-md-kmp-64kb-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624878" comment="cluster-md-kmp-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624233" comment="cluster-md-kmp-default-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625366" comment="cluster-md-kmp-preempt-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625367" comment="dlm-kmp-64kb-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624879" comment="dlm-kmp-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624234" comment="dlm-kmp-default-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625368" comment="dlm-kmp-preempt-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625369" comment="gfs2-kmp-64kb-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624880" comment="gfs2-kmp-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624235" comment="gfs2-kmp-default-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625370" comment="gfs2-kmp-preempt-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624211" comment="kernel-64kb-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624212" comment="kernel-64kb-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625371" comment="kernel-64kb-extra-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625372" comment="kernel-64kb-livepatch-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625373" comment="kernel-64kb-optional-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624535" comment="kernel-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624536" comment="kernel-azure-devel-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624881" comment="kernel-azure-extra-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624882" comment="kernel-azure-livepatch-devel-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624883" comment="kernel-azure-optional-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625374" comment="kernel-debug-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625875" comment="kernel-debug-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625375" comment="kernel-debug-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625376" comment="kernel-debug-livepatch-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624213" comment="kernel-default-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624214" comment="kernel-default-base-5.3.18-59.13.1.18.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625377" comment="kernel-default-base-rebuild-5.3.18-59.13.1.18.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624215" comment="kernel-default-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625378" comment="kernel-default-extra-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625379" comment="kernel-default-livepatch-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625380" comment="kernel-default-livepatch-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625696" comment="kernel-default-man-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625381" comment="kernel-default-optional-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624216" comment="kernel-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624537" comment="kernel-devel-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624220" comment="kernel-docs-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625382" comment="kernel-docs-html-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625383" comment="kernel-kvmsmall-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625876" comment="kernel-kvmsmall-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625384" comment="kernel-kvmsmall-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625385" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624217" comment="kernel-macros-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624221" comment="kernel-obs-build-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625386" comment="kernel-obs-qa-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624218" comment="kernel-preempt-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624222" comment="kernel-preempt-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625387" comment="kernel-preempt-extra-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625388" comment="kernel-preempt-livepatch-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625389" comment="kernel-preempt-optional-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624223" comment="kernel-source-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624538" comment="kernel-source-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625390" comment="kernel-source-vanilla-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624224" comment="kernel-syms-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624539" comment="kernel-syms-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625877" comment="kernel-vanilla-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625878" comment="kernel-vanilla-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625879" comment="kernel-vanilla-devel-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625880" comment="kernel-vanilla-livepatch-devel-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624219" comment="kernel-zfcpdump-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625881" comment="kernel-zfcpdump-man-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625391" comment="kselftests-kmp-64kb-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624884" comment="kselftests-kmp-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625392" comment="kselftests-kmp-default-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625393" comment="kselftests-kmp-preempt-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625394" comment="ocfs2-kmp-64kb-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624885" comment="ocfs2-kmp-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624236" comment="ocfs2-kmp-default-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625395" comment="ocfs2-kmp-preempt-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625396" comment="reiserfs-kmp-64kb-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624886" comment="reiserfs-kmp-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624225" comment="reiserfs-kmp-default-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625397" comment="reiserfs-kmp-preempt-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210561" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0561</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0561" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0561" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0561" ref_url="https://www.suse.com/security/cve/CVE-2021-0561" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010423.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0815-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XL4H6UZUJ7J37CDBIJWGDOHX5XDWRWL6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10252-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YI4EVQJJHK52U3OVX236TQ775IVEFDQS/" source="SUSE-SU"/>
    <description>
    In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174302683
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-12-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0561/">CVE-2021-0561</cve>
	<bugzilla href="https://bugzilla.suse.com/1196660">SUSE bug 1196660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671009" comment="flac-1.3.2-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152521" comment="flac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671006" comment="flac-devel-1.3.2-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152522" comment="flac-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671055" comment="flac-devel-32bit-1.3.2-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009175207" comment="flac-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671056" comment="flac-doc-1.3.2-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009175208" comment="flac-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671007" comment="libFLAC++6-1.3.2-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152523" comment="libFLAC++6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671057" comment="libFLAC++6-32bit-1.3.2-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009175209" comment="libFLAC++6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671008" comment="libFLAC8-1.3.2-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152524" comment="libFLAC8 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009671010" comment="libFLAC8-32bit-1.3.2-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152525" comment="libFLAC8-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730671" comment="libvlc5-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730672" comment="libvlccore9-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261716" comment="libvlccore9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730673" comment="vlc-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730674" comment="vlc-codec-gstreamer-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730675" comment="vlc-devel-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153024" comment="vlc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730676" comment="vlc-jack-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261717" comment="vlc-jack is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730677" comment="vlc-lang-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730678" comment="vlc-noX-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730679" comment="vlc-opencv-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281885" comment="vlc-opencv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730680" comment="vlc-qt-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009730681" comment="vlc-vdpau-3.0.18-bp153.2.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009261718" comment="vlc-vdpau is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210605" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0605</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0605" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0605" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0605" ref_url="https://www.suse.com/security/cve/CVE-2021-0605" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2377-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2406-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2421-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009183.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2422-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2426-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2451-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009203.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2305-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BBGE5AIDX3NT46HPS2IYLFESAEFCTG6O/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2352-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2GU2EJMYFONMKDLPFYPCAPSOFXO5ZISM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2427-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HJIMD6XIKYMKE35TUYXKKYPX4737LEVU/" source="SUSE-SU"/>
    <description>
    In pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-110373476
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0605/">CVE-2021-0605</cve>
	<bugzilla href="https://bugzilla.suse.com/1187601">SUSE bug 1187601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187687">SUSE bug 1187687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188381">SUSE bug 1188381</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625365" comment="cluster-md-kmp-64kb-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624878" comment="cluster-md-kmp-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624233" comment="cluster-md-kmp-default-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625366" comment="cluster-md-kmp-preempt-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625367" comment="dlm-kmp-64kb-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624879" comment="dlm-kmp-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624234" comment="dlm-kmp-default-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625368" comment="dlm-kmp-preempt-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625369" comment="gfs2-kmp-64kb-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624880" comment="gfs2-kmp-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624235" comment="gfs2-kmp-default-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625370" comment="gfs2-kmp-preempt-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624211" comment="kernel-64kb-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624212" comment="kernel-64kb-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625371" comment="kernel-64kb-extra-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625372" comment="kernel-64kb-livepatch-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625373" comment="kernel-64kb-optional-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624535" comment="kernel-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624536" comment="kernel-azure-devel-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624881" comment="kernel-azure-extra-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624882" comment="kernel-azure-livepatch-devel-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624883" comment="kernel-azure-optional-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625374" comment="kernel-debug-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625875" comment="kernel-debug-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625375" comment="kernel-debug-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625376" comment="kernel-debug-livepatch-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624213" comment="kernel-default-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624214" comment="kernel-default-base-5.3.18-59.13.1.18.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625377" comment="kernel-default-base-rebuild-5.3.18-59.13.1.18.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624215" comment="kernel-default-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625378" comment="kernel-default-extra-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625379" comment="kernel-default-livepatch-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625380" comment="kernel-default-livepatch-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625696" comment="kernel-default-man-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625381" comment="kernel-default-optional-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624216" comment="kernel-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624537" comment="kernel-devel-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624220" comment="kernel-docs-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625382" comment="kernel-docs-html-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625383" comment="kernel-kvmsmall-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625876" comment="kernel-kvmsmall-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625384" comment="kernel-kvmsmall-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625385" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624217" comment="kernel-macros-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624221" comment="kernel-obs-build-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625386" comment="kernel-obs-qa-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624218" comment="kernel-preempt-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624222" comment="kernel-preempt-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625387" comment="kernel-preempt-extra-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625388" comment="kernel-preempt-livepatch-devel-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625389" comment="kernel-preempt-optional-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624223" comment="kernel-source-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624538" comment="kernel-source-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625390" comment="kernel-source-vanilla-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624224" comment="kernel-syms-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624539" comment="kernel-syms-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625877" comment="kernel-vanilla-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625878" comment="kernel-vanilla-base-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625879" comment="kernel-vanilla-devel-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625880" comment="kernel-vanilla-livepatch-devel-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624219" comment="kernel-zfcpdump-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625881" comment="kernel-zfcpdump-man-4.12.14-197.99.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625391" comment="kselftests-kmp-64kb-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624884" comment="kselftests-kmp-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625392" comment="kselftests-kmp-default-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625393" comment="kselftests-kmp-preempt-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625394" comment="ocfs2-kmp-64kb-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624885" comment="ocfs2-kmp-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624236" comment="ocfs2-kmp-default-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625395" comment="ocfs2-kmp-preempt-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625396" comment="reiserfs-kmp-64kb-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624886" comment="reiserfs-kmp-azure-5.3.18-38.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624225" comment="reiserfs-kmp-default-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625397" comment="reiserfs-kmp-preempt-5.3.18-59.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0707</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0707" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0707" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0707" ref_url="https://www.suse.com/security/cve/CVE-2021-0707" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011343.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011033.html" source="SUSE-SU"/>
    <description>
    In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-155756045References: Upstream kernel
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0707/">CVE-2021-0707</cve>
	<bugzilla href="https://bugzilla.suse.com/1198437">SUSE bug 1198437</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199332">SUSE bug 1199332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683306" comment="cluster-md-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683297" comment="cluster-md-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683007" comment="cluster-md-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683307" comment="cluster-md-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683308" comment="dlm-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683298" comment="dlm-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683008" comment="dlm-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683309" comment="dlm-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683310" comment="dtb-al-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683311" comment="dtb-allwinner-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683312" comment="dtb-altera-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683313" comment="dtb-amd-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683314" comment="dtb-amlogic-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683315" comment="dtb-apm-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683316" comment="dtb-arm-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683317" comment="dtb-broadcom-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683318" comment="dtb-cavium-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683319" comment="dtb-exynos-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683320" comment="dtb-freescale-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683321" comment="dtb-hisilicon-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683322" comment="dtb-lg-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683323" comment="dtb-marvell-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683324" comment="dtb-mediatek-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683325" comment="dtb-nvidia-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683326" comment="dtb-qcom-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683327" comment="dtb-renesas-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683328" comment="dtb-rockchip-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683329" comment="dtb-socionext-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683330" comment="dtb-sprd-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683331" comment="dtb-xilinx-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683332" comment="dtb-zte-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683333" comment="gfs2-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683299" comment="gfs2-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683009" comment="gfs2-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683334" comment="gfs2-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682878" comment="kernel-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682879" comment="kernel-64kb-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683335" comment="kernel-64kb-extra-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683336" comment="kernel-64kb-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683337" comment="kernel-64kb-optional-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682940" comment="kernel-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682941" comment="kernel-azure-devel-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683300" comment="kernel-azure-extra-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683301" comment="kernel-azure-livepatch-devel-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683302" comment="kernel-azure-optional-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683338" comment="kernel-debug-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683339" comment="kernel-debug-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683340" comment="kernel-debug-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682880" comment="kernel-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682881" comment="kernel-default-base-5.3.18-150300.59.68.1.150300.18.41.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683341" comment="kernel-default-base-rebuild-5.3.18-150300.59.68.1.150300.18.41.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682882" comment="kernel-default-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683342" comment="kernel-default-extra-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683343" comment="kernel-default-livepatch-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683344" comment="kernel-default-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683345" comment="kernel-default-optional-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682883" comment="kernel-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682942" comment="kernel-devel-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682888" comment="kernel-docs-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683346" comment="kernel-docs-html-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683347" comment="kernel-kvmsmall-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683348" comment="kernel-kvmsmall-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683349" comment="kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682884" comment="kernel-macros-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682889" comment="kernel-obs-build-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683350" comment="kernel-obs-qa-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682885" comment="kernel-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682890" comment="kernel-preempt-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683351" comment="kernel-preempt-extra-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683352" comment="kernel-preempt-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683353" comment="kernel-preempt-optional-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682891" comment="kernel-source-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682943" comment="kernel-source-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683354" comment="kernel-source-vanilla-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682892" comment="kernel-syms-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682944" comment="kernel-syms-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682886" comment="kernel-zfcpdump-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683355" comment="kselftests-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683303" comment="kselftests-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683356" comment="kselftests-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683357" comment="kselftests-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683358" comment="ocfs2-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683304" comment="ocfs2-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683010" comment="ocfs2-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683359" comment="ocfs2-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683360" comment="reiserfs-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683305" comment="reiserfs-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682914" comment="reiserfs-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683361" comment="reiserfs-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210920" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0920</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0920" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0920" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0920" ref_url="https://www.suse.com/security/cve/CVE-2021-0920" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:485-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010319.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010320.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010321.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0660-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010329.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0667-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010327.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0668-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010328.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0756-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010401.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0762-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010390.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0996-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1034-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1037-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1038-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1039-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1257-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010746.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0366-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CFUCZRWH2IP7FOHVYO3TO3G5PFWQXLP6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1037-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YVOKHN5NCU57OGTEBU36WJRTWHRBUST7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:1039-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWMVMDEM47CT6AQ4RWZEZZJSH2G2J4CV/" source="SUSE-SU"/>
    <description>
    In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-20"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0920/">CVE-2021-0920</cve>
	<bugzilla href="https://bugzilla.suse.com/1193731">SUSE bug 1193731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194463">SUSE bug 1194463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195939">SUSE bug 1195939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199255">SUSE bug 1199255</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200084">SUSE bug 1200084</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676747" comment="cluster-md-kmp-64kb-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009674172" comment="cluster-md-kmp-azure-5.3.18-150300.38.50.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676730" comment="cluster-md-kmp-default-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676748" comment="cluster-md-kmp-preempt-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676749" comment="dlm-kmp-64kb-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009674173" comment="dlm-kmp-azure-5.3.18-150300.38.50.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676731" comment="dlm-kmp-default-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676750" comment="dlm-kmp-preempt-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676751" comment="dtb-al-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676752" comment="dtb-allwinner-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676753" comment="dtb-altera-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676754" comment="dtb-amd-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676755" comment="dtb-amlogic-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676756" comment="dtb-apm-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676757" comment="dtb-arm-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676758" comment="dtb-broadcom-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676759" comment="dtb-cavium-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676760" comment="dtb-exynos-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676761" comment="dtb-freescale-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676762" comment="dtb-hisilicon-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676763" comment="dtb-lg-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676764" comment="dtb-marvell-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676765" comment="dtb-mediatek-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676766" comment="dtb-nvidia-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676767" comment="dtb-qcom-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676768" comment="dtb-renesas-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676769" comment="dtb-rockchip-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676770" comment="dtb-socionext-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676771" comment="dtb-sprd-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676772" comment="dtb-xilinx-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676773" comment="dtb-zte-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676774" comment="gfs2-kmp-64kb-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009674174" comment="gfs2-kmp-azure-5.3.18-150300.38.50.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676732" comment="gfs2-kmp-default-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676775" comment="gfs2-kmp-preempt-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676702" comment="kernel-64kb-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676703" comment="kernel-64kb-devel-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676776" comment="kernel-64kb-extra-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676777" comment="kernel-64kb-livepatch-devel-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676778" comment="kernel-64kb-optional-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673538" comment="kernel-azure-5.3.18-150300.38.50.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673539" comment="kernel-azure-devel-5.3.18-150300.38.50.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009674175" comment="kernel-azure-extra-5.3.18-150300.38.50.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009674176" comment="kernel-azure-livepatch-devel-5.3.18-150300.38.50.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009674177" comment="kernel-azure-optional-5.3.18-150300.38.50.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676779" comment="kernel-debug-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667096" comment="kernel-debug-base-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676780" comment="kernel-debug-devel-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676781" comment="kernel-debug-livepatch-devel-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676704" comment="kernel-default-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676705" comment="kernel-default-base-5.3.18-150300.59.60.4.150300.18.37.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676782" comment="kernel-default-base-rebuild-5.3.18-150300.59.60.4.150300.18.37.5 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676706" comment="kernel-default-devel-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676783" comment="kernel-default-extra-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676784" comment="kernel-default-livepatch-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676785" comment="kernel-default-livepatch-devel-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667070" comment="kernel-default-man-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676786" comment="kernel-default-optional-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676707" comment="kernel-devel-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673540" comment="kernel-devel-azure-5.3.18-150300.38.50.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676713" comment="kernel-docs-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676787" comment="kernel-docs-html-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676788" comment="kernel-kvmsmall-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667097" comment="kernel-kvmsmall-base-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676789" comment="kernel-kvmsmall-devel-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676790" comment="kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676708" comment="kernel-macros-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676714" comment="kernel-obs-build-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676791" comment="kernel-obs-qa-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676709" comment="kernel-preempt-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676715" comment="kernel-preempt-devel-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676792" comment="kernel-preempt-extra-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676793" comment="kernel-preempt-livepatch-devel-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676794" comment="kernel-preempt-optional-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676716" comment="kernel-source-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673541" comment="kernel-source-azure-5.3.18-150300.38.50.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676795" comment="kernel-source-vanilla-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676717" comment="kernel-syms-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009673542" comment="kernel-syms-azure-5.3.18-150300.38.50.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667098" comment="kernel-vanilla-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667099" comment="kernel-vanilla-base-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667100" comment="kernel-vanilla-devel-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667101" comment="kernel-vanilla-livepatch-devel-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676710" comment="kernel-zfcpdump-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667102" comment="kernel-zfcpdump-man-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676796" comment="kselftests-kmp-64kb-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009674178" comment="kselftests-kmp-azure-5.3.18-150300.38.50.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676797" comment="kselftests-kmp-default-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676798" comment="kselftests-kmp-preempt-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676799" comment="ocfs2-kmp-64kb-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009674179" comment="ocfs2-kmp-azure-5.3.18-150300.38.50.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676733" comment="ocfs2-kmp-default-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676800" comment="ocfs2-kmp-preempt-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676801" comment="reiserfs-kmp-64kb-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009674180" comment="reiserfs-kmp-azure-5.3.18-150300.38.50.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676722" comment="reiserfs-kmp-default-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009676802" comment="reiserfs-kmp-preempt-5.3.18-150300.59.60.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0935</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0935" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0935" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3684-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-November/020771.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009891.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4039-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009897.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0080-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0362-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0477-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010246.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0366-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CFUCZRWH2IP7FOHVYO3TO3G5PFWQXLP6/" source="SUSE-SU"/>
    <description>
    In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168607263References: Upstream kernel
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<bugzilla href="https://bugzilla.suse.com/1192032">SUSE bug 1192032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192042">SUSE bug 1192042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196722">SUSE bug 1196722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667096" comment="kernel-debug-base-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667070" comment="kernel-default-man-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667097" comment="kernel-kvmsmall-base-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667098" comment="kernel-vanilla-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667099" comment="kernel-vanilla-base-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667100" comment="kernel-vanilla-devel-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667101" comment="kernel-vanilla-livepatch-devel-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009667102" comment="kernel-zfcpdump-man-4.12.14-197.105.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20210941" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-0941</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-0941" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0941" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-0941" ref_url="https://www.suse.com/security/cve/CVE-2021-0941" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:37-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:28-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:29-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009774.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3807-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-November/020844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009789.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3877-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009843.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3941-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3969-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009872.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009873.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3979-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009875.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009891.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4038-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009909.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4099-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009913.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1501-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5J6FJF42AOGK3VQ4EFVDHQENHCDEMVT3/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3806-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WLGTBAKURNXDJOZBJTW2QLXJEWT66GSC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3876-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JOIHHN3KQX7O34NG25NJOF7PFEZF2TVP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3941-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UKZHKAOI6N3ILHMQUWDAPBQQORWN64SU/" source="SUSE-SU"/>
    <description>
    In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154177719References: Upstream kernel
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0941/">CVE-2021-0941</cve>
	<bugzilla href="https://bugzilla.suse.com/1192045">SUSE bug 1192045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192048">SUSE bug 1192048</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658020" comment="cluster-md-kmp-64kb-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657647" comment="cluster-md-kmp-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657757" comment="cluster-md-kmp-default-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658021" comment="cluster-md-kmp-preempt-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658022" comment="dlm-kmp-64kb-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657648" comment="dlm-kmp-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657758" comment="dlm-kmp-default-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658023" comment="dlm-kmp-preempt-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658024" comment="dtb-al-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658025" comment="dtb-allwinner-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658026" comment="dtb-altera-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658027" comment="dtb-amd-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658028" comment="dtb-amlogic-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658029" comment="dtb-apm-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658030" comment="dtb-arm-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658031" comment="dtb-broadcom-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658032" comment="dtb-cavium-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658033" comment="dtb-exynos-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658034" comment="dtb-freescale-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658035" comment="dtb-hisilicon-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658036" comment="dtb-lg-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658037" comment="dtb-marvell-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658038" comment="dtb-mediatek-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658039" comment="dtb-nvidia-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658040" comment="dtb-qcom-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658041" comment="dtb-renesas-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658042" comment="dtb-rockchip-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658043" comment="dtb-socionext-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658044" comment="dtb-sprd-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658045" comment="dtb-xilinx-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658046" comment="dtb-zte-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658047" comment="gfs2-kmp-64kb-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657649" comment="gfs2-kmp-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657759" comment="gfs2-kmp-default-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658048" comment="gfs2-kmp-preempt-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657673" comment="kernel-64kb-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657674" comment="kernel-64kb-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658049" comment="kernel-64kb-extra-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658050" comment="kernel-64kb-livepatch-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658051" comment="kernel-64kb-optional-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657494" comment="kernel-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657495" comment="kernel-azure-devel-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657650" comment="kernel-azure-extra-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657651" comment="kernel-azure-livepatch-devel-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657652" comment="kernel-azure-optional-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658052" comment="kernel-debug-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658245" comment="kernel-debug-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658053" comment="kernel-debug-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658054" comment="kernel-debug-livepatch-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657675" comment="kernel-default-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657676" comment="kernel-default-base-5.3.18-59.37.2.18.23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658055" comment="kernel-default-base-rebuild-5.3.18-59.37.2.18.23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657677" comment="kernel-default-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658056" comment="kernel-default-extra-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658057" comment="kernel-default-livepatch-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658058" comment="kernel-default-livepatch-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658155" comment="kernel-default-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658059" comment="kernel-default-optional-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657678" comment="kernel-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657496" comment="kernel-devel-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657683" comment="kernel-docs-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658060" comment="kernel-docs-html-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658061" comment="kernel-kvmsmall-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658246" comment="kernel-kvmsmall-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658062" comment="kernel-kvmsmall-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658063" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657679" comment="kernel-macros-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657684" comment="kernel-obs-build-5.3.18-59.37.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658064" comment="kernel-obs-qa-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657680" comment="kernel-preempt-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657685" comment="kernel-preempt-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658065" comment="kernel-preempt-extra-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658066" comment="kernel-preempt-livepatch-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658067" comment="kernel-preempt-optional-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657686" comment="kernel-source-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657497" comment="kernel-source-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658068" comment="kernel-source-vanilla-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657687" comment="kernel-syms-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657498" comment="kernel-syms-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658247" comment="kernel-vanilla-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658248" comment="kernel-vanilla-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658249" comment="kernel-vanilla-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658250" comment="kernel-vanilla-livepatch-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657681" comment="kernel-zfcpdump-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658251" comment="kernel-zfcpdump-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658069" comment="kselftests-kmp-64kb-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657653" comment="kselftests-kmp-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658070" comment="kselftests-kmp-default-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658071" comment="kselftests-kmp-preempt-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658072" comment="ocfs2-kmp-64kb-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657654" comment="ocfs2-kmp-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657760" comment="ocfs2-kmp-default-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658073" comment="ocfs2-kmp-preempt-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658074" comment="reiserfs-kmp-64kb-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657655" comment="reiserfs-kmp-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657723" comment="reiserfs-kmp-default-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658075" comment="reiserfs-kmp-preempt-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20211765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-1765</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-1765" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1765" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-1765" ref_url="https://www.suse.com/security/cve/CVE-2021-1765" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008699.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0637-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PLZ5MXMQE5PW2OZS4ZK2IAEG3Y3AFJVD/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Maliciously crafted web content may violate iframe sandboxing policy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-15"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1765/">CVE-2021-1765</cve>
	<bugzilla href="https://bugzilla.suse.com/1184262">SUSE bug 1184262</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20211788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-1788</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-1788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1788" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-1788" ref_url="https://www.suse.com/security/cve/CVE-2021-1788" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008699.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0637-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PLZ5MXMQE5PW2OZS4ZK2IAEG3Y3AFJVD/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-15"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1788/">CVE-2021-1788</cve>
	<bugzilla href="https://bugzilla.suse.com/1184155">SUSE bug 1184155</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20211789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-1789</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-1789" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1789" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-1789" ref_url="https://www.suse.com/security/cve/CVE-2021-1789" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008699.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0637-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PLZ5MXMQE5PW2OZS4ZK2IAEG3Y3AFJVD/" source="SUSE-SU"/>
    <description>
    A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-15"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1789/">CVE-2021-1789</cve>
	<bugzilla href="https://bugzilla.suse.com/1184262">SUSE bug 1184262</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20211799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-1799</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-1799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1799" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-1799" ref_url="https://www.suse.com/security/cve/CVE-2021-1799" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008699.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0637-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PLZ5MXMQE5PW2OZS4ZK2IAEG3Y3AFJVD/" source="SUSE-SU"/>
    <description>
    A port redirection issue was addressed with additional port validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. A malicious website may be able to access restricted ports on arbitrary servers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-15"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1799/">CVE-2021-1799</cve>
	<bugzilla href="https://bugzilla.suse.com/1184262">SUSE bug 1184262</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20211801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-1801</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-1801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1801" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-1801" ref_url="https://www.suse.com/security/cve/CVE-2021-1801" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008699.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0637-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PLZ5MXMQE5PW2OZS4ZK2IAEG3Y3AFJVD/" source="SUSE-SU"/>
    <description>
    This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-15"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1801/">CVE-2021-1801</cve>
	<bugzilla href="https://bugzilla.suse.com/1184262">SUSE bug 1184262</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20211817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-1817</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-1817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1817" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-1817" ref_url="https://www.suse.com/security/cve/CVE-2021-1817" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1817/">CVE-2021-1817</cve>
	<bugzilla href="https://bugzilla.suse.com/1188697">SUSE bug 1188697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664283" comment="libjavascriptcoregtk-4_0-18-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664284" comment="libwebkit2gtk-4_0-37-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664285" comment="libwebkit2gtk3-lang-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664296" comment="typelib-1_0-JavaScriptCore-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664297" comment="typelib-1_0-WebKit2-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664286" comment="webkit2gtk-4_0-injected-bundles-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20211820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-1820</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-1820" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1820" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-1820" ref_url="https://www.suse.com/security/cve/CVE-2021-1820" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may result in the disclosure of process memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-1820/">CVE-2021-1820</cve>
	<bugzilla href="https://bugzilla.suse.com/1188697">SUSE bug 1188697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664283" comment="libjavascriptcoregtk-4_0-18-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664284" comment="libwebkit2gtk-4_0-37-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664285" comment="libwebkit2gtk3-lang-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664296" comment="typelib-1_0-JavaScriptCore-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664297" comment="typelib-1_0-WebKit2-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664286" comment="webkit2gtk-4_0-injected-bundles-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20211825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-1825</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-1825" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1825" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-1825" ref_url="https://www.suse.com/security/cve/CVE-2021-1825" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross site scripting attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-1825/">CVE-2021-1825</cve>
	<bugzilla href="https://bugzilla.suse.com/1188697">SUSE bug 1188697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664283" comment="libjavascriptcoregtk-4_0-18-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664284" comment="libwebkit2gtk-4_0-37-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664285" comment="libwebkit2gtk3-lang-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664296" comment="typelib-1_0-JavaScriptCore-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664297" comment="typelib-1_0-WebKit2-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664286" comment="webkit2gtk-4_0-injected-bundles-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20211826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-1826</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-1826" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1826" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-1826" ref_url="https://www.suse.com/security/cve/CVE-2021-1826" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to universal cross site scripting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-1826/">CVE-2021-1826</cve>
	<bugzilla href="https://bugzilla.suse.com/1188697">SUSE bug 1188697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664283" comment="libjavascriptcoregtk-4_0-18-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664284" comment="libwebkit2gtk-4_0-37-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664285" comment="libwebkit2gtk3-lang-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664296" comment="typelib-1_0-JavaScriptCore-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664297" comment="typelib-1_0-WebKit2-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664286" comment="webkit2gtk-4_0-injected-bundles-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20211844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-1844</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-1844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1844" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-1844" ref_url="https://www.suse.com/security/cve/CVE-2021-1844" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008699.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0637-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PLZ5MXMQE5PW2OZS4ZK2IAEG3Y3AFJVD/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 15610.4.3.1.7), watchOS 7.3.2, macOS Big Sur 11.2.3. Processing maliciously crafted web content may lead to arbitrary code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-15"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1844/">CVE-2021-1844</cve>
	<bugzilla href="https://bugzilla.suse.com/1184155">SUSE bug 1184155</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20211870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-1870</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-1870" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1870" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-1870" ref_url="https://www.suse.com/security/cve/CVE-2021-1870" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008699.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0637-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PLZ5MXMQE5PW2OZS4ZK2IAEG3Y3AFJVD/" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-15"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1870/">CVE-2021-1870</cve>
	<bugzilla href="https://bugzilla.suse.com/1184262">SUSE bug 1184262</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628773" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628774" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628775" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629277" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629278" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628776" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20211871" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-1871</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-1871" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1871" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-1871" ref_url="https://www.suse.com/security/cve/CVE-2021-1871" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008699.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0142-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0637-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PLZ5MXMQE5PW2OZS4ZK2IAEG3Y3AFJVD/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FK6EK2KGH7KDPXCBN2Q3SSAVOCIXNCFX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0182-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILRBHE4XKYN4SZKE6UX55V3HK54NAIK/" source="SUSE-SU"/>
    <description>
    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-15"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1871/">CVE-2021-1871</cve>
	<bugzilla href="https://bugzilla.suse.com/1184155">SUSE bug 1184155</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493750" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664369" comment="libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493751" comment="libwebkit2gtk-4_0-37-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664370" comment="libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493752" comment="libwebkit2gtk3-lang-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495763" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009495764" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664298" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664371" comment="webkit-jsc-4-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493753" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664299" comment="webkit2gtk3-devel-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664372" comment="webkit2gtk3-minibrowser-2.34.3-23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009243274" comment="webkit2gtk3-minibrowser is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20176</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20176" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20176" ref_url="https://www.suse.com/security/cve/CVE-2021-20176" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008351.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3996-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009880.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1583-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJUC2DLRAUEA76AUONRX7RN5HCFF25LX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3996-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LJDAKFUPFUQCL6CS2YBK2EAJXXFEXMKK/" source="SUSE-SU"/>
    <description>
    A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20176/">CVE-2021-20176</cve>
	<bugzilla href="https://bugzilla.suse.com/1181836">SUSE bug 1181836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182326">SUSE bug 1182326</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659295" comment="ImageMagick-7.0.7.34-10.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659296" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659297" comment="ImageMagick-config-7-upstream-7.0.7.34-10.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252942" comment="ImageMagick-config-7-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659298" comment="ImageMagick-devel-7.0.7.34-10.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659317" comment="ImageMagick-devel-32bit-7.0.7.34-10.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659318" comment="ImageMagick-doc-7.0.7.34-10.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659319" comment="ImageMagick-extra-7.0.7.34-10.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659299" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659320" comment="libMagick++-7_Q16HDRI4-32bit-7.0.7.34-10.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231080" comment="libMagick++-7_Q16HDRI4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659300" comment="libMagick++-devel-7.0.7.34-10.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659321" comment="libMagick++-devel-32bit-7.0.7.34-10.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659301" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659322" comment="libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-10.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231081" comment="libMagickCore-7_Q16HDRI6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659302" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659323" comment="libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-10.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231082" comment="libMagickWand-7_Q16HDRI6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009659304" comment="perl-PerlMagick-7.0.7.34-10.18.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20177</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20177" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20177" ref_url="https://www.suse.com/security/cve/CVE-2021-20177" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008288.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008292.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008305.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008354.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0241-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GZRN6BW22C4S3GVCJVPHDT4HHTLVGVZE/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20177/">CVE-2021-20177</cve>
	<bugzilla href="https://bugzilla.suse.com/1180765">SUSE bug 1180765</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628529" comment="kernel-64kb-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694777" comment="kernel-64kb-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694778" comment="kernel-64kb-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628531" comment="kernel-default-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684232" comment="kernel-default-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694779" comment="kernel-default-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694780" comment="kernel-kvmsmall-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628535" comment="kernel-preempt-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009684233" comment="kernel-preempt-extra-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694781" comment="kernel-preempt-optional-5.3.18-57.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20178</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20178" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20178" ref_url="https://www.suse.com/security/cve/CVE-2021-20178" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:2149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012182.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module. This flaw allows an attacker to steal bitbucket_pipeline credentials. The highest threat from this vulnerability is to confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-20178/">CVE-2021-20178</cve>
	<bugzilla href="https://bugzilla.suse.com/1180816">SUSE bug 1180816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186493">SUSE bug 1186493</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706461" comment="ansible-2.9.27-150000.1.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706462" comment="ansible-doc-2.9.27-150000.1.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706463" comment="ansible-test-2.9.27-150000.1.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707769" comment="dracut-saltboot-0.1.1657643023.0d694ce-150000.1.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291396" comment="dracut-saltboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706465" comment="golang-github-QubitProducts-exporter_exporter-0.4.0-150000.1.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710129" comment="golang-github-QubitProducts-exporter_exporter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706466" comment="python2-hwdata-2.3.5-150000.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710130" comment="python2-hwdata is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706467" comment="python3-hwdata-2.3.5-150000.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710131" comment="python3-hwdata is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706468" comment="spacecmd-4.3.14-150000.3.83.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630831" comment="spacecmd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20180</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20180" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20180" ref_url="https://www.suse.com/security/cve/CVE-2021-20180" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:2149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012182.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module. This flaw allows an attacker to steal bitbucket_pipeline credentials. The highest threat from this vulnerability is to confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-20180/">CVE-2021-20180</cve>
	<bugzilla href="https://bugzilla.suse.com/1180942">SUSE bug 1180942</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706461" comment="ansible-2.9.27-150000.1.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706462" comment="ansible-doc-2.9.27-150000.1.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706463" comment="ansible-test-2.9.27-150000.1.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707769" comment="dracut-saltboot-0.1.1657643023.0d694ce-150000.1.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291396" comment="dracut-saltboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706465" comment="golang-github-QubitProducts-exporter_exporter-0.4.0-150000.1.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710129" comment="golang-github-QubitProducts-exporter_exporter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706466" comment="python2-hwdata-2.3.5-150000.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710130" comment="python2-hwdata is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706467" comment="python3-hwdata-2.3.5-150000.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710131" comment="python3-hwdata is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706468" comment="spacecmd-4.3.14-150000.3.83.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630831" comment="spacecmd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20181</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20181" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20181" ref_url="https://www.suse.com/security/cve/CVE-2021-20181" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008671.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008673.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0363-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SDUPZEIOIEXWFR2ZTWFFOIO2ZA3AI3VM/" source="SUSE-SU"/>
    <description>
    A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a malicious 9p client to cause a use-after-free error, potentially escalating their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20181/">CVE-2021-20181</cve>
	<bugzilla href="https://bugzilla.suse.com/1182137">SUSE bug 1182137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20191</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20191" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20191" ref_url="https://www.suse.com/security/cve/CVE-2021-20191" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:2149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012182.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage of this information to steal those credentials. The highest threat from this vulnerability is to data confidentiality. Versions before ansible 2.9.18 are affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-20191/">CVE-2021-20191</cve>
	<bugzilla href="https://bugzilla.suse.com/1181119">SUSE bug 1181119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181935">SUSE bug 1181935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706461" comment="ansible-2.9.27-150000.1.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706462" comment="ansible-doc-2.9.27-150000.1.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706463" comment="ansible-test-2.9.27-150000.1.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707769" comment="dracut-saltboot-0.1.1657643023.0d694ce-150000.1.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291396" comment="dracut-saltboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706465" comment="golang-github-QubitProducts-exporter_exporter-0.4.0-150000.1.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710129" comment="golang-github-QubitProducts-exporter_exporter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706466" comment="python2-hwdata-2.3.5-150000.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710130" comment="python2-hwdata is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706467" comment="python3-hwdata-2.3.5-150000.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710131" comment="python3-hwdata is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706468" comment="spacecmd-4.3.14-150000.3.83.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630831" comment="spacecmd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20193</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20193" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20193" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20193" ref_url="https://www.suse.com/security/cve/CVE-2021-20193" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:632-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:633-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010950.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0494-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRDSUUE3LUKBDRLPB7GTT5QZRPV5J7O4/" source="SUSE-SU"/>
    <description>
    A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20193/">CVE-2021-20193</cve>
	<bugzilla href="https://bugzilla.suse.com/1181131">SUSE bug 1181131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494279" comment="tar-1.30-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151391" comment="tar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679584" comment="tar-backup-scripts-1.34-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153774" comment="tar-backup-scripts is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679585" comment="tar-doc-1.34-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251575" comment="tar-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494280" comment="tar-lang-1.30-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151392" comment="tar-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494281" comment="tar-rmt-1.30-3.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177166" comment="tar-rmt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679586" comment="tar-tests-1.34-150000.3.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153775" comment="tar-tests is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20196</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20196" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20196" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20196" ref_url="https://www.suse.com/security/cve/CVE-2021-20196" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0177-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021445.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0210-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0210-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010676.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6XYIZAS6LJG7AX5XUIXPP347424BX5VK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0210-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ORE7QLMZXD7OV3HIKQUG3SXU2RG6ONFC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0210-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IUV2UU2CMT6KXSJ7THBLFDIVHI27MZFH/" source="SUSE-SU"/>
    <description>
    A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport commands if the selected floppy drive is not initialized with a block device. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20196/">CVE-2021-20196</cve>
	<bugzilla href="https://bugzilla.suse.com/1181361">SUSE bug 1181361</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663895" comment="qemu-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664031" comment="qemu-arm-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664032" comment="qemu-audio-alsa-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664033" comment="qemu-audio-pa-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664034" comment="qemu-audio-spice-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663900" comment="qemu-block-curl-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664035" comment="qemu-block-dmg-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664036" comment="qemu-block-gluster-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663901" comment="qemu-block-iscsi-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664037" comment="qemu-block-nfs-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663902" comment="qemu-block-rbd-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663903" comment="qemu-block-ssh-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663904" comment="qemu-chardev-baum-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664038" comment="qemu-chardev-spice-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664039" comment="qemu-extra-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663906" comment="qemu-guest-agent-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664040" comment="qemu-hw-display-qxl-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664041" comment="qemu-hw-display-virtio-gpu-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664042" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664043" comment="qemu-hw-display-virtio-vga-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664044" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664045" comment="qemu-hw-usb-redirect-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664046" comment="qemu-hw-usb-smartcard-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663913" comment="qemu-ipxe-1.0.0+-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664047" comment="qemu-ivshmem-tools-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663914" comment="qemu-ksm-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663915" comment="qemu-kvm-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663916" comment="qemu-lang-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664048" comment="qemu-linux-user-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664049" comment="qemu-microvm-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664050" comment="qemu-ppc-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664059" comment="qemu-s390-4.2.1-11.34.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664051" comment="qemu-s390x-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663919" comment="qemu-seabios-1.14.0_0_g155821a-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663920" comment="qemu-sgabios-8-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663921" comment="qemu-skiboot-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664052" comment="qemu-testsuite-5.2.0-150300.109.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663845" comment="qemu-tools-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663922" comment="qemu-ui-curses-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664053" comment="qemu-ui-gtk-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664054" comment="qemu-ui-opengl-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664055" comment="qemu-ui-spice-app-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664056" comment="qemu-ui-spice-core-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009663927" comment="qemu-vgabios-1.14.0_0_g155821a-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664057" comment="qemu-vhost-user-gpu-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009664058" comment="qemu-x86-5.2.0-150300.109.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20197</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20197" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20197" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20197" ref_url="https://www.suse.com/security/cve/CVE-2021-20197" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010497.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1475-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N6RYWEZ5BKTK6UEP6HAB7B466BPC3SMJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3616-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4TQ3DLF5YEQDDJUON6WGBX2HVVM7FOLB/" source="SUSE-SU"/>
    <description>
    There is an open race window when writing output in the following utilities in GNU binutils1: ar, objcopy, strip, and ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20197/">CVE-2021-20197</cve>
	<bugzilla href="https://bugzilla.suse.com/1181452">SUSE bug 1181452</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653451" comment="binutils-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653452" comment="binutils-devel-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653455" comment="binutils-devel-32bit-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653458" comment="binutils-gold-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653456" comment="bpftrace-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654065" comment="bpftrace is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653457" comment="bpftrace-tools-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654066" comment="bpftrace-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653562" comment="cross-aarch64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653563" comment="cross-arm-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653564" comment="cross-avr-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653565" comment="cross-epiphany-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238034" comment="cross-epiphany-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653566" comment="cross-hppa-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653567" comment="cross-hppa64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653568" comment="cross-i386-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653569" comment="cross-ia64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653570" comment="cross-m68k-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653571" comment="cross-mips-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653572" comment="cross-ppc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653573" comment="cross-ppc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653574" comment="cross-ppc64le-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653575" comment="cross-riscv64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238035" comment="cross-riscv64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653576" comment="cross-rx-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238036" comment="cross-rx-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653577" comment="cross-s390-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653578" comment="cross-s390x-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653579" comment="cross-sparc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653580" comment="cross-sparc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653581" comment="cross-spu-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653582" comment="cross-x86_64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653453" comment="libctf-nobfd0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653454" comment="libctf0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20199</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20199" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20199" ref_url="https://www.suse.com/security/cve/CVE-2021-20199" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:357-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-March/022067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:358-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-March/022068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:23018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010347.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013710.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:23018-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5BA2TLW7O5ZURGQUAQUH4HD5SQYNDDZ6/" source="SUSE-SU"/>
    <description>
    Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-20199/">CVE-2021-20199</cve>
	<bugzilla href="https://bugzilla.suse.com/1181640">SUSE bug 1181640</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669747" comment="conmon-2.0.30-150300.8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009280795" comment="conmon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669744" comment="libcontainers-common-20210626-150300.8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266789" comment="libcontainers-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669745" comment="libseccomp-devel-2.5.3-150300.10.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267594" comment="libseccomp-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669860" comment="libseccomp-tools-2.5.3-150300.10.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267595" comment="libseccomp-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669746" comment="libseccomp2-2.5.3-150300.10.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267596" comment="libseccomp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669861" comment="libseccomp2-32bit-2.5.3-150300.10.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267597" comment="libseccomp2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669748" comment="podman-3.4.4-150300.9.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266791" comment="podman is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669749" comment="podman-cni-config-3.4.4-150300.9.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266792" comment="podman-cni-config is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20201</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20201" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20201" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20201" ref_url="https://www.suse.com/security/cve/CVE-2021-20201" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1902-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019243.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2881-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0874-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AINSWYQLD5FH4GUOEP5FWWA5CMFHTUDX/" source="SUSE-SU"/>
    <description>
    A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-25"/>
	<updated date="2022-09-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20201/">CVE-2021-20201</cve>
	<bugzilla href="https://bugzilla.suse.com/1181686">SUSE bug 1181686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707088" comment="libspice-server-devel-0.14.3-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153281" comment="libspice-server-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707089" comment="libspice-server1-0.14.3-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20203</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20203" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20203" ref_url="https://www.suse.com/security/cve/CVE-2021-20203" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008671.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0363-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SDUPZEIOIEXWFR2ZTWFFOIO2ZA3AI3VM/" source="SUSE-SU"/>
    <description>
    An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20203/">CVE-2021-20203</cve>
	<bugzilla href="https://bugzilla.suse.com/1181639">SUSE bug 1181639</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20206</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20206" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20206" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20206" ref_url="https://www.suse.com/security/cve/CVE-2021-20206" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:2741-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-October/025850.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012798.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012818.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1130-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010404.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012578.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3766-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4592-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013297.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013710.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0770-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WFIDXN6UAK2I4PPVFPBE4STNQH2FZQ4A/" source="SUSE-SU"/>
    <description>
    An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as 'reboot'. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20206/">CVE-2021-20206</cve>
	<bugzilla href="https://bugzilla.suse.com/1181961">SUSE bug 1181961</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717542" comment="buildah-1.27.1-150300.8.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266828" comment="buildah is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725840" comment="cni-0.7.1-150100.3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009280793" comment="cni is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009725841" comment="cni-plugins-0.8.6-150100.3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009280794" comment="cni-plugins is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717534" comment="libgpg-error-devel-1.42-150300.9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009721855" comment="libgpg-error-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717624" comment="libgpg-error-devel-32bit-1.42-150300.9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009721856" comment="libgpg-error-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717535" comment="libgpg-error0-1.42-150300.9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009721857" comment="libgpg-error0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009717536" comment="libgpg-error0-32bit-1.42-150300.9.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009721858" comment="libgpg-error0-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20208</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20208" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20208" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20208" ref_url="https://www.suse.com/security/cve/CVE-2021-20208" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008617.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008716.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0639-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/65NUX6IGI72XJIWLCF5QOKIKAWWJUMEY/" source="SUSE-SU"/>
    <description>
    A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20208/">CVE-2021-20208</cve>
	<bugzilla href="https://bugzilla.suse.com/1183239">SUSE bug 1183239</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628352" comment="cifs-utils-6.9-5.12.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151261" comment="cifs-utils is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20221</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20221" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20221" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20221" ref_url="https://www.suse.com/security/cve/CVE-2021-20221" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14774-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-August/019812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008910.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1894-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008954.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0363-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SDUPZEIOIEXWFR2ZTWFFOIO2ZA3AI3VM/" source="SUSE-SU"/>
    <description>
    An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU on aarch64 platform. The issue occurs because while writing an interrupt ID to the controller memory area, it is not masked to be 4 bits wide. It may lead to the said issue while updating controller state fields and their subsequent processing. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-20221/">CVE-2021-20221</cve>
	<bugzilla href="https://bugzilla.suse.com/1181933">SUSE bug 1181933</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120224" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20224</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20224" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20224" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20224" ref_url="https://www.suse.com/security/cve/CVE-2021-20224" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3138-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012155.html" source="SUSE-SU"/>
    <description>
    An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GetPixelIndex() could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead to an undefined behaviour or a crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-08"/>
	<updated date="2022-09-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20224/">CVE-2021-20224</cve>
	<bugzilla href="https://bugzilla.suse.com/1202800">SUSE bug 1202800</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708089" comment="ImageMagick-7.0.7.34-150200.10.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708090" comment="ImageMagick-config-7-SUSE-7.0.7.34-150200.10.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708091" comment="ImageMagick-config-7-upstream-7.0.7.34-150200.10.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252942" comment="ImageMagick-config-7-upstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708092" comment="ImageMagick-devel-7.0.7.34-150200.10.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708161" comment="ImageMagick-devel-32bit-7.0.7.34-150200.10.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708162" comment="ImageMagick-doc-7.0.7.34-150200.10.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708163" comment="ImageMagick-extra-7.0.7.34-150200.10.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708093" comment="libMagick++-7_Q16HDRI4-7.0.7.34-150200.10.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708164" comment="libMagick++-7_Q16HDRI4-32bit-7.0.7.34-150200.10.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231080" comment="libMagick++-7_Q16HDRI4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708094" comment="libMagick++-devel-7.0.7.34-150200.10.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708165" comment="libMagick++-devel-32bit-7.0.7.34-150200.10.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708095" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-150200.10.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708166" comment="libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-150200.10.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231081" comment="libMagickCore-7_Q16HDRI6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708096" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-150200.10.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708167" comment="libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-150200.10.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231082" comment="libMagickWand-7_Q16HDRI6-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009708097" comment="perl-PerlMagick-7.0.7.34-150200.10.36.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20225</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20225" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20225" ref_url="https://www.suse.com/security/cve/CVE-2021-20225" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0681-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008423.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14659-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-March/018162.html" source="SUSE-SU"/>
		<reference ref_id="TID000019892" ref_url="https://www.suse.com/support/kb/doc/?id=000019892" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0462-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XXPYL42MSKRB4D7LRFMW7PBGGLKSJKPS/" source="SUSE-SU"/>
    <description>
    A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20225/">CVE-2021-20225</cve>
	<bugzilla href="https://bugzilla.suse.com/1182262">SUSE bug 1182262</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628504" comment="grub2-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628505" comment="grub2-arm64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623763" comment="grub2-arm64-efi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628506" comment="grub2-i386-pc-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628507" comment="grub2-powerpc-ieee1275-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623765" comment="grub2-powerpc-ieee1275 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628509" comment="grub2-snapper-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628510" comment="grub2-systemd-sleep-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628511" comment="grub2-x86_64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20228</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20228" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20228" ref_url="https://www.suse.com/security/cve/CVE-2021-20228" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:2149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012182.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0081-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7KK2SNPNAB353QA6BU4SNJDQ3FXZOY5/" source="SUSE-SU"/>
    <description>
    A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The highest threat from this vulnerability is to confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-20228/">CVE-2021-20228</cve>
	<bugzilla href="https://bugzilla.suse.com/1181935">SUSE bug 1181935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706461" comment="ansible-2.9.27-150000.1.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706462" comment="ansible-doc-2.9.27-150000.1.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281504" comment="ansible-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706463" comment="ansible-test-2.9.27-150000.1.14.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009281505" comment="ansible-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707769" comment="dracut-saltboot-0.1.1657643023.0d694ce-150000.1.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291396" comment="dracut-saltboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706465" comment="golang-github-QubitProducts-exporter_exporter-0.4.0-150000.1.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710129" comment="golang-github-QubitProducts-exporter_exporter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706466" comment="python2-hwdata-2.3.5-150000.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710130" comment="python2-hwdata is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706467" comment="python3-hwdata-2.3.5-150000.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710131" comment="python3-hwdata is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009706468" comment="spacecmd-4.3.14-150000.3.83.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630831" comment="spacecmd is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120229" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20229</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20229" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20229" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20229" ref_url="https://www.suse.com/security/cve/CVE-2021-20229" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0543-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008357.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008358.html" source="SUSE-SU"/>
    <description>
    A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-20229/">CVE-2021-20229</cve>
	<bugzilla href="https://bugzilla.suse.com/1182039">SUSE bug 1182039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628833" comment="libpq5-13.2-5.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20231</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20231" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20231" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20231" ref_url="https://www.suse.com/security/cve/CVE-2021-20231" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008603.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:99-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008545.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008548.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0470-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LUDG7BXPVVVALM2YUCJ2EKIRBHFXMY75/" source="SUSE-SU"/>
    <description>
    A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20231/">CVE-2021-20231</cve>
	<bugzilla href="https://bugzilla.suse.com/1183457">SUSE bug 1183457</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628489" comment="gnutls-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628491" comment="libgnutls30-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177128" comment="libgnutls30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628492" comment="libgnutls30-32bit-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009235745" comment="libgnutls30-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20232</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20232" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20232" ref_url="https://www.suse.com/security/cve/CVE-2021-20232" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:87-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008603.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:99-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008545.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008548.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0470-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LUDG7BXPVVVALM2YUCJ2EKIRBHFXMY75/" source="SUSE-SU"/>
    <description>
    A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20232/">CVE-2021-20232</cve>
	<bugzilla href="https://bugzilla.suse.com/1183456">SUSE bug 1183456</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628489" comment="gnutls-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628491" comment="libgnutls30-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177128" comment="libgnutls30 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628492" comment="libgnutls30-32bit-3.6.7-14.10.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009235745" comment="libgnutls30-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120233" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20233</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20233" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20233" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20233" ref_url="https://www.suse.com/security/cve/CVE-2021-20233" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0681-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008423.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14659-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-March/018162.html" source="SUSE-SU"/>
		<reference ref_id="TID000019892" ref_url="https://www.suse.com/support/kb/doc/?id=000019892" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0462-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XXPYL42MSKRB4D7LRFMW7PBGGLKSJKPS/" source="SUSE-SU"/>
    <description>
    A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumption that expressing a quoted single quote will require 3 characters, while it actually requires 4 characters which allows an attacker to corrupt memory by one byte for each quote in the input. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20233/">CVE-2021-20233</cve>
	<bugzilla href="https://bugzilla.suse.com/1182263">SUSE bug 1182263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183135">SUSE bug 1183135</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628504" comment="grub2-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628505" comment="grub2-arm64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623763" comment="grub2-arm64-efi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628506" comment="grub2-i386-pc-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628507" comment="grub2-powerpc-ieee1275-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623765" comment="grub2-powerpc-ieee1275 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628509" comment="grub2-snapper-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628510" comment="grub2-systemd-sleep-plugin-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628511" comment="grub2-x86_64-efi-2.04-20.4 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20241</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20241" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20241" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20241" ref_url="https://www.suse.com/security/cve/CVE-2021-20241" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008374.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0377-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6SG6MVYKVW7O5POXSG4CGOWDIOAZCWWT/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20241/">CVE-2021-20241</cve>
	<bugzilla href="https://bugzilla.suse.com/1182335">SUSE bug 1182335</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20243</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20243" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20243" ref_url="https://www.suse.com/security/cve/CVE-2021-20243" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008374.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0377-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6SG6MVYKVW7O5POXSG4CGOWDIOAZCWWT/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20243/">CVE-2021-20243</cve>
	<bugzilla href="https://bugzilla.suse.com/1182336">SUSE bug 1182336</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20244</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20244" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20244" ref_url="https://www.suse.com/security/cve/CVE-2021-20244" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008374.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0377-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6SG6MVYKVW7O5POXSG4CGOWDIOAZCWWT/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20244/">CVE-2021-20244</cve>
	<bugzilla href="https://bugzilla.suse.com/1182325">SUSE bug 1182325</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120246" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20246</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20246" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20246" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20246" ref_url="https://www.suse.com/security/cve/CVE-2021-20246" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008374.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0377-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6SG6MVYKVW7O5POXSG4CGOWDIOAZCWWT/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20246/">CVE-2021-20246</cve>
	<bugzilla href="https://bugzilla.suse.com/1182337">SUSE bug 1182337</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20254</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20254" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20254" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20254" ref_url="https://www.suse.com/security/cve/CVE-2021-20254" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008706.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008707.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008708.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1445-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14709-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008729.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010209.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0636-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PJGQFNCBDL3CAZODHIFOKKWU3XGKLEKA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3187-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ANLZ3MSWRYNRTSO7FPC7CORZ4WAS3YKE/" source="SUSE-SU"/>
    <description>
    A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-20254/">CVE-2021-20254</cve>
	<bugzilla href="https://bugzilla.suse.com/1184677">SUSE bug 1184677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185886">SUSE bug 1185886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189860">SUSE bug 1189860</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633335" comment="ctdb-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633402" comment="ctdb-pcp-pmda-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233089" comment="ctdb-pcp-pmda is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633403" comment="ctdb-tests-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633207" comment="libdcerpc-binding0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633208" comment="libdcerpc-binding0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633209" comment="libdcerpc-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633210" comment="libdcerpc-samr-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633211" comment="libdcerpc-samr0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633404" comment="libdcerpc-samr0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633212" comment="libdcerpc0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633213" comment="libdcerpc0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633214" comment="libndr-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633215" comment="libndr-krb5pac-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633216" comment="libndr-krb5pac0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633217" comment="libndr-krb5pac0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633218" comment="libndr-nbt-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633219" comment="libndr-nbt0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633220" comment="libndr-nbt0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633221" comment="libndr-standard-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633222" comment="libndr-standard0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633223" comment="libndr-standard0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633224" comment="libndr1-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633225" comment="libndr1-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633226" comment="libnetapi-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633405" comment="libnetapi-devel-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009287505" comment="libnetapi-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633227" comment="libnetapi0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633228" comment="libnetapi0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633229" comment="libsamba-credentials-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633230" comment="libsamba-credentials0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633231" comment="libsamba-credentials0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633232" comment="libsamba-errors-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633233" comment="libsamba-errors0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633234" comment="libsamba-errors0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633235" comment="libsamba-hostconfig-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633236" comment="libsamba-hostconfig0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633237" comment="libsamba-hostconfig0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633238" comment="libsamba-passdb-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633239" comment="libsamba-passdb0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633240" comment="libsamba-passdb0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633241" comment="libsamba-policy-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633242" comment="libsamba-policy-python3-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266818" comment="libsamba-policy-python3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633243" comment="libsamba-policy0-python3-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633406" comment="libsamba-policy0-python3-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266820" comment="libsamba-policy0-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633244" comment="libsamba-util-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633245" comment="libsamba-util0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633246" comment="libsamba-util0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633247" comment="libsamdb-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633248" comment="libsamdb0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633249" comment="libsamdb0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633250" comment="libsmbclient-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633251" comment="libsmbclient0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633407" comment="libsmbclient0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633252" comment="libsmbconf-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633253" comment="libsmbconf0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633254" comment="libsmbconf0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633255" comment="libsmbldap-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633256" comment="libsmbldap2-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633257" comment="libsmbldap2-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633258" comment="libtevent-util-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633259" comment="libtevent-util0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633260" comment="libtevent-util0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633261" comment="libwbclient-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633262" comment="libwbclient0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633263" comment="libwbclient0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633264" comment="samba-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633315" comment="samba-ad-dc-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266821" comment="samba-ad-dc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633408" comment="samba-ad-dc-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266822" comment="samba-ad-dc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633265" comment="samba-ceph-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009162650" comment="samba-ceph is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633266" comment="samba-client-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633409" comment="samba-client-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633267" comment="samba-core-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633410" comment="samba-doc-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633268" comment="samba-dsdb-modules-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177163" comment="samba-dsdb-modules is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633269" comment="samba-libs-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633270" comment="samba-libs-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633271" comment="samba-libs-python3-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633411" comment="samba-libs-python3-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266826" comment="samba-libs-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633272" comment="samba-python3-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633412" comment="samba-test-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633273" comment="samba-winbind-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633274" comment="samba-winbind-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20255</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20255" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20255" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20255" ref_url="https://www.suse.com/security/cve/CVE-2021-20255" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2789-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-August/019909.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009332.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2924-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009390.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2955-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2957-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009698.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3635-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009705.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1202-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7XTOHNMISPT4N5NUXQJPKV5LQNNGSMFI/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2789-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UE3MLTPF62745SPUUDQR6ROYVP4GG6DT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2858-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GGOXRRBMGRJGBNXEGPCZ3JFLXCMIM6A3/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3614-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/26KPX43RJBRTCX3JER7CN7MAT4QEGAED/" source="SUSE-SU"/>
    <description>
    A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20255/">CVE-2021-20255</cve>
	<bugzilla href="https://bugzilla.suse.com/1182651">SUSE bug 1182651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182654">SUSE bug 1182654</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630694" comment="qemu-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630760" comment="qemu-arm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630761" comment="qemu-audio-alsa-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630762" comment="qemu-audio-pa-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630763" comment="qemu-audio-spice-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630699" comment="qemu-block-curl-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630764" comment="qemu-block-dmg-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630765" comment="qemu-block-gluster-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630700" comment="qemu-block-iscsi-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630766" comment="qemu-block-nfs-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630701" comment="qemu-block-rbd-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630702" comment="qemu-block-ssh-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630703" comment="qemu-chardev-baum-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630767" comment="qemu-chardev-spice-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630768" comment="qemu-extra-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630705" comment="qemu-guest-agent-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630769" comment="qemu-hw-display-qxl-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630770" comment="qemu-hw-display-virtio-gpu-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630771" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630772" comment="qemu-hw-display-virtio-vga-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630773" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630774" comment="qemu-hw-usb-redirect-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630775" comment="qemu-hw-usb-smartcard-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630712" comment="qemu-ipxe-1.0.0+-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630776" comment="qemu-ivshmem-tools-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630713" comment="qemu-ksm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630714" comment="qemu-kvm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630715" comment="qemu-lang-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630777" comment="qemu-microvm-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630778" comment="qemu-ppc-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630556" comment="qemu-s390-4.2.1-11.28.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630779" comment="qemu-s390x-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630718" comment="qemu-seabios-1.14.0_0_g155821a-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630719" comment="qemu-sgabios-8-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630720" comment="qemu-skiboot-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630653" comment="qemu-tools-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630721" comment="qemu-ui-curses-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630780" comment="qemu-ui-gtk-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630781" comment="qemu-ui-opengl-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630782" comment="qemu-ui-spice-app-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630783" comment="qemu-ui-spice-core-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630726" comment="qemu-vgabios-1.14.0_0_g155821a-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630784" comment="qemu-vhost-user-gpu-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630785" comment="qemu-x86-5.2.0-103.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120257" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20257</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20257" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20257" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20257" ref_url="https://www.suse.com/security/cve/CVE-2021-20257" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1023-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008649.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008646.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008655.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008654.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008671.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008673.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008910.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008916.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1894-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1895-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008959.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1375-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010821.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0600-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ATYM36RK6JXDXZ33F2KFHZHDZ3F3YD24/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1043-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/" source="SUSE-SU"/>
    <description>
    An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20257/">CVE-2021-20257</cve>
	<bugzilla href="https://bugzilla.suse.com/1182577">SUSE bug 1182577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182846">SUSE bug 1182846</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629929" comment="qemu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629930" comment="qemu-arm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629933" comment="qemu-audio-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629934" comment="qemu-block-curl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629936" comment="qemu-block-rbd-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629937" comment="qemu-block-ssh-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629939" comment="qemu-chardev-spice-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629940" comment="qemu-guest-agent-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629941" comment="qemu-hw-display-qxl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629942" comment="qemu-hw-display-virtio-gpu-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629943" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629944" comment="qemu-hw-display-virtio-vga-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629946" comment="qemu-hw-usb-redirect-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694915" comment="qemu-hw-usb-smartcard-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629947" comment="qemu-ipxe-1.0.0+-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629948" comment="qemu-ksm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694916" comment="qemu-microvm-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629951" comment="qemu-ppc-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629953" comment="qemu-seabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629954" comment="qemu-sgabios-8-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629007" comment="qemu-tools-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629956" comment="qemu-ui-curses-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629957" comment="qemu-ui-gtk-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629958" comment="qemu-ui-opengl-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629959" comment="qemu-ui-spice-app-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629960" comment="qemu-ui-spice-core-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629961" comment="qemu-vgabios-1.14.0_0_g155821a-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629962" comment="qemu-x86-5.2.0-9.18 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120263" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20263</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20263" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20263" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20263" ref_url="https://www.suse.com/security/cve/CVE-2021-20263" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1942-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008986.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1942-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEKBDJBTGKO53MSKM3SRYVUQDWIJ2N5I/" source="SUSE-SU"/>
    <description>
    A flaw was found in the virtio-fs shared file system daemon (virtiofsd) of QEMU. The new 'xattrmap' option may cause the 'security.capability' xattr in the guest to not drop on file write, potentially leading to a modified, privileged executable in the guest. In rare circumstances, this flaw could be used by a malicious user to elevate their privileges within the guest.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-20263/">CVE-2021-20263</cve>
	<bugzilla href="https://bugzilla.suse.com/1183373">SUSE bug 1183373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500101" comment="qemu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625287" comment="qemu-arm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625288" comment="qemu-audio-alsa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266837" comment="qemu-audio-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625289" comment="qemu-audio-pa-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266839" comment="qemu-audio-pa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625290" comment="qemu-audio-spice-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623393" comment="qemu-audio-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500106" comment="qemu-block-curl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625291" comment="qemu-block-dmg-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625292" comment="qemu-block-gluster-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009223339" comment="qemu-block-gluster is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500107" comment="qemu-block-iscsi-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625293" comment="qemu-block-nfs-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266841" comment="qemu-block-nfs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500108" comment="qemu-block-rbd-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500109" comment="qemu-block-ssh-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500110" comment="qemu-chardev-baum-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623394" comment="qemu-chardev-baum is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625294" comment="qemu-chardev-spice-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623395" comment="qemu-chardev-spice is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625295" comment="qemu-extra-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500112" comment="qemu-guest-agent-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625296" comment="qemu-hw-display-qxl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623396" comment="qemu-hw-display-qxl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625297" comment="qemu-hw-display-virtio-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623397" comment="qemu-hw-display-virtio-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625298" comment="qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623398" comment="qemu-hw-display-virtio-gpu-pci is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625299" comment="qemu-hw-display-virtio-vga-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623399" comment="qemu-hw-display-virtio-vga is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625300" comment="qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623400" comment="qemu-hw-s390x-virtio-gpu-ccw is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625301" comment="qemu-hw-usb-redirect-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623401" comment="qemu-hw-usb-redirect is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625302" comment="qemu-hw-usb-smartcard-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623402" comment="qemu-hw-usb-smartcard is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500119" comment="qemu-ipxe-1.0.0+-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625303" comment="qemu-ivshmem-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623403" comment="qemu-ivshmem-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500120" comment="qemu-ksm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009161270" comment="qemu-ksm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500121" comment="qemu-kvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500122" comment="qemu-lang-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620964" comment="qemu-microvm-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291440" comment="qemu-microvm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625304" comment="qemu-ppc-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625305" comment="qemu-s390x-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623404" comment="qemu-s390x is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500125" comment="qemu-seabios-1.14.0_0_g155821a-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500126" comment="qemu-sgabios-8-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500127" comment="qemu-skiboot-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623405" comment="qemu-skiboot is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494310" comment="qemu-tools-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500128" comment="qemu-ui-curses-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266842" comment="qemu-ui-curses is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625306" comment="qemu-ui-gtk-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266843" comment="qemu-ui-gtk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625307" comment="qemu-ui-opengl-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623406" comment="qemu-ui-opengl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625308" comment="qemu-ui-spice-app-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291441" comment="qemu-ui-spice-app is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625309" comment="qemu-ui-spice-core-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623407" comment="qemu-ui-spice-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009500133" comment="qemu-vgabios-1.14.0_0_g155821a-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625310" comment="qemu-vhost-user-gpu-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291442" comment="qemu-vhost-user-gpu is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625311" comment="qemu-x86-5.2.0-17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20266</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20266" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20266" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20266" ref_url="https://www.suse.com/security/cve/CVE-2021-20266" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1052-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-May/023165.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1356-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011325.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1360-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011327.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012880.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012916.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:52-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:55-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:56-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:589-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:592-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010698.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010958.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:323-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013692.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009377.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:621-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009654.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009674.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3939-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012871.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1366-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WOGLQWSIIR4HYRWXGETEIHB6SM6A2MNK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2682-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQDL4MT3J7VM3IS3TI4EMLQJHDPTSZLZ/" source="SUSE-SU"/>
    <description>
    A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20266/">CVE-2021-20266</cve>
	<bugzilla href="https://bugzilla.suse.com/1183632">SUSE bug 1183632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498315" comment="python2-rpm-4.14.3-37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231455" comment="python2-rpm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494330" comment="python3-rpm-4.14.3-37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231456" comment="python3-rpm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494331" comment="rpm-4.14.3-37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151943" comment="rpm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494332" comment="rpm-32bit-4.14.3-37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151944" comment="rpm-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496657" comment="rpm-build-4.14.3-37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151945" comment="rpm-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494333" comment="rpm-devel-4.14.3-37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151946" comment="rpm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498199" comment="rpm-ndb-4.14.3-37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631126" comment="rpm-ndb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631125" comment="rpm-ndb-32bit-4.14.3-37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631127" comment="rpm-ndb-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20268</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20268" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20268" ref_url="https://www.suse.com/security/cve/CVE-2021-20268" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1975-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42KHRU57J2OGM24I4AOZ7JW6VV2BOPCV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YMMFY2OXW23MB2M73JXBDJKJD5G5YCOX/" source="SUSE-SU"/>
    <description>
    An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls dev_map_init_map or sock_map_alloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20268/">CVE-2021-20268</cve>
	<bugzilla href="https://bugzilla.suse.com/1183077">SUSE bug 1183077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183095">SUSE bug 1183095</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621091" comment="cluster-md-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621082" comment="cluster-md-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501742" comment="cluster-md-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621092" comment="cluster-md-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621093" comment="dlm-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621083" comment="dlm-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501743" comment="dlm-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621094" comment="dlm-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621095" comment="gfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621084" comment="gfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501744" comment="gfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621096" comment="gfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494318" comment="kernel-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494319" comment="kernel-64kb-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621097" comment="kernel-64kb-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621098" comment="kernel-64kb-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621099" comment="kernel-64kb-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498194" comment="kernel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498195" comment="kernel-azure-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621085" comment="kernel-azure-extra-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621086" comment="kernel-azure-livepatch-devel-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621087" comment="kernel-azure-optional-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621100" comment="kernel-debug-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621101" comment="kernel-debug-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621102" comment="kernel-debug-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494320" comment="kernel-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494321" comment="kernel-default-base-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621103" comment="kernel-default-base-rebuild-5.3.18-59.5.2.18.2.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494322" comment="kernel-default-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621104" comment="kernel-default-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621105" comment="kernel-default-livepatch-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621106" comment="kernel-default-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621107" comment="kernel-default-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494323" comment="kernel-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498196" comment="kernel-devel-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496652" comment="kernel-docs-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621108" comment="kernel-docs-html-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621109" comment="kernel-kvmsmall-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621110" comment="kernel-kvmsmall-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621111" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494324" comment="kernel-macros-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496653" comment="kernel-obs-build-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621113" comment="kernel-obs-qa-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494325" comment="kernel-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496654" comment="kernel-preempt-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621114" comment="kernel-preempt-extra-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621115" comment="kernel-preempt-livepatch-devel-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621116" comment="kernel-preempt-optional-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496655" comment="kernel-source-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498197" comment="kernel-source-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621117" comment="kernel-source-vanilla-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496656" comment="kernel-syms-5.3.18-59.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498198" comment="kernel-syms-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494326" comment="kernel-zfcpdump-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621118" comment="kselftests-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621088" comment="kselftests-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621119" comment="kselftests-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621120" comment="kselftests-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621121" comment="ocfs2-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621089" comment="ocfs2-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501745" comment="ocfs2-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621122" comment="ocfs2-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621123" comment="reiserfs-kmp-64kb-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621090" comment="reiserfs-kmp-azure-5.3.18-38.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497152" comment="reiserfs-kmp-default-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621124" comment="reiserfs-kmp-preempt-5.3.18-59.5.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20271</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20271" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20271" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20271" ref_url="https://www.suse.com/security/cve/CVE-2021-20271" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1052-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-May/023165.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1356-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011325.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1360-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011327.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012880.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012916.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:52-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:55-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:56-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:589-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:592-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010698.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010958.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:323-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013692.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009377.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:621-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:742-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009654.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009674.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3939-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012871.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1366-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WOGLQWSIIR4HYRWXGETEIHB6SM6A2MNK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2682-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQDL4MT3J7VM3IS3TI4EMLQJHDPTSZLZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2685-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PUJW4L55UGKEL4ROYV7WZNQDNBJXXLLG/" source="SUSE-SU"/>
    <description>
    A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-20271/">CVE-2021-20271</cve>
	<bugzilla href="https://bugzilla.suse.com/1183545">SUSE bug 1183545</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630905" comment="hawkey-man-0.62.0-5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630911" comment="hawkey-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630906" comment="libdnf-devel-0.62.0-5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630912" comment="libdnf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630907" comment="libdnf-repo-config-zypp-0.62.0-5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630913" comment="libdnf-repo-config-zypp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630908" comment="libdnf2-0.62.0-5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630914" comment="libdnf2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498315" comment="python2-rpm-4.14.3-37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231455" comment="python2-rpm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630909" comment="python3-hawkey-0.62.0-5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630915" comment="python3-hawkey is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009630910" comment="python3-libdnf-0.62.0-5.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630916" comment="python3-libdnf is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494330" comment="python3-rpm-4.14.3-37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231456" comment="python3-rpm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494331" comment="rpm-4.14.3-37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151943" comment="rpm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494332" comment="rpm-32bit-4.14.3-37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151944" comment="rpm-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496657" comment="rpm-build-4.14.3-37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151945" comment="rpm-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494333" comment="rpm-devel-4.14.3-37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151946" comment="rpm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009498199" comment="rpm-ndb-4.14.3-37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631126" comment="rpm-ndb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631125" comment="rpm-ndb-32bit-4.14.3-37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631127" comment="rpm-ndb-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20277</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20277" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20277" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20277" ref_url="https://www.suse.com/security/cve/CVE-2021-20277" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:132-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010200.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:138-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010204.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:343-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010517.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010518.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010519.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010520.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:373-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:282-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0944-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008707.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009483.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0469-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QLNA72I7E6KKMIQOHXHYRPDYGMW5KH4K/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0636-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PJGQFNCBDL3CAZODHIFOKKWU3XGKLEKA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3187-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ANLZ3MSWRYNRTSO7FPC7CORZ4WAS3YKE/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0283-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/72ZRNFZ3DE3TJA7HFCVV476YJN6I4B5M/" source="SUSE-SU"/>
    <description>
    A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20277/">CVE-2021-20277</cve>
	<bugzilla href="https://bugzilla.suse.com/1183574">SUSE bug 1183574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665442" comment="apache2-mod_apparmor-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154050" comment="apache2-mod_apparmor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665340" comment="apparmor-abstractions-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154052" comment="apparmor-abstractions is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665341" comment="apparmor-docs-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154053" comment="apparmor-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665342" comment="apparmor-parser-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154054" comment="apparmor-parser is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665343" comment="apparmor-parser-lang-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154055" comment="apparmor-parser-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665344" comment="apparmor-profiles-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154056" comment="apparmor-profiles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665345" comment="apparmor-utils-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154057" comment="apparmor-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665346" comment="apparmor-utils-lang-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154058" comment="apparmor-utils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665452" comment="ctdb-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666478" comment="ctdb-pcp-pmda-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233089" comment="ctdb-pcp-pmda is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633403" comment="ctdb-tests-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665347" comment="krb5-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665348" comment="krb5-32bit-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665349" comment="krb5-client-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665350" comment="krb5-devel-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666479" comment="krb5-devel-32bit-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152677" comment="krb5-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666480" comment="krb5-mini-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152679" comment="krb5-mini is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666481" comment="krb5-mini-devel-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152680" comment="krb5-mini-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665443" comment="krb5-plugin-kdb-ldap-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152681" comment="krb5-plugin-kdb-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665351" comment="krb5-plugin-preauth-otp-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152682" comment="krb5-plugin-preauth-otp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665352" comment="krb5-plugin-preauth-pkinit-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152683" comment="krb5-plugin-preauth-pkinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665353" comment="krb5-plugin-preauth-spake-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666842" comment="krb5-plugin-preauth-spake is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665444" comment="krb5-server-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152684" comment="krb5-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665354" comment="ldb-tools-2.4.1-150300.3.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152723" comment="ldb-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665355" comment="libapparmor-devel-2.13.6-150300.3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154059" comment="libapparmor-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665356" comment="libapparmor1-2.13.6-150300.3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154060" comment="libapparmor1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665357" comment="libapparmor1-32bit-2.13.6-150300.3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154061" comment="libapparmor1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633207" comment="libdcerpc-binding0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633208" comment="libdcerpc-binding0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633209" comment="libdcerpc-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633210" comment="libdcerpc-samr-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633211" comment="libdcerpc-samr0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633404" comment="libdcerpc-samr0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633212" comment="libdcerpc0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633213" comment="libdcerpc0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665358" comment="libipa_hbac-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152068" comment="libipa_hbac-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665359" comment="libipa_hbac0-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152069" comment="libipa_hbac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665360" comment="libldb-devel-2.4.1-150300.3.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152732" comment="libldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695725" comment="libldb2-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291435" comment="libldb2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695726" comment="libldb2-32bit-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291436" comment="libldb2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633214" comment="libndr-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633215" comment="libndr-krb5pac-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633216" comment="libndr-krb5pac0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633217" comment="libndr-krb5pac0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633218" comment="libndr-nbt-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633219" comment="libndr-nbt0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633220" comment="libndr-nbt0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633221" comment="libndr-standard-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633222" comment="libndr-standard0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633223" comment="libndr-standard0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633224" comment="libndr1-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633877" comment="libndr1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633225" comment="libndr1-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009633878" comment="libndr1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633226" comment="libnetapi-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633405" comment="libnetapi-devel-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009287505" comment="libnetapi-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633227" comment="libnetapi0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633228" comment="libnetapi0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666482" comment="libnfsidmap-sss-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231788" comment="libnfsidmap-sss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633229" comment="libsamba-credentials-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633230" comment="libsamba-credentials0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633231" comment="libsamba-credentials0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633232" comment="libsamba-errors-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633233" comment="libsamba-errors0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633234" comment="libsamba-errors0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633235" comment="libsamba-hostconfig-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633236" comment="libsamba-hostconfig0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633237" comment="libsamba-hostconfig0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633238" comment="libsamba-passdb-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633239" comment="libsamba-passdb0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633240" comment="libsamba-passdb0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665363" comment="libsamba-policy-devel-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665364" comment="libsamba-policy-python3-devel-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266818" comment="libsamba-policy-python3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665365" comment="libsamba-policy0-python3-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666483" comment="libsamba-policy0-python3-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266820" comment="libsamba-policy0-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666484" comment="libsamba-policy0-python3-64bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623639" comment="libsamba-policy0-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633244" comment="libsamba-util-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633245" comment="libsamba-util0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633246" comment="libsamba-util0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633247" comment="libsamdb-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633248" comment="libsamdb0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633249" comment="libsamdb0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633250" comment="libsmbclient-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633251" comment="libsmbclient0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633407" comment="libsmbclient0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633252" comment="libsmbconf-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633253" comment="libsmbconf0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633254" comment="libsmbconf0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633255" comment="libsmbldap-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633256" comment="libsmbldap2-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177162" comment="libsmbldap2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633257" comment="libsmbldap2-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233090" comment="libsmbldap2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665366" comment="libsss_certmap-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231789" comment="libsss_certmap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665367" comment="libsss_certmap0-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231790" comment="libsss_certmap0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665368" comment="libsss_idmap-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152070" comment="libsss_idmap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665369" comment="libsss_idmap0-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151530" comment="libsss_idmap0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665370" comment="libsss_nss_idmap-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152071" comment="libsss_nss_idmap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665371" comment="libsss_nss_idmap0-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152072" comment="libsss_nss_idmap0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665372" comment="libsss_simpleifp-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231791" comment="libsss_simpleifp-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665373" comment="libsss_simpleifp0-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231792" comment="libsss_simpleifp0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665374" comment="libtalloc-devel-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152754" comment="libtalloc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665375" comment="libtalloc2-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152755" comment="libtalloc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665376" comment="libtalloc2-32bit-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152756" comment="libtalloc2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665377" comment="libtdb-devel-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152757" comment="libtdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665378" comment="libtdb1-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152758" comment="libtdb1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665379" comment="libtdb1-32bit-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152759" comment="libtdb1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665380" comment="libtevent-devel-0.11.0-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152760" comment="libtevent-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633258" comment="libtevent-util-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633259" comment="libtevent-util0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633260" comment="libtevent-util0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665381" comment="libtevent0-0.11.0-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152762" comment="libtevent0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665382" comment="libtevent0-32bit-0.11.0-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152763" comment="libtevent0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633261" comment="libwbclient-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633262" comment="libwbclient0-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633263" comment="libwbclient0-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665383" comment="pam_apparmor-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154062" comment="pam_apparmor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665384" comment="pam_apparmor-32bit-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154063" comment="pam_apparmor-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665385" comment="perl-apparmor-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154064" comment="perl-apparmor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665386" comment="python3-apparmor-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154065" comment="python3-apparmor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666485" comment="python3-ipa_hbac-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231793" comment="python3-ipa_hbac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695727" comment="python3-ldb-2.2.1-1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247520" comment="python3-ldb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666486" comment="python3-ldb-32bit-2.4.1-150300.3.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247521" comment="python3-ldb-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665388" comment="python3-ldb-devel-2.4.1-150300.3.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247522" comment="python3-ldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666487" comment="python3-sss-murmur-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231794" comment="python3-sss-murmur is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666488" comment="python3-sss_nss_idmap-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231795" comment="python3-sss_nss_idmap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665389" comment="python3-sssd-config-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231796" comment="python3-sssd-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665390" comment="python3-talloc-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173765" comment="python3-talloc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666489" comment="python3-talloc-32bit-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173766" comment="python3-talloc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665391" comment="python3-talloc-devel-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173767" comment="python3-talloc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665392" comment="python3-tdb-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666843" comment="python3-tdb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666490" comment="python3-tdb-32bit-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666844" comment="python3-tdb-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665393" comment="python3-tevent-0.11.0-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173768" comment="python3-tevent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666491" comment="python3-tevent-32bit-0.11.0-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173769" comment="python3-tevent-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666492" comment="ruby-apparmor-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154066" comment="ruby-apparmor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665394" comment="samba-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665441" comment="samba-ad-dc-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266821" comment="samba-ad-dc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633408" comment="samba-ad-dc-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266822" comment="samba-ad-dc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665395" comment="samba-ad-dc-libs-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666845" comment="samba-ad-dc-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665396" comment="samba-ad-dc-libs-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666846" comment="samba-ad-dc-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665397" comment="samba-ceph-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009162650" comment="samba-ceph is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665398" comment="samba-client-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665399" comment="samba-client-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666493" comment="samba-client-64bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623648" comment="samba-client-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665400" comment="samba-client-libs-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666847" comment="samba-client-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665401" comment="samba-client-libs-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666848" comment="samba-client-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633267" comment="samba-core-devel-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665402" comment="samba-devel-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666849" comment="samba-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665403" comment="samba-devel-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666850" comment="samba-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666494" comment="samba-doc-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665404" comment="samba-dsdb-modules-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177163" comment="samba-dsdb-modules is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665405" comment="samba-gpupdate-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655385" comment="samba-gpupdate is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665406" comment="samba-ldb-ldap-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655386" comment="samba-ldb-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665407" comment="samba-libs-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665408" comment="samba-libs-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666495" comment="samba-libs-64bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623649" comment="samba-libs-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665409" comment="samba-libs-python3-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666496" comment="samba-libs-python3-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266826" comment="samba-libs-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666497" comment="samba-libs-python3-64bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623651" comment="samba-libs-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665410" comment="samba-python3-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666498" comment="samba-test-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665411" comment="samba-tool-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666851" comment="samba-tool is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665412" comment="samba-winbind-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009633274" comment="samba-winbind-32bit-4.13.6+git.211.555d60b24ba-3.7.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665413" comment="samba-winbind-libs-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666852" comment="samba-winbind-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665414" comment="samba-winbind-libs-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666853" comment="samba-winbind-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665415" comment="sssd-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151531" comment="sssd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665416" comment="sssd-ad-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152077" comment="sssd-ad is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665417" comment="sssd-common-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632505" comment="sssd-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665418" comment="sssd-dbus-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231797" comment="sssd-dbus is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665419" comment="sssd-ipa-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152078" comment="sssd-ipa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665420" comment="sssd-krb5-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152079" comment="sssd-krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665421" comment="sssd-krb5-common-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151533" comment="sssd-krb5-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665422" comment="sssd-ldap-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151534" comment="sssd-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665423" comment="sssd-proxy-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152080" comment="sssd-proxy is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665424" comment="sssd-tools-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152081" comment="sssd-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666499" comment="sssd-wbclient-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231798" comment="sssd-wbclient is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666500" comment="sssd-wbclient-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231799" comment="sssd-wbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665425" comment="sssd-winbind-idmap-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231800" comment="sssd-winbind-idmap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665426" comment="talloc-man-2.3.3-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173770" comment="talloc-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665427" comment="tdb-tools-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152782" comment="tdb-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665428" comment="tevent-man-0.11.0-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173771" comment="tevent-man is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120284" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20284</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20284" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20284" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20284" ref_url="https://www.suse.com/security/cve/CVE-2021-20284" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010497.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1475-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N6RYWEZ5BKTK6UEP6HAB7B466BPC3SMJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3616-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4TQ3DLF5YEQDDJUON6WGBX2HVVM7FOLB/" source="SUSE-SU"/>
    <description>
    A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20284/">CVE-2021-20284</cve>
	<bugzilla href="https://bugzilla.suse.com/1183511">SUSE bug 1183511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653451" comment="binutils-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653452" comment="binutils-devel-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653455" comment="binutils-devel-32bit-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653458" comment="binutils-gold-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653456" comment="bpftrace-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654065" comment="bpftrace is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653457" comment="bpftrace-tools-0.11.4-3.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009654066" comment="bpftrace-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653562" comment="cross-aarch64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653563" comment="cross-arm-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653564" comment="cross-avr-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653565" comment="cross-epiphany-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238034" comment="cross-epiphany-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653566" comment="cross-hppa-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653567" comment="cross-hppa64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653568" comment="cross-i386-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653569" comment="cross-ia64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653570" comment="cross-m68k-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653571" comment="cross-mips-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653572" comment="cross-ppc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653573" comment="cross-ppc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653574" comment="cross-ppc64le-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653575" comment="cross-riscv64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238035" comment="cross-riscv64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653576" comment="cross-rx-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238036" comment="cross-rx-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653577" comment="cross-s390-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653578" comment="cross-s390x-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653579" comment="cross-sparc-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653580" comment="cross-sparc64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653581" comment="cross-spu-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653582" comment="cross-x86_64-binutils-2.37-7.21.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653453" comment="libctf-nobfd0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653454" comment="libctf0-2.37-7.21.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20286</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20286" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20286" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20286" ref_url="https://www.suse.com/security/cve/CVE-2021-20286" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2274-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BNYSQCMH37A42AG5LXPHSQQ6STSS3ZPT/" source="SUSE-SU"/>
    <description>
    A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20286/">CVE-2021-20286</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494433" comment="kubevirt-container-disk-0.40.0-5.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009624367" comment="kubevirt-container-disk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624273" comment="kubevirt-manifests-0.40.0-5.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009624368" comment="kubevirt-manifests is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624337" comment="kubevirt-tests-0.40.0-5.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009624369" comment="kubevirt-tests is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494434" comment="kubevirt-virt-api-0.40.0-5.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009624370" comment="kubevirt-virt-api is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494435" comment="kubevirt-virt-controller-0.40.0-5.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009624371" comment="kubevirt-virt-controller is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494436" comment="kubevirt-virt-handler-0.40.0-5.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009624372" comment="kubevirt-virt-handler is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494437" comment="kubevirt-virt-launcher-0.40.0-5.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009624373" comment="kubevirt-virt-launcher is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494438" comment="kubevirt-virt-operator-0.40.0-5.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009624374" comment="kubevirt-virt-operator is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494426" comment="kubevirt-virtctl-0.40.0-5.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009624375" comment="kubevirt-virtctl is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20288</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20288" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20288" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20288" ref_url="https://www.suse.com/security/cve/CVE-2021-20288" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:239-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008922.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:250-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008727.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008721.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1474-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008722.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0672-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F27MV75T6ENOALLCPSWOQKELO26I3HCZ/" source="SUSE-SU"/>
    <description>
    An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitize other_keys, allowing key reuse. An attacker who can request a global_id can exploit the ability of any user to request a global_id previously associated with another user, as ceph does not force the reuse of old keys to generate new ones. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20288/">CVE-2021-20288</cve>
	<bugzilla href="https://bugzilla.suse.com/1183074">SUSE bug 1183074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205049">SUSE bug 1205049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694875" comment="librados2-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694876" comment="librbd1-15.2.11.83+g8a15f484c2-3.22.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20291</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20291" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20291" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20291" ref_url="https://www.suse.com/security/cve/CVE-2021-20291" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010478.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010481.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:357-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-March/022067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:358-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-March/022068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:23018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010347.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012287.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:23018-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5BA2TLW7O5ZURGQUAQUH4HD5SQYNDDZ6/" source="SUSE-SU"/>
    <description>
    A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If one of those layers is not a valid `tar` archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar unpacked stream, which never finishes. An attacker could use this vulnerability to craft a malicious image, which when downloaded and stored by an application using containers/storage, would then cause a deadlock leading to a Denial of Service (DoS).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20291/">CVE-2021-20291</cve>
	<bugzilla href="https://bugzilla.suse.com/1196497">SUSE bug 1196497</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669747" comment="conmon-2.0.30-150300.8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009280795" comment="conmon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669744" comment="libcontainers-common-20210626-150300.8.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266789" comment="libcontainers-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669745" comment="libseccomp-devel-2.5.3-150300.10.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267594" comment="libseccomp-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669860" comment="libseccomp-tools-2.5.3-150300.10.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267595" comment="libseccomp-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669746" comment="libseccomp2-2.5.3-150300.10.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267596" comment="libseccomp2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669861" comment="libseccomp2-32bit-2.5.3-150300.10.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009267597" comment="libseccomp2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669748" comment="podman-3.4.4-150300.9.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266791" comment="podman is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009669749" comment="podman-cni-config-3.4.4-150300.9.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266792" comment="podman-cni-config is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120292" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20292</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20292" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20292" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20292" ref_url="https://www.suse.com/security/cve/CVE-2021-20292" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011343.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1651-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1668-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011291.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011310.html" source="SUSE-SU"/>
    <description>
    There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker with a local account with a root privilege, can leverage this vulnerability to escalate privileges and execute code in the context of the kernel.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20292/">CVE-2021-20292</cve>
	<bugzilla href="https://bugzilla.suse.com/1183723">SUSE bug 1183723</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683306" comment="cluster-md-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683297" comment="cluster-md-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683007" comment="cluster-md-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683307" comment="cluster-md-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683308" comment="dlm-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683298" comment="dlm-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683008" comment="dlm-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683309" comment="dlm-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683310" comment="dtb-al-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683311" comment="dtb-allwinner-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683312" comment="dtb-altera-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683313" comment="dtb-amd-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683314" comment="dtb-amlogic-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683315" comment="dtb-apm-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683316" comment="dtb-arm-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683317" comment="dtb-broadcom-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683318" comment="dtb-cavium-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683319" comment="dtb-exynos-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683320" comment="dtb-freescale-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683321" comment="dtb-hisilicon-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683322" comment="dtb-lg-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683323" comment="dtb-marvell-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683324" comment="dtb-mediatek-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683325" comment="dtb-nvidia-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683326" comment="dtb-qcom-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683327" comment="dtb-renesas-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683328" comment="dtb-rockchip-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683329" comment="dtb-socionext-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683330" comment="dtb-sprd-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683331" comment="dtb-xilinx-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683332" comment="dtb-zte-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683333" comment="gfs2-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683299" comment="gfs2-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683009" comment="gfs2-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683334" comment="gfs2-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682878" comment="kernel-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682879" comment="kernel-64kb-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683335" comment="kernel-64kb-extra-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683336" comment="kernel-64kb-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683337" comment="kernel-64kb-optional-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682940" comment="kernel-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682941" comment="kernel-azure-devel-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683300" comment="kernel-azure-extra-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683301" comment="kernel-azure-livepatch-devel-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683302" comment="kernel-azure-optional-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683338" comment="kernel-debug-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695342" comment="kernel-debug-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683339" comment="kernel-debug-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683340" comment="kernel-debug-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682880" comment="kernel-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682881" comment="kernel-default-base-5.3.18-150300.59.68.1.150300.18.41.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683341" comment="kernel-default-base-rebuild-5.3.18-150300.59.68.1.150300.18.41.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682882" comment="kernel-default-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683342" comment="kernel-default-extra-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683343" comment="kernel-default-livepatch-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683344" comment="kernel-default-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009693407" comment="kernel-default-man-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683345" comment="kernel-default-optional-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682883" comment="kernel-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682942" comment="kernel-devel-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682888" comment="kernel-docs-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683346" comment="kernel-docs-html-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683347" comment="kernel-kvmsmall-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695343" comment="kernel-kvmsmall-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683348" comment="kernel-kvmsmall-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683349" comment="kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682884" comment="kernel-macros-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682889" comment="kernel-obs-build-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683350" comment="kernel-obs-qa-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682885" comment="kernel-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682890" comment="kernel-preempt-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683351" comment="kernel-preempt-extra-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683352" comment="kernel-preempt-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683353" comment="kernel-preempt-optional-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682891" comment="kernel-source-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682943" comment="kernel-source-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683354" comment="kernel-source-vanilla-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682892" comment="kernel-syms-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682944" comment="kernel-syms-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695344" comment="kernel-vanilla-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695345" comment="kernel-vanilla-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695346" comment="kernel-vanilla-devel-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695347" comment="kernel-vanilla-livepatch-devel-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682886" comment="kernel-zfcpdump-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695348" comment="kernel-zfcpdump-man-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683355" comment="kselftests-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683303" comment="kselftests-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683356" comment="kselftests-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683357" comment="kselftests-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683358" comment="ocfs2-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683304" comment="ocfs2-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683010" comment="ocfs2-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683359" comment="ocfs2-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683360" comment="reiserfs-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683305" comment="reiserfs-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682914" comment="reiserfs-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683361" comment="reiserfs-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20294</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20294" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20294" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20294" ref_url="https://www.suse.com/security/cve/CVE-2021-20294" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009722.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:314-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009707.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009711.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010497.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1475-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N6RYWEZ5BKTK6UEP6HAB7B466BPC3SMJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3643-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/O6GNK27D6NPRSWPQWFJADKDTOHPOGY6C/" source="SUSE-SU"/>
    <description>
    A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality, integrity, and availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20294/">CVE-2021-20294</cve>
	<bugzilla href="https://bugzilla.suse.com/1184519">SUSE bug 1184519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196680">SUSE bug 1196680</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654299" comment="binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654300" comment="binutils-devel-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654320" comment="binutils-devel-32bit-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654334" comment="binutils-gold-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654543" comment="cross-aarch64-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654544" comment="cross-arm-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654545" comment="cross-avr-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654546" comment="cross-epiphany-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238034" comment="cross-epiphany-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654547" comment="cross-hppa-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654548" comment="cross-hppa64-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654549" comment="cross-i386-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654550" comment="cross-ia64-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654551" comment="cross-m68k-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654552" comment="cross-mips-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654553" comment="cross-ppc-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654554" comment="cross-ppc64-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654555" comment="cross-ppc64le-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654556" comment="cross-riscv64-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238035" comment="cross-riscv64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654557" comment="cross-rx-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009238036" comment="cross-rx-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654558" comment="cross-s390-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654559" comment="cross-s390x-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654560" comment="cross-sparc-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654561" comment="cross-sparc64-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654562" comment="cross-spu-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654563" comment="cross-x86_64-binutils-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654301" comment="libctf-nobfd0-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297779" comment="libctf-nobfd0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009654302" comment="libctf0-2.37-7.26.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009297780" comment="libctf0 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20296</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20296" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20296" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20296" ref_url="https://www.suse.com/security/cve/CVE-2021-20296" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008732.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0670-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRXYHURHLDTSCIDOVAICJNNLPZTJP6NQ/" source="SUSE-SU"/>
    <description>
    A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20296/">CVE-2021-20296</cve>
	<bugzilla href="https://bugzilla.suse.com/1184354">SUSE bug 1184354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184355">SUSE bug 1184355</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694831" comment="libIlmImf-2_2-23-2.2.1-3.27.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20298</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20298" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20298" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20298" ref_url="https://www.suse.com/security/cve/CVE-2021-20298" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009786.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009386.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1198-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UU6C6KHVOWCVMKES2H2PK5BJGOG2DVEJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2793-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/I6OVSOAQ3PQXBTM46SMNT6H3XP45CC7L/" source="SUSE-SU"/>
    <description>
    A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20298/">CVE-2021-20298</cve>
	<bugzilla href="https://bugzilla.suse.com/1188460">SUSE bug 1188460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191176">SUSE bug 1191176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627865" comment="libIlmImf-2_2-23-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628024" comment="libIlmImf-2_2-23-32bit-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251976" comment="libIlmImf-2_2-23-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627866" comment="libIlmImfUtil-2_2-23-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251977" comment="libIlmImfUtil-2_2-23 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628025" comment="libIlmImfUtil-2_2-23-32bit-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251978" comment="libIlmImfUtil-2_2-23-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628026" comment="openexr-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172752" comment="openexr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627867" comment="openexr-devel-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151255" comment="openexr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628027" comment="openexr-doc-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172753" comment="openexr-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120299" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20299</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20299" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20299" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20299" ref_url="https://www.suse.com/security/cve/CVE-2021-20299" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009386.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1198-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UU6C6KHVOWCVMKES2H2PK5BJGOG2DVEJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2793-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/I6OVSOAQ3PQXBTM46SMNT6H3XP45CC7L/" source="SUSE-SU"/>
    <description>
    A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20299/">CVE-2021-20299</cve>
	<bugzilla href="https://bugzilla.suse.com/1188459">SUSE bug 1188459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191176">SUSE bug 1191176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627865" comment="libIlmImf-2_2-23-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628024" comment="libIlmImf-2_2-23-32bit-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251976" comment="libIlmImf-2_2-23-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627866" comment="libIlmImfUtil-2_2-23-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251977" comment="libIlmImfUtil-2_2-23 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628025" comment="libIlmImfUtil-2_2-23-32bit-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251978" comment="libIlmImfUtil-2_2-23-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628026" comment="openexr-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172752" comment="openexr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627867" comment="openexr-devel-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151255" comment="openexr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628027" comment="openexr-doc-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172753" comment="openexr-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20300</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20300" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20300" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20300" ref_url="https://www.suse.com/security/cve/CVE-2021-20300" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009786.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009386.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1198-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UU6C6KHVOWCVMKES2H2PK5BJGOG2DVEJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2793-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/I6OVSOAQ3PQXBTM46SMNT6H3XP45CC7L/" source="SUSE-SU"/>
    <description>
    A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file that is processed by OpenEXR, to trigger an integer overflow. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20300/">CVE-2021-20300</cve>
	<bugzilla href="https://bugzilla.suse.com/1188458">SUSE bug 1188458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191176">SUSE bug 1191176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627865" comment="libIlmImf-2_2-23-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628024" comment="libIlmImf-2_2-23-32bit-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251976" comment="libIlmImf-2_2-23-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627866" comment="libIlmImfUtil-2_2-23-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251977" comment="libIlmImfUtil-2_2-23 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628025" comment="libIlmImfUtil-2_2-23-32bit-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251978" comment="libIlmImfUtil-2_2-23-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628026" comment="openexr-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172752" comment="openexr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627867" comment="openexr-devel-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151255" comment="openexr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628027" comment="openexr-doc-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172753" comment="openexr-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20302</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20302" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20302" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20302" ref_url="https://www.suse.com/security/cve/CVE-2021-20302" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009386.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1198-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UU6C6KHVOWCVMKES2H2PK5BJGOG2DVEJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2793-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/I6OVSOAQ3PQXBTM46SMNT6H3XP45CC7L/" source="SUSE-SU"/>
    <description>
    A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20302/">CVE-2021-20302</cve>
	<bugzilla href="https://bugzilla.suse.com/1188462">SUSE bug 1188462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191176">SUSE bug 1191176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627865" comment="libIlmImf-2_2-23-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628024" comment="libIlmImf-2_2-23-32bit-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251976" comment="libIlmImf-2_2-23-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627866" comment="libIlmImfUtil-2_2-23-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251977" comment="libIlmImfUtil-2_2-23 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628025" comment="libIlmImfUtil-2_2-23-32bit-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251978" comment="libIlmImfUtil-2_2-23-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628026" comment="openexr-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172752" comment="openexr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627867" comment="openexr-devel-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151255" comment="openexr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628027" comment="openexr-doc-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172753" comment="openexr-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120303" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20303</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20303" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20303" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20303" ref_url="https://www.suse.com/security/cve/CVE-2021-20303" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009786.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009386.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1198-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UU6C6KHVOWCVMKES2H2PK5BJGOG2DVEJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2793-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/I6OVSOAQ3PQXBTM46SMNT6H3XP45CC7L/" source="SUSE-SU"/>
    <description>
    A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, leading to an out-of-bounds write on the heap. The greatest impact of this flaw is to application availability, with some potential impact to data integrity as well.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-20303/">CVE-2021-20303</cve>
	<bugzilla href="https://bugzilla.suse.com/1188457">SUSE bug 1188457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191176">SUSE bug 1191176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627865" comment="libIlmImf-2_2-23-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628024" comment="libIlmImf-2_2-23-32bit-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251976" comment="libIlmImf-2_2-23-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627866" comment="libIlmImfUtil-2_2-23-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251977" comment="libIlmImfUtil-2_2-23 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628025" comment="libIlmImfUtil-2_2-23-32bit-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251978" comment="libIlmImfUtil-2_2-23-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628026" comment="openexr-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172752" comment="openexr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627867" comment="openexr-devel-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151255" comment="openexr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628027" comment="openexr-doc-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172753" comment="openexr-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20304</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20304" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20304" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20304" ref_url="https://www.suse.com/security/cve/CVE-2021-20304" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:14846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009786.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009386.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1198-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UU6C6KHVOWCVMKES2H2PK5BJGOG2DVEJ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2793-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/I6OVSOAQ3PQXBTM46SMNT6H3XP45CC7L/" source="SUSE-SU"/>
    <description>
    A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20304/">CVE-2021-20304</cve>
	<bugzilla href="https://bugzilla.suse.com/1188461">SUSE bug 1188461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191176">SUSE bug 1191176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627865" comment="libIlmImf-2_2-23-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177161" comment="libIlmImf-2_2-23 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628024" comment="libIlmImf-2_2-23-32bit-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251976" comment="libIlmImf-2_2-23-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627866" comment="libIlmImfUtil-2_2-23-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251977" comment="libIlmImfUtil-2_2-23 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628025" comment="libIlmImfUtil-2_2-23-32bit-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009251978" comment="libIlmImfUtil-2_2-23-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628026" comment="openexr-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172752" comment="openexr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627867" comment="openexr-devel-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151255" comment="openexr-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628027" comment="openexr-doc-2.2.1-3.35.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009172753" comment="openexr-doc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120305" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20305</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20305" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20305" ref_url="https://www.suse.com/security/cve/CVE-2021-20305" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:127-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:128-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008823.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008825.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008826.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008829.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008834.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008835.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008836.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008838.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008857.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008858.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008862.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008866.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008867.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008883.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008885.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008902.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:239-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008922.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008751.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008752.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1399-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008693.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0635-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JEQQBLTWQPDTYRTWQZSXENUU6TSCBJ5R/" source="SUSE-SU"/>
    <description>
    A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA &amp; ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20305/">CVE-2021-20305</cve>
	<bugzilla href="https://bugzilla.suse.com/1183835">SUSE bug 1183835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184401">SUSE bug 1184401</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628741" comment="libhogweed4-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177221" comment="libhogweed4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628742" comment="libhogweed4-32bit-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009242425" comment="libhogweed4-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628744" comment="libnettle6-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177222" comment="libnettle6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009628745" comment="libnettle6-32bit-3.4.1-4.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009242426" comment="libnettle6-32bit is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120307" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20307</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20307" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20307" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20307" ref_url="https://www.suse.com/security/cve/CVE-2021-20307" source="SUSE CVE"/>
    <description>
    Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20307/">CVE-2021-20307</cve>
	<bugzilla href="https://bugzilla.suse.com/1184726">SUSE bug 1184726</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694864" comment="libpano13-3-2.9.19-bp153.2.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009695728" comment="libpano13-3 is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120308" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20308</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20308" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20308" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20308" ref_url="https://www.suse.com/security/cve/CVE-2021-20308" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:14898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010315.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0882-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RXMQHLXPNKTCGM4HNTMLHF7NWL3ZXKIO/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0893-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JPXU4F6ZSTM4YH5LRPXTC4IKPPHYHIMX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0895-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SBHXPTEDODFUJSSP4XPVQOKK5PUKOPN6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1266-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CULAAKX3HOT4A6XWUQNE3XVTQ7FRWP5M/" source="SUSE-SU"/>
    <description>
    Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service that is similar to CVE-2017-9181.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20308/">CVE-2021-20308</cve>
	<bugzilla href="https://bugzilla.suse.com/1184424">SUSE bug 1184424</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624304" comment="htmldoc-1.9.12-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151341" comment="htmldoc is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20309</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20309" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20309" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20309" ref_url="https://www.suse.com/security/cve/CVE-2021-20309" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008667.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1277-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018645.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0606-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QPPJFFJWUIW3K6NB472QVFG522DWQZET/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage() of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image file submitted to an application using ImageMagick. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20309/">CVE-2021-20309</cve>
	<bugzilla href="https://bugzilla.suse.com/1184624">SUSE bug 1184624</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20311</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20311" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20311" ref_url="https://www.suse.com/security/cve/CVE-2021-20311" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008667.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1277-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018645.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0606-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QPPJFFJWUIW3K6NB472QVFG522DWQZET/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in sRGBTransformImage() in the MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20311/">CVE-2021-20311</cve>
	<bugzilla href="https://bugzilla.suse.com/1184626">SUSE bug 1184626</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20312</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20312" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20312" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20312" ref_url="https://www.suse.com/security/cve/CVE-2021-20312" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008667.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1277-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018645.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0606-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QPPJFFJWUIW3K6NB472QVFG522DWQZET/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20312/">CVE-2021-20312</cve>
	<bugzilla href="https://bugzilla.suse.com/1184627">SUSE bug 1184627</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20313</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20313" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20313" ref_url="https://www.suse.com/security/cve/CVE-2021-20313" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008667.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1277-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-April/018645.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0606-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QPPJFFJWUIW3K6NB472QVFG522DWQZET/" source="SUSE-SU"/>
    <description>
    A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-20313/">CVE-2021-20313</cve>
	<bugzilla href="https://bugzilla.suse.com/1184628">SUSE bug 1184628</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629076" comment="ImageMagick-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629077" comment="ImageMagick-config-7-SUSE-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009252941" comment="ImageMagick-config-7-SUSE is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629080" comment="libMagick++-7_Q16HDRI4-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177175" comment="libMagick++-7_Q16HDRI4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629082" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177176" comment="libMagickCore-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629083" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-10.15.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177177" comment="libMagickWand-7_Q16HDRI6 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120314" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20314</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20314" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20314" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20314" ref_url="https://www.suse.com/security/cve/CVE-2021-20314" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:1187-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3DLLSVZFKUI7FKS5LSGOHVGEIIGA7GFO/" source="SUSE-SU"/>
    <description>
    Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20314/">CVE-2021-20314</cve>
	<bugzilla href="https://bugzilla.suse.com/1189104">SUSE bug 1189104</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631817" comment="libspf2-2-1.2.10-bp153.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631797" comment="libspf2-2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631818" comment="libspf2-devel-1.2.10-bp153.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631798" comment="libspf2-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009631819" comment="libspf2-tools-1.2.10-bp153.5.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009631799" comment="libspf2-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20316</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20316" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20316" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20316" ref_url="https://www.suse.com/security/cve/CVE-2021-20316" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010192.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:132-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010200.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:137-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:138-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010204.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010206.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010479.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010480.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:343-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010517.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010518.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010519.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010520.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010522.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:373-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:282-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-February/021863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010313.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0323-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010181.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0283-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/72ZRNFZ3DE3TJA7HFCVV476YJN6I4B5M/" source="SUSE-SU"/>
    <description>
    A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of the share.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-08-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20316/">CVE-2021-20316</cve>
	<bugzilla href="https://bugzilla.suse.com/1191227">SUSE bug 1191227</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665442" comment="apache2-mod_apparmor-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154050" comment="apache2-mod_apparmor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665340" comment="apparmor-abstractions-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154052" comment="apparmor-abstractions is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665341" comment="apparmor-docs-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154053" comment="apparmor-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665342" comment="apparmor-parser-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154054" comment="apparmor-parser is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665343" comment="apparmor-parser-lang-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154055" comment="apparmor-parser-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665344" comment="apparmor-profiles-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154056" comment="apparmor-profiles is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665345" comment="apparmor-utils-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154057" comment="apparmor-utils is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665346" comment="apparmor-utils-lang-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154058" comment="apparmor-utils-lang is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665452" comment="ctdb-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666478" comment="ctdb-pcp-pmda-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009233089" comment="ctdb-pcp-pmda is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665347" comment="krb5-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665348" comment="krb5-32bit-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665349" comment="krb5-client-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665350" comment="krb5-devel-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666479" comment="krb5-devel-32bit-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152677" comment="krb5-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666480" comment="krb5-mini-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152679" comment="krb5-mini is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666481" comment="krb5-mini-devel-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152680" comment="krb5-mini-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665443" comment="krb5-plugin-kdb-ldap-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152681" comment="krb5-plugin-kdb-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665351" comment="krb5-plugin-preauth-otp-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152682" comment="krb5-plugin-preauth-otp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665352" comment="krb5-plugin-preauth-pkinit-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152683" comment="krb5-plugin-preauth-pkinit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665353" comment="krb5-plugin-preauth-spake-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666842" comment="krb5-plugin-preauth-spake is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665444" comment="krb5-server-1.19.2-150300.8.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152684" comment="krb5-server is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665354" comment="ldb-tools-2.4.1-150300.3.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152723" comment="ldb-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665355" comment="libapparmor-devel-2.13.6-150300.3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154059" comment="libapparmor-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665356" comment="libapparmor1-2.13.6-150300.3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154060" comment="libapparmor1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665357" comment="libapparmor1-32bit-2.13.6-150300.3.11.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154061" comment="libapparmor1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665358" comment="libipa_hbac-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152068" comment="libipa_hbac-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665359" comment="libipa_hbac0-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152069" comment="libipa_hbac0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665360" comment="libldb-devel-2.4.1-150300.3.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152732" comment="libldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665361" comment="libldb2-2.4.1-150300.3.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291435" comment="libldb2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665362" comment="libldb2-32bit-2.4.1-150300.3.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291436" comment="libldb2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666482" comment="libnfsidmap-sss-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231788" comment="libnfsidmap-sss is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665363" comment="libsamba-policy-devel-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665364" comment="libsamba-policy-python3-devel-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266818" comment="libsamba-policy-python3-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665365" comment="libsamba-policy0-python3-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266819" comment="libsamba-policy0-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666483" comment="libsamba-policy0-python3-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266820" comment="libsamba-policy0-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666484" comment="libsamba-policy0-python3-64bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623639" comment="libsamba-policy0-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665366" comment="libsss_certmap-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231789" comment="libsss_certmap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665367" comment="libsss_certmap0-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231790" comment="libsss_certmap0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665368" comment="libsss_idmap-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152070" comment="libsss_idmap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665369" comment="libsss_idmap0-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151530" comment="libsss_idmap0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665370" comment="libsss_nss_idmap-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152071" comment="libsss_nss_idmap-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665371" comment="libsss_nss_idmap0-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152072" comment="libsss_nss_idmap0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665372" comment="libsss_simpleifp-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231791" comment="libsss_simpleifp-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665373" comment="libsss_simpleifp0-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231792" comment="libsss_simpleifp0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665374" comment="libtalloc-devel-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152754" comment="libtalloc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665375" comment="libtalloc2-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152755" comment="libtalloc2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665376" comment="libtalloc2-32bit-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152756" comment="libtalloc2-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665377" comment="libtdb-devel-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152757" comment="libtdb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665378" comment="libtdb1-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152758" comment="libtdb1 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665379" comment="libtdb1-32bit-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152759" comment="libtdb1-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665380" comment="libtevent-devel-0.11.0-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152760" comment="libtevent-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665381" comment="libtevent0-0.11.0-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152762" comment="libtevent0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665382" comment="libtevent0-32bit-0.11.0-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152763" comment="libtevent0-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665383" comment="pam_apparmor-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154062" comment="pam_apparmor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665384" comment="pam_apparmor-32bit-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154063" comment="pam_apparmor-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665385" comment="perl-apparmor-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154064" comment="perl-apparmor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665386" comment="python3-apparmor-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154065" comment="python3-apparmor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666485" comment="python3-ipa_hbac-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231793" comment="python3-ipa_hbac is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665387" comment="python3-ldb-2.4.1-150300.3.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247520" comment="python3-ldb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666486" comment="python3-ldb-32bit-2.4.1-150300.3.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247521" comment="python3-ldb-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665388" comment="python3-ldb-devel-2.4.1-150300.3.10.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009247522" comment="python3-ldb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666487" comment="python3-sss-murmur-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231794" comment="python3-sss-murmur is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666488" comment="python3-sss_nss_idmap-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231795" comment="python3-sss_nss_idmap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665389" comment="python3-sssd-config-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231796" comment="python3-sssd-config is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665390" comment="python3-talloc-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173765" comment="python3-talloc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666489" comment="python3-talloc-32bit-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173766" comment="python3-talloc-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665391" comment="python3-talloc-devel-2.3.3-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173767" comment="python3-talloc-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665392" comment="python3-tdb-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666843" comment="python3-tdb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666490" comment="python3-tdb-32bit-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666844" comment="python3-tdb-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665393" comment="python3-tevent-0.11.0-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173768" comment="python3-tevent is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666491" comment="python3-tevent-32bit-0.11.0-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173769" comment="python3-tevent-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666492" comment="ruby-apparmor-2.13.6-150300.3.11.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154066" comment="ruby-apparmor is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665394" comment="samba-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665441" comment="samba-ad-dc-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266821" comment="samba-ad-dc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665395" comment="samba-ad-dc-libs-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666845" comment="samba-ad-dc-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665396" comment="samba-ad-dc-libs-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666846" comment="samba-ad-dc-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665397" comment="samba-ceph-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009162650" comment="samba-ceph is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665398" comment="samba-client-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665399" comment="samba-client-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666493" comment="samba-client-64bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623648" comment="samba-client-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665400" comment="samba-client-libs-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666847" comment="samba-client-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665401" comment="samba-client-libs-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666848" comment="samba-client-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665402" comment="samba-devel-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666849" comment="samba-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665403" comment="samba-devel-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666850" comment="samba-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666494" comment="samba-doc-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665404" comment="samba-dsdb-modules-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177163" comment="samba-dsdb-modules is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665405" comment="samba-gpupdate-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655385" comment="samba-gpupdate is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665406" comment="samba-ldb-ldap-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009655386" comment="samba-ldb-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665407" comment="samba-libs-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665408" comment="samba-libs-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666495" comment="samba-libs-64bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623649" comment="samba-libs-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665409" comment="samba-libs-python3-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266825" comment="samba-libs-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666496" comment="samba-libs-python3-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266826" comment="samba-libs-python3-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666497" comment="samba-libs-python3-64bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623651" comment="samba-libs-python3-64bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665410" comment="samba-python3-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009266827" comment="samba-python3 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666498" comment="samba-test-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665411" comment="samba-tool-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666851" comment="samba-tool is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665412" comment="samba-winbind-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665413" comment="samba-winbind-libs-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666852" comment="samba-winbind-libs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665414" comment="samba-winbind-libs-32bit-4.15.4+git.324.8332acf1a63-150300.3.25.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009666853" comment="samba-winbind-libs-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665415" comment="sssd-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151531" comment="sssd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665416" comment="sssd-ad-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152077" comment="sssd-ad is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665417" comment="sssd-common-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009632505" comment="sssd-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665418" comment="sssd-dbus-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231797" comment="sssd-dbus is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665419" comment="sssd-ipa-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152078" comment="sssd-ipa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665420" comment="sssd-krb5-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152079" comment="sssd-krb5 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665421" comment="sssd-krb5-common-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151533" comment="sssd-krb5-common is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665422" comment="sssd-ldap-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151534" comment="sssd-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665423" comment="sssd-proxy-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152080" comment="sssd-proxy is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665424" comment="sssd-tools-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152081" comment="sssd-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666499" comment="sssd-wbclient-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231798" comment="sssd-wbclient is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009666500" comment="sssd-wbclient-devel-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231799" comment="sssd-wbclient-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665425" comment="sssd-winbind-idmap-1.16.1-150300.23.17.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231800" comment="sssd-winbind-idmap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665426" comment="talloc-man-2.3.3-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173770" comment="talloc-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665427" comment="tdb-tools-1.4.4-150300.3.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152782" comment="tdb-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009665428" comment="tevent-man-0.11.0-150300.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009173771" comment="tevent-man is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120321" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20321</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20321" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20321" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20321" ref_url="https://www.suse.com/security/cve/CVE-2021-20321" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011343.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1651-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1668-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011291.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011302.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011310.html" source="SUSE-SU"/>
    <description>
    A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-07-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20321/">CVE-2021-20321</cve>
	<bugzilla href="https://bugzilla.suse.com/1191647">SUSE bug 1191647</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683306" comment="cluster-md-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683297" comment="cluster-md-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683007" comment="cluster-md-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683307" comment="cluster-md-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683308" comment="dlm-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683298" comment="dlm-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683008" comment="dlm-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683309" comment="dlm-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683310" comment="dtb-al-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683311" comment="dtb-allwinner-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683312" comment="dtb-altera-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683313" comment="dtb-amd-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683314" comment="dtb-amlogic-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683315" comment="dtb-apm-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683316" comment="dtb-arm-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683317" comment="dtb-broadcom-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683318" comment="dtb-cavium-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683319" comment="dtb-exynos-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683320" comment="dtb-freescale-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683321" comment="dtb-hisilicon-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683322" comment="dtb-lg-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683323" comment="dtb-marvell-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683324" comment="dtb-mediatek-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683325" comment="dtb-nvidia-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683326" comment="dtb-qcom-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683327" comment="dtb-renesas-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683328" comment="dtb-rockchip-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683329" comment="dtb-socionext-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683330" comment="dtb-sprd-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683331" comment="dtb-xilinx-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683332" comment="dtb-zte-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683333" comment="gfs2-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683299" comment="gfs2-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683009" comment="gfs2-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683334" comment="gfs2-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682878" comment="kernel-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682879" comment="kernel-64kb-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683335" comment="kernel-64kb-extra-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683336" comment="kernel-64kb-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683337" comment="kernel-64kb-optional-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682940" comment="kernel-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682941" comment="kernel-azure-devel-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683300" comment="kernel-azure-extra-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683301" comment="kernel-azure-livepatch-devel-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683302" comment="kernel-azure-optional-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683338" comment="kernel-debug-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695342" comment="kernel-debug-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683339" comment="kernel-debug-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683340" comment="kernel-debug-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682880" comment="kernel-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682881" comment="kernel-default-base-5.3.18-150300.59.68.1.150300.18.41.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683341" comment="kernel-default-base-rebuild-5.3.18-150300.59.68.1.150300.18.41.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682882" comment="kernel-default-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683342" comment="kernel-default-extra-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683343" comment="kernel-default-livepatch-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683344" comment="kernel-default-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009693407" comment="kernel-default-man-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683345" comment="kernel-default-optional-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682883" comment="kernel-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682942" comment="kernel-devel-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682888" comment="kernel-docs-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683346" comment="kernel-docs-html-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683347" comment="kernel-kvmsmall-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695343" comment="kernel-kvmsmall-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683348" comment="kernel-kvmsmall-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683349" comment="kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682884" comment="kernel-macros-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682889" comment="kernel-obs-build-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683350" comment="kernel-obs-qa-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682885" comment="kernel-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682890" comment="kernel-preempt-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683351" comment="kernel-preempt-extra-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683352" comment="kernel-preempt-livepatch-devel-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683353" comment="kernel-preempt-optional-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682891" comment="kernel-source-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682943" comment="kernel-source-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683354" comment="kernel-source-vanilla-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682892" comment="kernel-syms-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682944" comment="kernel-syms-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695344" comment="kernel-vanilla-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695345" comment="kernel-vanilla-base-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695346" comment="kernel-vanilla-devel-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695347" comment="kernel-vanilla-livepatch-devel-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682886" comment="kernel-zfcpdump-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009695348" comment="kernel-zfcpdump-man-4.12.14-150100.197.114.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683355" comment="kselftests-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683303" comment="kselftests-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683356" comment="kselftests-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683357" comment="kselftests-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683358" comment="ocfs2-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683304" comment="ocfs2-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683010" comment="ocfs2-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683359" comment="ocfs2-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683360" comment="reiserfs-kmp-64kb-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683305" comment="reiserfs-kmp-azure-5.3.18-150300.38.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009682914" comment="reiserfs-kmp-default-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009683361" comment="reiserfs-kmp-preempt-5.3.18-150300.59.68.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202120322" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-20322</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-20322" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20322" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-20322" ref_url="https://www.suse.com/security/cve/CVE-2021-20322" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:37-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:2-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:28-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:29-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:3-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009774.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3807-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-November/020844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009789.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009810.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3877-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3929-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/020993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009843.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009856.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3941-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009855.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3969-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009871.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009872.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009873.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3979-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009875.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009877.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009891.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4038-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4057-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009895.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009910.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009909.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:4099-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009913.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1501-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5J6FJF42AOGK3VQ4EFVDHQENHCDEMVT3/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3806-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WLGTBAKURNXDJOZBJTW2QLXJEWT66GSC/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3876-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JOIHHN3KQX7O34NG25NJOF7PFEZF2TVP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3941-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UKZHKAOI6N3ILHMQUWDAPBQQORWN64SU/" source="SUSE-SU"/>
    <description>
    A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20322/">CVE-2021-20322</cve>
	<bugzilla href="https://bugzilla.suse.com/1191790">SUSE bug 1191790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191813">SUSE bug 1191813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193290">SUSE bug 1193290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658020" comment="cluster-md-kmp-64kb-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623416" comment="cluster-md-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657647" comment="cluster-md-kmp-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623277" comment="cluster-md-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657757" comment="cluster-md-kmp-default-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623278" comment="cluster-md-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658021" comment="cluster-md-kmp-preempt-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623417" comment="cluster-md-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658022" comment="dlm-kmp-64kb-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623418" comment="dlm-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657648" comment="dlm-kmp-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623279" comment="dlm-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657758" comment="dlm-kmp-default-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623280" comment="dlm-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658023" comment="dlm-kmp-preempt-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623419" comment="dlm-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658024" comment="dtb-al-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630923" comment="dtb-al is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658025" comment="dtb-allwinner-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630924" comment="dtb-allwinner is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658026" comment="dtb-altera-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630925" comment="dtb-altera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658027" comment="dtb-amd-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630926" comment="dtb-amd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658028" comment="dtb-amlogic-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630927" comment="dtb-amlogic is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658029" comment="dtb-apm-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630928" comment="dtb-apm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658030" comment="dtb-arm-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630929" comment="dtb-arm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658031" comment="dtb-broadcom-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630930" comment="dtb-broadcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658032" comment="dtb-cavium-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630931" comment="dtb-cavium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658033" comment="dtb-exynos-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630932" comment="dtb-exynos is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658034" comment="dtb-freescale-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630933" comment="dtb-freescale is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658035" comment="dtb-hisilicon-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630934" comment="dtb-hisilicon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658036" comment="dtb-lg-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630935" comment="dtb-lg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658037" comment="dtb-marvell-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630936" comment="dtb-marvell is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658038" comment="dtb-mediatek-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630937" comment="dtb-mediatek is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658039" comment="dtb-nvidia-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630938" comment="dtb-nvidia is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658040" comment="dtb-qcom-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630939" comment="dtb-qcom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658041" comment="dtb-renesas-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630940" comment="dtb-renesas is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658042" comment="dtb-rockchip-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630941" comment="dtb-rockchip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658043" comment="dtb-socionext-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630942" comment="dtb-socionext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658044" comment="dtb-sprd-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630943" comment="dtb-sprd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658045" comment="dtb-xilinx-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630944" comment="dtb-xilinx is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658046" comment="dtb-zte-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009630945" comment="dtb-zte is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658047" comment="gfs2-kmp-64kb-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623420" comment="gfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657649" comment="gfs2-kmp-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623281" comment="gfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657759" comment="gfs2-kmp-default-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623282" comment="gfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658048" comment="gfs2-kmp-preempt-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623421" comment="gfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657673" comment="kernel-64kb-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623422" comment="kernel-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657674" comment="kernel-64kb-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623423" comment="kernel-64kb-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658049" comment="kernel-64kb-extra-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623424" comment="kernel-64kb-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658050" comment="kernel-64kb-livepatch-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623425" comment="kernel-64kb-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658051" comment="kernel-64kb-optional-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623426" comment="kernel-64kb-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657494" comment="kernel-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623283" comment="kernel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657495" comment="kernel-azure-devel-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623285" comment="kernel-azure-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657650" comment="kernel-azure-extra-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623286" comment="kernel-azure-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657651" comment="kernel-azure-livepatch-devel-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623287" comment="kernel-azure-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657652" comment="kernel-azure-optional-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623427" comment="kernel-azure-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658052" comment="kernel-debug-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658245" comment="kernel-debug-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658053" comment="kernel-debug-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658054" comment="kernel-debug-livepatch-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623288" comment="kernel-debug-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657675" comment="kernel-default-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657676" comment="kernel-default-base-5.3.18-59.37.2.18.23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658055" comment="kernel-default-base-rebuild-5.3.18-59.37.2.18.23.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291400" comment="kernel-default-base-rebuild is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657677" comment="kernel-default-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658056" comment="kernel-default-extra-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623289" comment="kernel-default-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658057" comment="kernel-default-livepatch-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623290" comment="kernel-default-livepatch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658058" comment="kernel-default-livepatch-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623291" comment="kernel-default-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658155" comment="kernel-default-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623292" comment="kernel-default-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658059" comment="kernel-default-optional-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623428" comment="kernel-default-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657678" comment="kernel-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657496" comment="kernel-devel-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623293" comment="kernel-devel-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657683" comment="kernel-docs-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658060" comment="kernel-docs-html-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658061" comment="kernel-kvmsmall-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177719" comment="kernel-kvmsmall is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658246" comment="kernel-kvmsmall-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177720" comment="kernel-kvmsmall-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658062" comment="kernel-kvmsmall-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177721" comment="kernel-kvmsmall-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658063" comment="kernel-kvmsmall-livepatch-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623294" comment="kernel-kvmsmall-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657679" comment="kernel-macros-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657684" comment="kernel-obs-build-5.3.18-59.37.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658064" comment="kernel-obs-qa-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657680" comment="kernel-preempt-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291401" comment="kernel-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657685" comment="kernel-preempt-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291402" comment="kernel-preempt-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658065" comment="kernel-preempt-extra-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623433" comment="kernel-preempt-extra is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658066" comment="kernel-preempt-livepatch-devel-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623434" comment="kernel-preempt-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658067" comment="kernel-preempt-optional-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623435" comment="kernel-preempt-optional is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657686" comment="kernel-source-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657497" comment="kernel-source-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623300" comment="kernel-source-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658068" comment="kernel-source-vanilla-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657687" comment="kernel-syms-5.3.18-59.37.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657498" comment="kernel-syms-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623301" comment="kernel-syms-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658247" comment="kernel-vanilla-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658248" comment="kernel-vanilla-base-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658249" comment="kernel-vanilla-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658250" comment="kernel-vanilla-livepatch-devel-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623302" comment="kernel-vanilla-livepatch-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657681" comment="kernel-zfcpdump-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623303" comment="kernel-zfcpdump is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658251" comment="kernel-zfcpdump-man-4.12.14-197.102.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623304" comment="kernel-zfcpdump-man is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658069" comment="kselftests-kmp-64kb-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623436" comment="kselftests-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657653" comment="kselftests-kmp-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623305" comment="kselftests-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658070" comment="kselftests-kmp-default-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009168714" comment="kselftests-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658071" comment="kselftests-kmp-preempt-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623437" comment="kselftests-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658072" comment="ocfs2-kmp-64kb-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623438" comment="ocfs2-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657654" comment="ocfs2-kmp-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623306" comment="ocfs2-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657760" comment="ocfs2-kmp-default-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623307" comment="ocfs2-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658073" comment="ocfs2-kmp-preempt-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623439" comment="ocfs2-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658074" comment="reiserfs-kmp-64kb-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623440" comment="reiserfs-kmp-64kb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657655" comment="reiserfs-kmp-azure-5.3.18-38.31.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623308" comment="reiserfs-kmp-azure is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009657723" comment="reiserfs-kmp-default-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623309" comment="reiserfs-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009658075" comment="reiserfs-kmp-preempt-5.3.18-59.37.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623441" comment="reiserfs-kmp-preempt is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20212074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-2074</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-2074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2074" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-2074" ref_url="https://www.suse.com/security/cve/CVE-2021-2074" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0165-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UOZDUDAVWBPMEHQXT2I4NXOMGVCWB5BM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0630-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2RTNW7ZRCP2VD6YMPAHFC7MY4YIB5GTL/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-2074/">CVE-2021-2074</cve>
	<bugzilla href="https://bugzilla.suse.com/1181197">SUSE bug 1181197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181199">SUSE bug 1181199</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21106</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21106" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21106" ref_url="https://www.suse.com/security/cve/CVE-2021-21106" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0040-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6P57LOOIW2OJU7P7J5KL7C2XT5WWY2YT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0041-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GR5AM5XB3SLX6EFTV6X7ST2RBPHRH4HY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0047-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRR7YCDCDGHTWIIOCJQ5NJ4K3G6W7TLQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHBBTXAXJWMTZFXKAXB3FMLMOLA32VFG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0138-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KOW5ITBZI4UX7TPPGA7TM2EFI3OZCDH7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0139-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXQPSNTTRO5MNKYMIG7XOBBXCUECNO7J/" source="SUSE-SU"/>
    <description>
    Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21106/">CVE-2021-21106</cve>
	<bugzilla href="https://bugzilla.suse.com/1180645">SUSE bug 1180645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21107</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21107" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21107" ref_url="https://www.suse.com/security/cve/CVE-2021-21107" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0040-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6P57LOOIW2OJU7P7J5KL7C2XT5WWY2YT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0041-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GR5AM5XB3SLX6EFTV6X7ST2RBPHRH4HY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0047-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRR7YCDCDGHTWIIOCJQ5NJ4K3G6W7TLQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHBBTXAXJWMTZFXKAXB3FMLMOLA32VFG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0138-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KOW5ITBZI4UX7TPPGA7TM2EFI3OZCDH7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0139-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXQPSNTTRO5MNKYMIG7XOBBXCUECNO7J/" source="SUSE-SU"/>
    <description>
    Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21107/">CVE-2021-21107</cve>
	<bugzilla href="https://bugzilla.suse.com/1180645">SUSE bug 1180645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21108</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21108" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21108" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21108" ref_url="https://www.suse.com/security/cve/CVE-2021-21108" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0040-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6P57LOOIW2OJU7P7J5KL7C2XT5WWY2YT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0041-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GR5AM5XB3SLX6EFTV6X7ST2RBPHRH4HY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0047-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRR7YCDCDGHTWIIOCJQ5NJ4K3G6W7TLQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHBBTXAXJWMTZFXKAXB3FMLMOLA32VFG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0138-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KOW5ITBZI4UX7TPPGA7TM2EFI3OZCDH7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0139-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXQPSNTTRO5MNKYMIG7XOBBXCUECNO7J/" source="SUSE-SU"/>
    <description>
    Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21108/">CVE-2021-21108</cve>
	<bugzilla href="https://bugzilla.suse.com/1180645">SUSE bug 1180645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21109</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21109" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21109" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21109" ref_url="https://www.suse.com/security/cve/CVE-2021-21109" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0040-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6P57LOOIW2OJU7P7J5KL7C2XT5WWY2YT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0041-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GR5AM5XB3SLX6EFTV6X7ST2RBPHRH4HY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0047-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRR7YCDCDGHTWIIOCJQ5NJ4K3G6W7TLQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHBBTXAXJWMTZFXKAXB3FMLMOLA32VFG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0138-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KOW5ITBZI4UX7TPPGA7TM2EFI3OZCDH7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0139-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXQPSNTTRO5MNKYMIG7XOBBXCUECNO7J/" source="SUSE-SU"/>
    <description>
    Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21109/">CVE-2021-21109</cve>
	<bugzilla href="https://bugzilla.suse.com/1180645">SUSE bug 1180645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21110</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21110" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21110" ref_url="https://www.suse.com/security/cve/CVE-2021-21110" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0040-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6P57LOOIW2OJU7P7J5KL7C2XT5WWY2YT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0041-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GR5AM5XB3SLX6EFTV6X7ST2RBPHRH4HY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0047-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRR7YCDCDGHTWIIOCJQ5NJ4K3G6W7TLQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHBBTXAXJWMTZFXKAXB3FMLMOLA32VFG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0138-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KOW5ITBZI4UX7TPPGA7TM2EFI3OZCDH7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0139-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXQPSNTTRO5MNKYMIG7XOBBXCUECNO7J/" source="SUSE-SU"/>
    <description>
    Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21110/">CVE-2021-21110</cve>
	<bugzilla href="https://bugzilla.suse.com/1180645">SUSE bug 1180645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21111</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21111" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21111" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21111" ref_url="https://www.suse.com/security/cve/CVE-2021-21111" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0040-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6P57LOOIW2OJU7P7J5KL7C2XT5WWY2YT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0041-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GR5AM5XB3SLX6EFTV6X7ST2RBPHRH4HY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0047-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRR7YCDCDGHTWIIOCJQ5NJ4K3G6W7TLQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHBBTXAXJWMTZFXKAXB3FMLMOLA32VFG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0138-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KOW5ITBZI4UX7TPPGA7TM2EFI3OZCDH7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0139-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXQPSNTTRO5MNKYMIG7XOBBXCUECNO7J/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21111/">CVE-2021-21111</cve>
	<bugzilla href="https://bugzilla.suse.com/1180645">SUSE bug 1180645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21112</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21112" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21112" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21112" ref_url="https://www.suse.com/security/cve/CVE-2021-21112" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0040-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6P57LOOIW2OJU7P7J5KL7C2XT5WWY2YT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0041-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GR5AM5XB3SLX6EFTV6X7ST2RBPHRH4HY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0047-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRR7YCDCDGHTWIIOCJQ5NJ4K3G6W7TLQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHBBTXAXJWMTZFXKAXB3FMLMOLA32VFG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0138-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KOW5ITBZI4UX7TPPGA7TM2EFI3OZCDH7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0139-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXQPSNTTRO5MNKYMIG7XOBBXCUECNO7J/" source="SUSE-SU"/>
    <description>
    Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21112/">CVE-2021-21112</cve>
	<bugzilla href="https://bugzilla.suse.com/1180645">SUSE bug 1180645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21113</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21113" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21113" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21113" ref_url="https://www.suse.com/security/cve/CVE-2021-21113" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0040-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6P57LOOIW2OJU7P7J5KL7C2XT5WWY2YT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0041-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GR5AM5XB3SLX6EFTV6X7ST2RBPHRH4HY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0047-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRR7YCDCDGHTWIIOCJQ5NJ4K3G6W7TLQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHBBTXAXJWMTZFXKAXB3FMLMOLA32VFG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0138-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KOW5ITBZI4UX7TPPGA7TM2EFI3OZCDH7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0139-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXQPSNTTRO5MNKYMIG7XOBBXCUECNO7J/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21113/">CVE-2021-21113</cve>
	<bugzilla href="https://bugzilla.suse.com/1180645">SUSE bug 1180645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21114</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21114" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21114" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21114" ref_url="https://www.suse.com/security/cve/CVE-2021-21114" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0040-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6P57LOOIW2OJU7P7J5KL7C2XT5WWY2YT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0041-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GR5AM5XB3SLX6EFTV6X7ST2RBPHRH4HY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0047-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRR7YCDCDGHTWIIOCJQ5NJ4K3G6W7TLQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHBBTXAXJWMTZFXKAXB3FMLMOLA32VFG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0138-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KOW5ITBZI4UX7TPPGA7TM2EFI3OZCDH7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0139-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXQPSNTTRO5MNKYMIG7XOBBXCUECNO7J/" source="SUSE-SU"/>
    <description>
    Use after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21114/">CVE-2021-21114</cve>
	<bugzilla href="https://bugzilla.suse.com/1180645">SUSE bug 1180645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121115" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21115</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21115" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21115" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21115" ref_url="https://www.suse.com/security/cve/CVE-2021-21115" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0040-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6P57LOOIW2OJU7P7J5KL7C2XT5WWY2YT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0041-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GR5AM5XB3SLX6EFTV6X7ST2RBPHRH4HY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0047-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRR7YCDCDGHTWIIOCJQ5NJ4K3G6W7TLQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHBBTXAXJWMTZFXKAXB3FMLMOLA32VFG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0138-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KOW5ITBZI4UX7TPPGA7TM2EFI3OZCDH7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0139-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXQPSNTTRO5MNKYMIG7XOBBXCUECNO7J/" source="SUSE-SU"/>
    <description>
    User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21115/">CVE-2021-21115</cve>
	<bugzilla href="https://bugzilla.suse.com/1180645">SUSE bug 1180645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21116</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21116" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21116" ref_url="https://www.suse.com/security/cve/CVE-2021-21116" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0040-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6P57LOOIW2OJU7P7J5KL7C2XT5WWY2YT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0041-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GR5AM5XB3SLX6EFTV6X7ST2RBPHRH4HY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0047-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XRR7YCDCDGHTWIIOCJQ5NJ4K3G6W7TLQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0048-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHBBTXAXJWMTZFXKAXB3FMLMOLA32VFG/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0138-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KOW5ITBZI4UX7TPPGA7TM2EFI3OZCDH7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0139-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXQPSNTTRO5MNKYMIG7XOBBXCUECNO7J/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21116/">CVE-2021-21116</cve>
	<bugzilla href="https://bugzilla.suse.com/1180645">SUSE bug 1180645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21117</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21117" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21117" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21117" ref_url="https://www.suse.com/security/cve/CVE-2021-21117" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21117/">CVE-2021-21117</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21118</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21118" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21118" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21118" ref_url="https://www.suse.com/security/cve/CVE-2021-21118" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21118/">CVE-2021-21118</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21119</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21119" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21119" ref_url="https://www.suse.com/security/cve/CVE-2021-21119" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21119/">CVE-2021-21119</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21120</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21120" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21120" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21120" ref_url="https://www.suse.com/security/cve/CVE-2021-21120" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21120/">CVE-2021-21120</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21121</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21121" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21121" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21121" ref_url="https://www.suse.com/security/cve/CVE-2021-21121" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21121/">CVE-2021-21121</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121122" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21122</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21122" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21122" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21122" ref_url="https://www.suse.com/security/cve/CVE-2021-21122" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21122/">CVE-2021-21122</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121123" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21123</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21123" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21123" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21123" ref_url="https://www.suse.com/security/cve/CVE-2021-21123" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21123/">CVE-2021-21123</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121124" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21124</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21124" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21124" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21124" ref_url="https://www.suse.com/security/cve/CVE-2021-21124" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
    <description>
    Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21124/">CVE-2021-21124</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21125</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21125" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21125" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21125" ref_url="https://www.suse.com/security/cve/CVE-2021-21125" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21125/">CVE-2021-21125</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21126</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21126" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21126" ref_url="https://www.suse.com/security/cve/CVE-2021-21126" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21126/">CVE-2021-21126</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21127</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21127" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21127" ref_url="https://www.suse.com/security/cve/CVE-2021-21127" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21127/">CVE-2021-21127</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21128</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21128" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21128" ref_url="https://www.suse.com/security/cve/CVE-2021-21128" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21128/">CVE-2021-21128</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21129</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21129" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21129" ref_url="https://www.suse.com/security/cve/CVE-2021-21129" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21129/">CVE-2021-21129</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21130</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21130" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21130" ref_url="https://www.suse.com/security/cve/CVE-2021-21130" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21130/">CVE-2021-21130</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21131</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21131" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21131" ref_url="https://www.suse.com/security/cve/CVE-2021-21131" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21131/">CVE-2021-21131</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21132</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21132" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21132" ref_url="https://www.suse.com/security/cve/CVE-2021-21132" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21132/">CVE-2021-21132</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21133</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21133" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21133" ref_url="https://www.suse.com/security/cve/CVE-2021-21133" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21133/">CVE-2021-21133</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21134</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21134" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21134" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21134" ref_url="https://www.suse.com/security/cve/CVE-2021-21134" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
    <description>
    Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21134/">CVE-2021-21134</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21135</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21135" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21135" ref_url="https://www.suse.com/security/cve/CVE-2021-21135" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21135/">CVE-2021-21135</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21136</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21136" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21136" ref_url="https://www.suse.com/security/cve/CVE-2021-21136" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21136/">CVE-2021-21136</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21137</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21137" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21137" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21137" ref_url="https://www.suse.com/security/cve/CVE-2021-21137" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21137/">CVE-2021-21137</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21138</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21138" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21138" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21138" ref_url="https://www.suse.com/security/cve/CVE-2021-21138" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
    <description>
    Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21138/">CVE-2021-21138</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21139</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21139" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21139" ref_url="https://www.suse.com/security/cve/CVE-2021-21139" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21139/">CVE-2021-21139</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21140</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21140" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21140" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21140" ref_url="https://www.suse.com/security/cve/CVE-2021-21140" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21140/">CVE-2021-21140</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21141</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21141" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21141" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21141" ref_url="https://www.suse.com/security/cve/CVE-2021-21141" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0166-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJLGW3JAYRVM7Z2KD5X5WM5BVADC7BWN/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0173-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJ4GOW4YBBVDHM3PN6ELURRBVPFRRJA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0177-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VTDULA6C5LKSUE5KO6PVLSSHYEEXC2I4/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0186-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TOOA23IRO3YBKSJ5CXVBQQVXGGHUF7QV/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21141/">CVE-2021-21141</cve>
	<bugzilla href="https://bugzilla.suse.com/1181137">SUSE bug 1181137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21142</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21142" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21142" ref_url="https://www.suse.com/security/cve/CVE-2021-21142" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0259-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XCYZBSKAQDG7SYKEXASEZQODBJQKCMUZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0268-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DM5J73PFE6RAAP7ZYV2S2F6NISQVSMLP/" source="SUSE-SU"/>
    <description>
    Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21142/">CVE-2021-21142</cve>
	<bugzilla href="https://bugzilla.suse.com/1181772">SUSE bug 1181772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21143</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21143" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21143" ref_url="https://www.suse.com/security/cve/CVE-2021-21143" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0259-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XCYZBSKAQDG7SYKEXASEZQODBJQKCMUZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0268-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DM5J73PFE6RAAP7ZYV2S2F6NISQVSMLP/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Extensions in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21143/">CVE-2021-21143</cve>
	<bugzilla href="https://bugzilla.suse.com/1181772">SUSE bug 1181772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21144</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21144" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21144" ref_url="https://www.suse.com/security/cve/CVE-2021-21144" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0259-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XCYZBSKAQDG7SYKEXASEZQODBJQKCMUZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0268-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DM5J73PFE6RAAP7ZYV2S2F6NISQVSMLP/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21144/">CVE-2021-21144</cve>
	<bugzilla href="https://bugzilla.suse.com/1181772">SUSE bug 1181772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21145</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21145" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21145" ref_url="https://www.suse.com/security/cve/CVE-2021-21145" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0259-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XCYZBSKAQDG7SYKEXASEZQODBJQKCMUZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0268-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DM5J73PFE6RAAP7ZYV2S2F6NISQVSMLP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Use after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21145/">CVE-2021-21145</cve>
	<bugzilla href="https://bugzilla.suse.com/1181772">SUSE bug 1181772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21146</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21146" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21146" ref_url="https://www.suse.com/security/cve/CVE-2021-21146" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0259-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XCYZBSKAQDG7SYKEXASEZQODBJQKCMUZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0268-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DM5J73PFE6RAAP7ZYV2S2F6NISQVSMLP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21146/">CVE-2021-21146</cve>
	<bugzilla href="https://bugzilla.suse.com/1181772">SUSE bug 1181772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21147</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21147" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21147" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21147" ref_url="https://www.suse.com/security/cve/CVE-2021-21147" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0259-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XCYZBSKAQDG7SYKEXASEZQODBJQKCMUZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0268-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DM5J73PFE6RAAP7ZYV2S2F6NISQVSMLP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21147/">CVE-2021-21147</cve>
	<bugzilla href="https://bugzilla.suse.com/1181772">SUSE bug 1181772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21148</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21148" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21148" ref_url="https://www.suse.com/security/cve/CVE-2021-21148" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0267-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BZEZQO2PMEYX4NTXGJYF3SK3LVAZ4AS2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0276-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WRRV235H6DBC62DZZGTBUASQEOYUJUOQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0296-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/J3D452OYQTKXJQRO2OWRU5IM6SC2Y3TK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0413-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NFEMB66XHIEXP6VOOQ4JIXBD6U5X4EIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21148/">CVE-2021-21148</cve>
	<bugzilla href="https://bugzilla.suse.com/1181827">SUSE bug 1181827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121149" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21149</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21149" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21149" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21149" ref_url="https://www.suse.com/security/cve/CVE-2021-21149" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0413-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NFEMB66XHIEXP6VOOQ4JIXBD6U5X4EIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<cve href="https://www.suse.com/security/cve/CVE-2021-21149/">CVE-2021-21149</cve>
	<bugzilla href="https://bugzilla.suse.com/1182358">SUSE bug 1182358</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21150</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21150" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21150" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21150" ref_url="https://www.suse.com/security/cve/CVE-2021-21150" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0413-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NFEMB66XHIEXP6VOOQ4JIXBD6U5X4EIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<cve href="https://www.suse.com/security/cve/CVE-2021-21150/">CVE-2021-21150</cve>
	<bugzilla href="https://bugzilla.suse.com/1182358">SUSE bug 1182358</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121151" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21151</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21151" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21151" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21151" ref_url="https://www.suse.com/security/cve/CVE-2021-21151" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0413-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NFEMB66XHIEXP6VOOQ4JIXBD6U5X4EIA/" source="SUSE-SU"/>
    <description>
    Use after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<cve href="https://www.suse.com/security/cve/CVE-2021-21151/">CVE-2021-21151</cve>
	<bugzilla href="https://bugzilla.suse.com/1182358">SUSE bug 1182358</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121152" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21152</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21152" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21152" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21152" ref_url="https://www.suse.com/security/cve/CVE-2021-21152" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0413-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NFEMB66XHIEXP6VOOQ4JIXBD6U5X4EIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<cve href="https://www.suse.com/security/cve/CVE-2021-21152/">CVE-2021-21152</cve>
	<bugzilla href="https://bugzilla.suse.com/1182358">SUSE bug 1182358</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21153</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21153" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21153" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21153" ref_url="https://www.suse.com/security/cve/CVE-2021-21153" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0413-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NFEMB66XHIEXP6VOOQ4JIXBD6U5X4EIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<cve href="https://www.suse.com/security/cve/CVE-2021-21153/">CVE-2021-21153</cve>
	<bugzilla href="https://bugzilla.suse.com/1182358">SUSE bug 1182358</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21154</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21154" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21154" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21154" ref_url="https://www.suse.com/security/cve/CVE-2021-21154" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0413-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NFEMB66XHIEXP6VOOQ4JIXBD6U5X4EIA/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<cve href="https://www.suse.com/security/cve/CVE-2021-21154/">CVE-2021-21154</cve>
	<bugzilla href="https://bugzilla.suse.com/1182358">SUSE bug 1182358</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21155</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21155" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21155" ref_url="https://www.suse.com/security/cve/CVE-2021-21155" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0413-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NFEMB66XHIEXP6VOOQ4JIXBD6U5X4EIA/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<cve href="https://www.suse.com/security/cve/CVE-2021-21155/">CVE-2021-21155</cve>
	<bugzilla href="https://bugzilla.suse.com/1182358">SUSE bug 1182358</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21156</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21156" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21156" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21156" ref_url="https://www.suse.com/security/cve/CVE-2021-21156" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0413-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NFEMB66XHIEXP6VOOQ4JIXBD6U5X4EIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted script.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<cve href="https://www.suse.com/security/cve/CVE-2021-21156/">CVE-2021-21156</cve>
	<bugzilla href="https://bugzilla.suse.com/1182358">SUSE bug 1182358</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21157</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21157" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21157" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21157" ref_url="https://www.suse.com/security/cve/CVE-2021-21157" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0413-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NFEMB66XHIEXP6VOOQ4JIXBD6U5X4EIA/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0973-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1016-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/" source="SUSE-SU"/>
    <description>
    Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<cve href="https://www.suse.com/security/cve/CVE-2021-21157/">CVE-2021-21157</cve>
	<bugzilla href="https://bugzilla.suse.com/1182358">SUSE bug 1182358</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694874" comment="libqt5-qtwebengine-5.15.3-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152480" comment="libqt5-qtwebengine is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121159" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21159</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21159" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21159" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21159" ref_url="https://www.suse.com/security/cve/CVE-2021-21159" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21159/">CVE-2021-21159</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21160</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21160" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21160" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21160" ref_url="https://www.suse.com/security/cve/CVE-2021-21160" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in WebAudio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21160/">CVE-2021-21160</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21161</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21161" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21161" ref_url="https://www.suse.com/security/cve/CVE-2021-21161" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21161/">CVE-2021-21161</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21162</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21162" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21162" ref_url="https://www.suse.com/security/cve/CVE-2021-21162" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Use after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21162/">CVE-2021-21162</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21163</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21163" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21163" ref_url="https://www.suse.com/security/cve/CVE-2021-21163" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21163/">CVE-2021-21163</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21164</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21164" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21164" ref_url="https://www.suse.com/security/cve/CVE-2021-21164" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Insufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21164/">CVE-2021-21164</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21165</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21165" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21165" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21165" ref_url="https://www.suse.com/security/cve/CVE-2021-21165" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21165/">CVE-2021-21165</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21166</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21166" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21166" ref_url="https://www.suse.com/security/cve/CVE-2021-21166" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21166/">CVE-2021-21166</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21167</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21167" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21167" ref_url="https://www.suse.com/security/cve/CVE-2021-21167" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Use after free in bookmarks in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21167/">CVE-2021-21167</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21168</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21168" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21168" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21168" ref_url="https://www.suse.com/security/cve/CVE-2021-21168" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in appcache in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21168/">CVE-2021-21168</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21169</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21169" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21169" ref_url="https://www.suse.com/security/cve/CVE-2021-21169" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Out of bounds memory access in V8 in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21169/">CVE-2021-21169</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21170</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21170" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21170" ref_url="https://www.suse.com/security/cve/CVE-2021-21170" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Incorrect security UI in Loader in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21170/">CVE-2021-21170</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21171</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21171" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21171" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21171" ref_url="https://www.suse.com/security/cve/CVE-2021-21171" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21171/">CVE-2021-21171</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21172</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21172" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21172" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21172" ref_url="https://www.suse.com/security/cve/CVE-2021-21172" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21172/">CVE-2021-21172</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21173</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21173" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21173" ref_url="https://www.suse.com/security/cve/CVE-2021-21173" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Side-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21173/">CVE-2021-21173</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21174</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21174" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21174" ref_url="https://www.suse.com/security/cve/CVE-2021-21174" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Referrer in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21174/">CVE-2021-21174</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21175</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21175" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21175" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21175" ref_url="https://www.suse.com/security/cve/CVE-2021-21175" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21175/">CVE-2021-21175</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21176</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21176" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21176" ref_url="https://www.suse.com/security/cve/CVE-2021-21176" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in full screen mode in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21176/">CVE-2021-21176</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21177</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21177" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21177" ref_url="https://www.suse.com/security/cve/CVE-2021-21177" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21177/">CVE-2021-21177</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21178</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21178" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21178" ref_url="https://www.suse.com/security/cve/CVE-2021-21178" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Compositing in Google Chrome on Linux and Windows prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21178/">CVE-2021-21178</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21179</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21179" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21179" ref_url="https://www.suse.com/security/cve/CVE-2021-21179" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Use after free in Network Internals in Google Chrome on Linux prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21179/">CVE-2021-21179</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21180</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21180" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21180" ref_url="https://www.suse.com/security/cve/CVE-2021-21180" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Use after free in tab search in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21180/">CVE-2021-21180</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21181</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21181" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21181" ref_url="https://www.suse.com/security/cve/CVE-2021-21181" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Side-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21181/">CVE-2021-21181</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21182</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21182" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21182" ref_url="https://www.suse.com/security/cve/CVE-2021-21182" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in navigations in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21182/">CVE-2021-21182</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21183</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21183" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21183" ref_url="https://www.suse.com/security/cve/CVE-2021-21183" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21183/">CVE-2021-21183</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21184</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21184" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21184" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21184" ref_url="https://www.suse.com/security/cve/CVE-2021-21184" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21184/">CVE-2021-21184</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21185</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21185" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21185" ref_url="https://www.suse.com/security/cve/CVE-2021-21185" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an attacker who convinced a user to install a malicious extension to obtain sensitive information via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21185/">CVE-2021-21185</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21186</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21186" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21186" ref_url="https://www.suse.com/security/cve/CVE-2021-21186" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21186/">CVE-2021-21186</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21187</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21187" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21187" ref_url="https://www.suse.com/security/cve/CVE-2021-21187" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Insufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21187/">CVE-2021-21187</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21188</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21188" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21188" ref_url="https://www.suse.com/security/cve/CVE-2021-21188" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Use after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21188/">CVE-2021-21188</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121189" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21189</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21189" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21189" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21189" ref_url="https://www.suse.com/security/cve/CVE-2021-21189" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in payments in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21189/">CVE-2021-21189</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21190</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21190" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21190" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21190" ref_url="https://www.suse.com/security/cve/CVE-2021-21190" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0392-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0401-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF/" source="SUSE-SU"/>
    <description>
    Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21190/">CVE-2021-21190</cve>
	<bugzilla href="https://bugzilla.suse.com/1182960">SUSE bug 1182960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183514">SUSE bug 1183514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21191</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21191" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21191" ref_url="https://www.suse.com/security/cve/CVE-2021-21191" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0436-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KJEA6IOQ2CJDQ5EOOYOTAMEHN6772YOW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0446-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YWKF4CBSQUAW5TXSAKSJ2IWL4TE2FP6H/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0592-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7RDJ7VXQ4XSRZDWGET7L5VU52AB3SLWM/" source="SUSE-SU"/>
    <description>
    Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21191/">CVE-2021-21191</cve>
	<bugzilla href="https://bugzilla.suse.com/1183515">SUSE bug 1183515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21192</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21192" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21192" ref_url="https://www.suse.com/security/cve/CVE-2021-21192" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0436-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KJEA6IOQ2CJDQ5EOOYOTAMEHN6772YOW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0446-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YWKF4CBSQUAW5TXSAKSJ2IWL4TE2FP6H/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0592-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7RDJ7VXQ4XSRZDWGET7L5VU52AB3SLWM/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21192/">CVE-2021-21192</cve>
	<bugzilla href="https://bugzilla.suse.com/1183515">SUSE bug 1183515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21193</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21193" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21193" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21193" ref_url="https://www.suse.com/security/cve/CVE-2021-21193" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0436-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KJEA6IOQ2CJDQ5EOOYOTAMEHN6772YOW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0446-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YWKF4CBSQUAW5TXSAKSJ2IWL4TE2FP6H/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0592-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7RDJ7VXQ4XSRZDWGET7L5VU52AB3SLWM/" source="SUSE-SU"/>
    <description>
    Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21193/">CVE-2021-21193</cve>
	<bugzilla href="https://bugzilla.suse.com/1183515">SUSE bug 1183515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21194</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21194" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21194" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21194" ref_url="https://www.suse.com/security/cve/CVE-2021-21194" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0513-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MB2VUPDDX4YJQ53XSCKQEHEHQMCW2MOQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0515-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/REVRJBO5263D3WBYK2JYYJCS6EALUV7Q/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0592-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7RDJ7VXQ4XSRZDWGET7L5VU52AB3SLWM/" source="SUSE-SU"/>
    <description>
    Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21194/">CVE-2021-21194</cve>
	<bugzilla href="https://bugzilla.suse.com/1184256">SUSE bug 1184256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21195</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21195" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21195" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21195" ref_url="https://www.suse.com/security/cve/CVE-2021-21195" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0513-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MB2VUPDDX4YJQ53XSCKQEHEHQMCW2MOQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0515-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/REVRJBO5263D3WBYK2JYYJCS6EALUV7Q/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0592-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7RDJ7VXQ4XSRZDWGET7L5VU52AB3SLWM/" source="SUSE-SU"/>
    <description>
    Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21195/">CVE-2021-21195</cve>
	<bugzilla href="https://bugzilla.suse.com/1184256">SUSE bug 1184256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21196</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21196" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21196" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21196" ref_url="https://www.suse.com/security/cve/CVE-2021-21196" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0513-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MB2VUPDDX4YJQ53XSCKQEHEHQMCW2MOQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0515-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/REVRJBO5263D3WBYK2JYYJCS6EALUV7Q/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0592-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7RDJ7VXQ4XSRZDWGET7L5VU52AB3SLWM/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21196/">CVE-2021-21196</cve>
	<bugzilla href="https://bugzilla.suse.com/1184256">SUSE bug 1184256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21197</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21197" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21197" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21197" ref_url="https://www.suse.com/security/cve/CVE-2021-21197" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0513-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MB2VUPDDX4YJQ53XSCKQEHEHQMCW2MOQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0515-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/REVRJBO5263D3WBYK2JYYJCS6EALUV7Q/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0592-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7RDJ7VXQ4XSRZDWGET7L5VU52AB3SLWM/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21197/">CVE-2021-21197</cve>
	<bugzilla href="https://bugzilla.suse.com/1184256">SUSE bug 1184256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21198</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21198" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21198" ref_url="https://www.suse.com/security/cve/CVE-2021-21198" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0513-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MB2VUPDDX4YJQ53XSCKQEHEHQMCW2MOQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0515-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/REVRJBO5263D3WBYK2JYYJCS6EALUV7Q/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0592-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7RDJ7VXQ4XSRZDWGET7L5VU52AB3SLWM/" source="SUSE-SU"/>
    <description>
    Out of bounds read in IPC in Google Chrome prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21198/">CVE-2021-21198</cve>
	<bugzilla href="https://bugzilla.suse.com/1184256">SUSE bug 1184256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21199</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21199" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21199" ref_url="https://www.suse.com/security/cve/CVE-2021-21199" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0513-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MB2VUPDDX4YJQ53XSCKQEHEHQMCW2MOQ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0515-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/REVRJBO5263D3WBYK2JYYJCS6EALUV7Q/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0592-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7RDJ7VXQ4XSRZDWGET7L5VU52AB3SLWM/" source="SUSE-SU"/>
    <description>
    Use after free in Aura in Google Chrome on Linux prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21199/">CVE-2021-21199</cve>
	<bugzilla href="https://bugzilla.suse.com/1184256">SUSE bug 1184256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21201</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21201" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21201" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21201" ref_url="https://www.suse.com/security/cve/CVE-2021-21201" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
    <description>
    Use after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21201/">CVE-2021-21201</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21202</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21202" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21202" ref_url="https://www.suse.com/security/cve/CVE-2021-21202" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
    <description>
    Use after free in extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21202/">CVE-2021-21202</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21203</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21203" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21203" ref_url="https://www.suse.com/security/cve/CVE-2021-21203" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
    <description>
    Use after free in Blink in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21203/">CVE-2021-21203</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21204</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21204" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21204" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21204" ref_url="https://www.suse.com/security/cve/CVE-2021-21204" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
    <description>
    Use after free in Blink in Google Chrome on OS X prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21204/">CVE-2021-21204</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21205</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21205" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21205" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21205" ref_url="https://www.suse.com/security/cve/CVE-2021-21205" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21205/">CVE-2021-21205</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21206</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21206" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21206" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21206" ref_url="https://www.suse.com/security/cve/CVE-2021-21206" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0567-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5J4EIEBQDVS2O3BUI7IGNQ45JQRY7IQ5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0575-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7IO7QUUW232VPDW2BITKAFAZ63OJKMQB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0712-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UVVTKODULIJ72SWD273BSN4VWATWGOOD/" source="SUSE-SU"/>
    <description>
    Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21206/">CVE-2021-21206</cve>
	<bugzilla href="https://bugzilla.suse.com/1184700">SUSE bug 1184700</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21207</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21207" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21207" ref_url="https://www.suse.com/security/cve/CVE-2021-21207" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
    <description>
    Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21207/">CVE-2021-21207</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21208</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21208" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21208" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21208" ref_url="https://www.suse.com/security/cve/CVE-2021-21208" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
    <description>
    Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90.0.4430.72 allowed an attacker displaying a QR code to perform domain spoofing via a crafted QR code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21208/">CVE-2021-21208</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21209</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21209" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21209" ref_url="https://www.suse.com/security/cve/CVE-2021-21209" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in storage in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21209/">CVE-2021-21209</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21210</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21210" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21210" ref_url="https://www.suse.com/security/cve/CVE-2021-21210" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Network in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially access local UDP ports via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21210/">CVE-2021-21210</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21211</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21211" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21211" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21211" ref_url="https://www.suse.com/security/cve/CVE-2021-21211" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
    <description>
    Inappropriate implementation in Navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21211/">CVE-2021-21211</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21212</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21212" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21212" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21212" ref_url="https://www.suse.com/security/cve/CVE-2021-21212" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0825-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MJJHCREERF6N3XLSWRNBLKZ4TY5THPTY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0840-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XA5KKDV2D4YM2QDZBKGBLQ726LJLT6BI/" source="SUSE-SU"/>
    <description>
    Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90.0.4430.72 allowed a remote attacker to potentially compromise WiFi connection security via a malicious WAP.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21212/">CVE-2021-21212</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186458">SUSE bug 1186458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009511074" comment="chromedriver-91.0.4472.77-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009511075" comment="chromium-91.0.4472.77-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21213</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21213" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21213" ref_url="https://www.suse.com/security/cve/CVE-2021-21213" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
    <description>
    Use after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21213/">CVE-2021-21213</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21214</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21214" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21214" ref_url="https://www.suse.com/security/cve/CVE-2021-21214" source="SUSE CVE"/>
    <description>
    Use after free in Network API in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21214/">CVE-2021-21214</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21215</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21215" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21215" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21215" ref_url="https://www.suse.com/security/cve/CVE-2021-21215" source="SUSE CVE"/>
    <description>
    Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21215/">CVE-2021-21215</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21216</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21216" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21216" ref_url="https://www.suse.com/security/cve/CVE-2021-21216" source="SUSE CVE"/>
    <description>
    Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21216/">CVE-2021-21216</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21217</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21217" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21217" ref_url="https://www.suse.com/security/cve/CVE-2021-21217" source="SUSE CVE"/>
    <description>
    Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21217/">CVE-2021-21217</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21218</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21218" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21218" ref_url="https://www.suse.com/security/cve/CVE-2021-21218" source="SUSE CVE"/>
    <description>
    Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21218/">CVE-2021-21218</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21219</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21219" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21219" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21219" ref_url="https://www.suse.com/security/cve/CVE-2021-21219" source="SUSE CVE"/>
    <description>
    Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21219/">CVE-2021-21219</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121220" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21220</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21220" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21220" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21220" ref_url="https://www.suse.com/security/cve/CVE-2021-21220" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0567-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5J4EIEBQDVS2O3BUI7IGNQ45JQRY7IQ5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0575-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7IO7QUUW232VPDW2BITKAFAZ63OJKMQB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0712-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UVVTKODULIJ72SWD273BSN4VWATWGOOD/" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21220/">CVE-2021-21220</cve>
	<bugzilla href="https://bugzilla.suse.com/1184700">SUSE bug 1184700</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21221</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21221" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21221" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21221" ref_url="https://www.suse.com/security/cve/CVE-2021-21221" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
    <description>
    Insufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21221/">CVE-2021-21221</cve>
	<bugzilla href="https://bugzilla.suse.com/1184764">SUSE bug 1184764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21222</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21222" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21222" ref_url="https://www.suse.com/security/cve/CVE-2021-21222" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0712-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UVVTKODULIJ72SWD273BSN4VWATWGOOD/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21222/">CVE-2021-21222</cve>
	<bugzilla href="https://bugzilla.suse.com/1185047">SUSE bug 1185047</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21223</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21223" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21223" ref_url="https://www.suse.com/security/cve/CVE-2021-21223" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0712-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UVVTKODULIJ72SWD273BSN4VWATWGOOD/" source="SUSE-SU"/>
    <description>
    Integer overflow in Mojo in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21223/">CVE-2021-21223</cve>
	<bugzilla href="https://bugzilla.suse.com/1185047">SUSE bug 1185047</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121224" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21224</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21224" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21224" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21224" ref_url="https://www.suse.com/security/cve/CVE-2021-21224" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0712-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UVVTKODULIJ72SWD273BSN4VWATWGOOD/" source="SUSE-SU"/>
    <description>
    Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21224/">CVE-2021-21224</cve>
	<bugzilla href="https://bugzilla.suse.com/1185047">SUSE bug 1185047</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21225</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21225" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21225" ref_url="https://www.suse.com/security/cve/CVE-2021-21225" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0712-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UVVTKODULIJ72SWD273BSN4VWATWGOOD/" source="SUSE-SU"/>
    <description>
    Out of bounds memory access in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21225/">CVE-2021-21225</cve>
	<bugzilla href="https://bugzilla.suse.com/1185047">SUSE bug 1185047</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21226</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21226" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21226" ref_url="https://www.suse.com/security/cve/CVE-2021-21226" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0712-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UVVTKODULIJ72SWD273BSN4VWATWGOOD/" source="SUSE-SU"/>
    <description>
    Use after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21226/">CVE-2021-21226</cve>
	<bugzilla href="https://bugzilla.suse.com/1185047">SUSE bug 1185047</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121227" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21227</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21227" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21227" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21227" ref_url="https://www.suse.com/security/cve/CVE-2021-21227" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0729-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FJBSCHMF25QDPD6LPM3ZPBBNJZQLF7VX/" source="SUSE-SU"/>
    <description>
    Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21227/">CVE-2021-21227</cve>
	<bugzilla href="https://bugzilla.suse.com/1185375">SUSE bug 1185375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21228</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21228" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21228" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21228" ref_url="https://www.suse.com/security/cve/CVE-2021-21228" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0729-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FJBSCHMF25QDPD6LPM3ZPBBNJZQLF7VX/" source="SUSE-SU"/>
    <description>
    Insufficient policy enforcement in extensions in Google Chrome prior to 90.0.4430.93 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21228/">CVE-2021-21228</cve>
	<bugzilla href="https://bugzilla.suse.com/1185375">SUSE bug 1185375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121229" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21229</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21229" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21229" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21229" ref_url="https://www.suse.com/security/cve/CVE-2021-21229" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0729-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FJBSCHMF25QDPD6LPM3ZPBBNJZQLF7VX/" source="SUSE-SU"/>
    <description>
    Incorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21229/">CVE-2021-21229</cve>
	<bugzilla href="https://bugzilla.suse.com/1185375">SUSE bug 1185375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121230" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21230</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21230" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21230" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21230" ref_url="https://www.suse.com/security/cve/CVE-2021-21230" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0729-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FJBSCHMF25QDPD6LPM3ZPBBNJZQLF7VX/" source="SUSE-SU"/>
    <description>
    Type confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21230/">CVE-2021-21230</cve>
	<bugzilla href="https://bugzilla.suse.com/1185375">SUSE bug 1185375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21231</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21231" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21231" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21231" ref_url="https://www.suse.com/security/cve/CVE-2021-21231" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0729-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FJBSCHMF25QDPD6LPM3ZPBBNJZQLF7VX/" source="SUSE-SU"/>
    <description>
    Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21231/">CVE-2021-21231</cve>
	<bugzilla href="https://bugzilla.suse.com/1185375">SUSE bug 1185375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21232</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21232" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21232" ref_url="https://www.suse.com/security/cve/CVE-2021-21232" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0729-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FJBSCHMF25QDPD6LPM3ZPBBNJZQLF7VX/" source="SUSE-SU"/>
    <description>
    Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21232/">CVE-2021-21232</cve>
	<bugzilla href="https://bugzilla.suse.com/1185375">SUSE bug 1185375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121233" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21233</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21233" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21233" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21233" ref_url="https://www.suse.com/security/cve/CVE-2021-21233" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0629-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0729-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FJBSCHMF25QDPD6LPM3ZPBBNJZQLF7VX/" source="SUSE-SU"/>
    <description>
    Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21233/">CVE-2021-21233</cve>
	<bugzilla href="https://bugzilla.suse.com/1185375">SUSE bug 1185375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694729" comment="chromium-90.0.4430.212-bp153.1.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21240</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21240" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21240" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21240" ref_url="https://www.suse.com/security/cve/CVE-2021-21240" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008920.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008921.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:239-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008922.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008924.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008868.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008895.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1808-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/019148.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0772-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ANZIEBB4AJVGYC2KYDE7RDSTFBBTL5ID/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0796-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BX6XMG6VSE6RQ4LZXDDXUYZZZ2FYOQM7/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1806-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DTGWJY2VML3YAAFAOOYJAQP5SZ4X6XWG/" source="SUSE-SU"/>
    <description>
    httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server which responds with long series of "\xa0" characters in the "www-authenticate" header may cause Denial of Service (CPU burn while parsing header) of the httplib2 client accessing said server. This is fixed in version 0.19.0 which contains a new implementation of auth headers parsing using the pyparsing library.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21240/">CVE-2021-21240</cve>
	<bugzilla href="https://bugzilla.suse.com/1182053">SUSE bug 1182053</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497902" comment="python2-httplib2-0.19.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009475569" comment="python2-httplib2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009493961" comment="python3-httplib2-0.19.0-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009475570" comment="python3-httplib2 is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21241</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21241" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21241" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21241" ref_url="https://www.suse.com/security/cve/CVE-2021-21241" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012106.html" source="SUSE-SU"/>
    <description>
    The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is a independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. In Flask-Security-Too from version 3.3.0 and before version 3.4.5, the /login and /change endpoints can return the authenticated user's authentication token in response to a GET request. Since GET requests aren't protected with a CSRF token, this could lead to a malicious 3rd party site acquiring the authentication token. Version 3.4.5 and version 4.0.0 are patched. As a workaround, if you aren't using authentication tokens - you can set the SECURITY_TOKEN_MAX_AGE to "0" (seconds) which should make the token unusable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-08"/>
	<updated date="2022-09-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21241/">CVE-2021-21241</cve>
	<bugzilla href="https://bugzilla.suse.com/1181058">SUSE bug 1181058</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707546" comment="python3-Flask-Security-Too-3.4.2-150200.3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009710089" comment="python3-Flask-Security-Too is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21261</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21261" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21261" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21261" ref_url="https://www.suse.com/security/cve/CVE-2021-21261" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012249.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0520-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JRX7C3J3TJQXJODJCARSGDYY4AM57Q7/" source="SUSE-SU"/>
    <description>
    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the `flatpak-portal` service that can allow sandboxed applications to execute arbitrary code on the host system (a sandbox escape). This sandbox-escape bug is present in versions from 0.11.4 and before fixed versions 1.8.5 and 1.10.0. The Flatpak portal D-Bus service (`flatpak-portal`, also known by its D-Bus service name `org.freedesktop.portal.Flatpak`) allows apps in a Flatpak sandbox to launch their own subprocesses in a new sandbox instance, either with the same security settings as the caller or with more restrictive security settings. For example, this is used in Flatpak-packaged web browsers such as Chromium to launch subprocesses that will process untrusted web content, and give those subprocesses a more restrictive sandbox than the browser itself. In vulnerable versions, the Flatpak portal service passes caller-specified environment variables to non-sandboxed processes on the host system, and in particular to the `flatpak run` command that is used to launch the new sandbox instance. A malicious or compromised Flatpak app could set environment variables that are trusted by the `flatpak run` command, and use them to execute arbitrary code that is not in a sandbox. As a workaround, this vulnerability can be mitigated by preventing the `flatpak-portal` service from starting, but that mitigation will prevent many Flatpak apps from working correctly. This is fixed in versions 1.8.5 and 1.10.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-09-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21261/">CVE-2021-21261</cve>
	<bugzilla href="https://bugzilla.suse.com/1180996">SUSE bug 1180996</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629101" comment="flatpak-1.10.2-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171006" comment="flatpak is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629104" comment="libflatpak0-1.10.2-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009171009" comment="libflatpak0 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009629105" comment="system-user-flatpak-1.10.2-4.6.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009350838" comment="system-user-flatpak is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21272</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21272" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21272" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21272" ref_url="https://www.suse.com/security/cve/CVE-2021-21272" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:4606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013326.html" source="SUSE-SU"/>
    <description>
    ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. ORAS is both a CLI for initial testing and a Go Module. In ORAS from version 0.4.0 and before version 0.9.0, there is a "zip-slip" vulnerability. The directory support feature allows the downloaded gzipped tarballs to be automatically extracted to the user-specified directory where the tarball can have symbolic links and hard links. A well-crafted tarball or tarballs allow malicious artifact providers linking, writing, or overwriting specific files on the host filesystem outside of the user-specified directory unexpectedly with the same permissions as the user who runs `oras pull`. Users of the affected versions are impacted if they are `oras` CLI users who runs `oras pull`, or if they are Go programs, which invoke `github.com/deislabs/oras/pkg/content.FileStore`. The problem has been fixed in version 0.9.0. For `oras` CLI users, there is no workarounds other than pulling from a trusted artifact provider. For `oras` package users, the workaround is to not use `github.com/deislabs/oras/pkg/content.FileStore`, and use other content stores instead, or pull from a trusted artifact provider.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-23"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21272/">CVE-2021-21272</cve>
	<bugzilla href="https://bugzilla.suse.com/1181419">SUSE bug 1181419</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729562" comment="helm-3.10.3-150000.1.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009718853" comment="helm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729563" comment="helm-bash-completion-3.10.3-150000.1.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009718854" comment="helm-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729564" comment="helm-fish-completion-3.10.3-150000.1.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009718855" comment="helm-fish-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009729565" comment="helm-zsh-completion-3.10.3-150000.1.13.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009718856" comment="helm-zsh-completion is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121284" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21284</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21284" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21284" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21284" ref_url="https://www.suse.com/security/cve/CVE-2021-21284" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0445-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008994.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0278-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UGKTLORCQ4MPZPDFGWKJEEPQRXFUTZYZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0878-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G76UZ7FY6VFG73EC6UUCBE46L3TAKR6G/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1954-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OX775QFGRPXXX7W5FDFKP3V5KCNZYD7F/" source="SUSE-SU"/>
    <description>
    In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root allows privilege escalation to real root. When using "--userns-remap", if the root user in the remapped namespace has access to the host filesystem they can modify files under "/var/lib/docker/&lt;remapping&gt;" that cause writing files with extended privileges. Versions 20.10.3 and 19.03.15 contain patches that prevent privilege escalation from remapped user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21284/">CVE-2021-21284</cve>
	<bugzilla href="https://bugzilla.suse.com/1181732">SUSE bug 1181732</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494422" comment="containerd-1.4.4-5.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153864" comment="containerd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625312" comment="containerd-ctr-1.4.4-5.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153865" comment="containerd-ctr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494423" comment="docker-20.10.6_ce-6.49.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152505" comment="docker is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494424" comment="docker-bash-completion-20.10.6_ce-6.49.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152506" comment="docker-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494432" comment="docker-fish-completion-20.10.6_ce-6.49.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009343480" comment="docker-fish-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621052" comment="docker-zsh-completion-20.10.6_ce-6.49.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152508" comment="docker-zsh-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494425" comment="runc-1.0.0~rc93-1.14.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153867" comment="runc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21285</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21285" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21285" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21285" ref_url="https://www.suse.com/security/cve/CVE-2021-21285" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008466.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008469.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008594.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008602.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0445-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008994.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0278-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UGKTLORCQ4MPZPDFGWKJEEPQRXFUTZYZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0878-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G76UZ7FY6VFG73EC6UUCBE46L3TAKR6G/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1954-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OX775QFGRPXXX7W5FDFKP3V5KCNZYD7F/" source="SUSE-SU"/>
    <description>
    In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21285/">CVE-2021-21285</cve>
	<bugzilla href="https://bugzilla.suse.com/1181730">SUSE bug 1181730</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494422" comment="containerd-1.4.4-5.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153864" comment="containerd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625312" comment="containerd-ctr-1.4.4-5.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153865" comment="containerd-ctr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494423" comment="docker-20.10.6_ce-6.49.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152505" comment="docker is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494424" comment="docker-bash-completion-20.10.6_ce-6.49.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152506" comment="docker-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494432" comment="docker-fish-completion-20.10.6_ce-6.49.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009343480" comment="docker-fish-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621052" comment="docker-zsh-completion-20.10.6_ce-6.49.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152508" comment="docker-zsh-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494425" comment="runc-1.0.0~rc93-1.14.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153867" comment="runc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20212129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-2129</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-2129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2129" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-2129" ref_url="https://www.suse.com/security/cve/CVE-2021-2129" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0165-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UOZDUDAVWBPMEHQXT2I4NXOMGVCWB5BM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0630-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2RTNW7ZRCP2VD6YMPAHFC7MY4YIB5GTL/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.9/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2129/">CVE-2021-2129</cve>
	<bugzilla href="https://bugzilla.suse.com/1181198">SUSE bug 1181198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181199">SUSE bug 1181199</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694926" comment="virtualbox-guest-tools-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694927" comment="virtualbox-guest-x11-6.1.20-lp153.1.8 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694928" comment="virtualbox-kmp-default-6.1.20_k5.3.18_57-lp153.1.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21290</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21290" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21290" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21290" ref_url="https://www.suse.com/security/cve/CVE-2021-21290" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010773.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012712.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012723.html" source="SUSE-SU"/>
    <description>
    Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers &amp; clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method "File.createTempFile" on unix-like systems creates a random file, but, by default will create this file with the permissions "-rw-r--r--". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's "AbstractDiskHttpData" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own "java.io.tmpdir" when you start the JVM or use "DefaultHttpDataFactory.setBaseDir(...)" to set the directory to something that is only readable by the current user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-10-28"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21290/">CVE-2021-21290</cve>
	<bugzilla href="https://bugzilla.suse.com/1182103">SUSE bug 1182103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199338">SUSE bug 1199338</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679577" comment="netty-4.1.75-150200.4.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009347974" comment="netty is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679578" comment="netty-javadoc-4.1.75-150200.4.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009347975" comment="netty-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679579" comment="netty-poms-4.1.75-150200.4.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009347976" comment="netty-poms is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21295</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21295" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21295" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21295" ref_url="https://www.suse.com/security/cve/CVE-2021-21295" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010773.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0448-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XDF63Q7PJ5ZO6J24Z3YJ7WWZWTTROVC2/" source="SUSE-SU"/>
    <description>
    Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers &amp; clients. In Netty (io.netty:netty-codec-http2) before version 4.1.60.Final there is a vulnerability that enables request smuggling. If a Content-Length header is present in the original HTTP/2 request, the field is not validated by `Http2MultiplexHandler` as it is propagated up. This is fine as long as the request is not proxied through as HTTP/1.1. If the request comes in as an HTTP/2 stream, gets converted into the HTTP/1.1 domain objects (`HttpRequest`, `HttpContent`, etc.) via `Http2StreamFrameToHttpObjectCodec `and then sent up to the child channel's pipeline and proxied through a remote peer as HTTP/1.1 this may result in request smuggling. In a proxy case, users may assume the content-length is validated somehow, which is not the case. If the request is forwarded to a backend channel that is a HTTP/1.1 connection, the Content-Length now has meaning and needs to be checked. An attacker can smuggle requests inside the body as it gets downgraded from HTTP/2 to HTTP/1.1. For an example attack refer to the linked GitHub Advisory. Users are only affected if all of this is true: `HTTP2MultiplexCodec` or `Http2FrameCodec` is used, `Http2StreamFrameToHttpObjectCodec` is used to convert to HTTP/1.1 objects, and these HTTP/1.1 objects are forwarded to another remote peer. This has been patched in 4.1.60.Final As a workaround, the user can do the validation by themselves by implementing a custom `ChannelInboundHandler` that is put in the `ChannelPipeline` behind `Http2StreamFrameToHttpObjectCodec`.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21295/">CVE-2021-21295</cve>
	<bugzilla href="https://bugzilla.suse.com/1183262">SUSE bug 1183262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184203">SUSE bug 1184203</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679577" comment="netty-4.1.75-150200.4.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009347974" comment="netty is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679578" comment="netty-javadoc-4.1.75-150200.4.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009347975" comment="netty-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009679579" comment="netty-poms-4.1.75-150200.4.6.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009347976" comment="netty-poms is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21300</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21300" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21300" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21300" ref_url="https://www.suse.com/security/cve/CVE-2021-21300" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010840.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0756-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008456.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0757-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009228.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0405-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/33ZBSRS6RUAL5LAGWR6DDONQJXFU6FIT/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2555-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LNQQ262LF4R2GIO7S7J6NRAUDKV7VGPB/" source="SUSE-SU"/>
    <description>
    Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed while cloning onto a case-insensitive file system such as NTFS, HFS+ or APFS (i.e. the default file systems on Windows and macOS). Note that clean/smudge filters have to be configured for that. Git for Windows configures Git LFS by default, and is therefore vulnerable. The problem has been patched in the versions published on Tuesday, March 9th, 2021. As a workaound, if symbolic link support is disabled in Git (e.g. via `git config --global core.symlinks false`), the described attack won't work. Likewise, if no clean/smudge filters such as Git LFS are configured globally (i.e. _before_ cloning), the attack is foiled. As always, it is best to avoid cloning repositories from untrusted sources. The earliest impacted version is 2.14.2. The fix versions are: 2.30.1, 2.29.3, 2.28.1, 2.27.1, 2.26.3, 2.25.5, 2.24.4, 2.23.4, 2.22.5, 2.21.4, 2.20.5, 2.19.6, 2.18.5, 2.17.62.17.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21300/">CVE-2021-21300</cve>
	<bugzilla href="https://bugzilla.suse.com/1183026">SUSE bug 1183026</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625597" comment="git-2.31.1-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151600" comment="git is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625598" comment="git-arch-2.31.1-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153608" comment="git-arch is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625562" comment="git-core-2.31.1-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151601" comment="git-core is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625868" comment="git-credential-gnome-keyring-2.31.1-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153609" comment="git-credential-gnome-keyring is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625869" comment="git-credential-libsecret-2.31.1-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009178167" comment="git-credential-libsecret is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625599" comment="git-cvs-2.31.1-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151602" comment="git-cvs is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625600" comment="git-daemon-2.31.1-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151603" comment="git-daemon is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625601" comment="git-doc-2.31.1-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153610" comment="git-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625602" comment="git-email-2.31.1-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151604" comment="git-email is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625603" comment="git-gui-2.31.1-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151605" comment="git-gui is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625870" comment="git-p4-2.31.1-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009178168" comment="git-p4 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625604" comment="git-svn-2.31.1-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151606" comment="git-svn is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625605" comment="git-web-2.31.1-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151607" comment="git-web is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625606" comment="gitk-2.31.1-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151608" comment="gitk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625563" comment="perl-Git-2.31.1-10.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009627143" comment="perl-Git is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121330" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21330</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21330" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21330" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21330" ref_url="https://www.suse.com/security/cve/CVE-2021-21330" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008677.html" source="SUSE-SU"/>
    <description>
    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the `aiohttp.web_middlewares.normalize_path_middleware` middleware. This security problem has been fixed in 3.7.4. Upgrade your dependency using pip as follows "pip install aiohttp &gt;= 3.7.4". If upgrading is not an option for you, a workaround can be to avoid using `aiohttp.web_middlewares.normalize_path_middleware` in your applications.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-16"/>
	<updated date="2022-09-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21330/">CVE-2021-21330</cve>
	<bugzilla href="https://bugzilla.suse.com/1184745">SUSE bug 1184745</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009713862" comment="python-aiohttp-doc-3.6.0-150100.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009349319" comment="python-aiohttp-doc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009713039" comment="python3-aiohttp-3.6.0-150100.3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009350183" comment="python3-aiohttp is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121334" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21334</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21334" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21334" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21334" ref_url="https://www.suse.com/security/cve/CVE-2021-21334" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008994.html" source="SUSE-SU"/>
		<reference ref_id="TID000020328" ref_url="https://www.suse.com/support/kb/doc/?id=000020328" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0878-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G76UZ7FY6VFG73EC6UUCBE46L3TAKR6G/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1954-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OX775QFGRPXXX7W5FDFKP3V5KCNZYD7F/" source="SUSE-SU"/>
    <description>
    In containerd (an industry-standard container runtime) before versions 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation (through Kubernetes, crictl, or any other pod/container client that uses the containerd CRI service) that share the same image may receive incorrect environment variables, including values that are defined for other containers. If the affected containers have different security contexts, this may allow sensitive information to be unintentionally shared. If you are not using containerd's CRI implementation (through one of the mechanisms described above), you are not vulnerable to this issue. If you are not launching multiple containers or Kubernetes pods from the same image which have different environment variables, you are not vulnerable to this issue. If you are not launching multiple containers or Kubernetes pods from the same image in rapid succession, you have reduced likelihood of being vulnerable to this issue This vulnerability has been fixed in containerd 1.3.10 and containerd 1.4.4. Users should update to these versions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21334/">CVE-2021-21334</cve>
	<bugzilla href="https://bugzilla.suse.com/1183397">SUSE bug 1183397</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494422" comment="containerd-1.4.4-5.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153864" comment="containerd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625312" comment="containerd-ctr-1.4.4-5.32.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153865" comment="containerd-ctr is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494423" comment="docker-20.10.6_ce-6.49.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152505" comment="docker is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494424" comment="docker-bash-completion-20.10.6_ce-6.49.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152506" comment="docker-bash-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494432" comment="docker-fish-completion-20.10.6_ce-6.49.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009343480" comment="docker-fish-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621052" comment="docker-zsh-completion-20.10.6_ce-6.49.3 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152508" comment="docker-zsh-completion is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009494425" comment="runc-1.0.0~rc93-1.14.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153867" comment="runc is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121341" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21341</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21341" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21341" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21341" ref_url="https://www.suse.com/security/cve/CVE-2021-21341" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1840-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0832-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KO2SBWPIR6ZPUOQHOD4PSDGYT53T5TZY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1840-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APETSNTGJFG76V7J5X4K4LWA77F5743O/" source="SUSE-SU"/>
    <description>
    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21341/">CVE-2021-21341</cve>
	<bugzilla href="https://bugzilla.suse.com/1184377">SUSE bug 1184377</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496554" comment="xstream-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342347" comment="xstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620562" comment="xstream-benchmark-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342348" comment="xstream-benchmark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620563" comment="xstream-javadoc-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342349" comment="xstream-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620564" comment="xstream-parent-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342350" comment="xstream-parent is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21342</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21342" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21342" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21342" ref_url="https://www.suse.com/security/cve/CVE-2021-21342" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1840-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0832-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KO2SBWPIR6ZPUOQHOD4PSDGYT53T5TZY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1840-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APETSNTGJFG76V7J5X4K4LWA77F5743O/" source="SUSE-SU"/>
    <description>
    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the processed input stream and replace or inject objects, that result in a server-side forgery request. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21342/">CVE-2021-21342</cve>
	<bugzilla href="https://bugzilla.suse.com/1184379">SUSE bug 1184379</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496554" comment="xstream-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342347" comment="xstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620562" comment="xstream-benchmark-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342348" comment="xstream-benchmark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620563" comment="xstream-javadoc-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342349" comment="xstream-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620564" comment="xstream-parent-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342350" comment="xstream-parent is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121343" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21343</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21343" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21343" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21343" ref_url="https://www.suse.com/security/cve/CVE-2021-21343" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1840-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0832-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KO2SBWPIR6ZPUOQHOD4PSDGYT53T5TZY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1840-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APETSNTGJFG76V7J5X4K4LWA77F5743O/" source="SUSE-SU"/>
    <description>
    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the processed input stream and replace or inject objects, that result in the deletion of a file on the local host. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21343/">CVE-2021-21343</cve>
	<bugzilla href="https://bugzilla.suse.com/1184376">SUSE bug 1184376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496554" comment="xstream-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342347" comment="xstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620562" comment="xstream-benchmark-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342348" comment="xstream-benchmark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620563" comment="xstream-javadoc-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342349" comment="xstream-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620564" comment="xstream-parent-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342350" comment="xstream-parent is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121344" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21344</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21344" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21344" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21344" ref_url="https://www.suse.com/security/cve/CVE-2021-21344" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1840-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0832-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KO2SBWPIR6ZPUOQHOD4PSDGYT53T5TZY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1840-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APETSNTGJFG76V7J5X4K4LWA77F5743O/" source="SUSE-SU"/>
    <description>
    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-21344/">CVE-2021-21344</cve>
	<bugzilla href="https://bugzilla.suse.com/1184375">SUSE bug 1184375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496554" comment="xstream-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342347" comment="xstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620562" comment="xstream-benchmark-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342348" comment="xstream-benchmark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620563" comment="xstream-javadoc-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342349" comment="xstream-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620564" comment="xstream-parent-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342350" comment="xstream-parent is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21345</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21345" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21345" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21345" ref_url="https://www.suse.com/security/cve/CVE-2021-21345" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1840-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0832-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KO2SBWPIR6ZPUOQHOD4PSDGYT53T5TZY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1840-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APETSNTGJFG76V7J5X4K4LWA77F5743O/" source="SUSE-SU"/>
    <description>
    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21345/">CVE-2021-21345</cve>
	<bugzilla href="https://bugzilla.suse.com/1184372">SUSE bug 1184372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496554" comment="xstream-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342347" comment="xstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620562" comment="xstream-benchmark-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342348" comment="xstream-benchmark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620563" comment="xstream-javadoc-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342349" comment="xstream-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620564" comment="xstream-parent-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342350" comment="xstream-parent is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121346" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21346</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21346" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21346" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21346" ref_url="https://www.suse.com/security/cve/CVE-2021-21346" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1840-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0832-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KO2SBWPIR6ZPUOQHOD4PSDGYT53T5TZY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1840-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APETSNTGJFG76V7J5X4K4LWA77F5743O/" source="SUSE-SU"/>
    <description>
    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21346/">CVE-2021-21346</cve>
	<bugzilla href="https://bugzilla.suse.com/1184373">SUSE bug 1184373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496554" comment="xstream-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342347" comment="xstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620562" comment="xstream-benchmark-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342348" comment="xstream-benchmark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620563" comment="xstream-javadoc-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342349" comment="xstream-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620564" comment="xstream-parent-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342350" comment="xstream-parent is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121347" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21347</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21347" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21347" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21347" ref_url="https://www.suse.com/security/cve/CVE-2021-21347" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1840-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0832-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KO2SBWPIR6ZPUOQHOD4PSDGYT53T5TZY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1840-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APETSNTGJFG76V7J5X4K4LWA77F5743O/" source="SUSE-SU"/>
    <description>
    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21347/">CVE-2021-21347</cve>
	<bugzilla href="https://bugzilla.suse.com/1184378">SUSE bug 1184378</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496554" comment="xstream-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342347" comment="xstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620562" comment="xstream-benchmark-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342348" comment="xstream-benchmark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620563" comment="xstream-javadoc-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342349" comment="xstream-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620564" comment="xstream-parent-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342350" comment="xstream-parent is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121348" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21348</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21348" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21348" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21348" ref_url="https://www.suse.com/security/cve/CVE-2021-21348" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1840-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0832-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KO2SBWPIR6ZPUOQHOD4PSDGYT53T5TZY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1840-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APETSNTGJFG76V7J5X4K4LWA77F5743O/" source="SUSE-SU"/>
    <description>
    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to occupy a thread that consumes maximum CPU time and will never return. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21348/">CVE-2021-21348</cve>
	<bugzilla href="https://bugzilla.suse.com/1184374">SUSE bug 1184374</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496554" comment="xstream-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342347" comment="xstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620562" comment="xstream-benchmark-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342348" comment="xstream-benchmark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620563" comment="xstream-javadoc-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342349" comment="xstream-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620564" comment="xstream-parent-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342350" comment="xstream-parent is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21349</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21349" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21349" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21349" ref_url="https://www.suse.com/security/cve/CVE-2021-21349" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1840-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0832-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KO2SBWPIR6ZPUOQHOD4PSDGYT53T5TZY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1840-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APETSNTGJFG76V7J5X4K4LWA77F5743O/" source="SUSE-SU"/>
    <description>
    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21349/">CVE-2021-21349</cve>
	<bugzilla href="https://bugzilla.suse.com/1184797">SUSE bug 1184797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496554" comment="xstream-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342347" comment="xstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620562" comment="xstream-benchmark-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342348" comment="xstream-benchmark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620563" comment="xstream-javadoc-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342349" comment="xstream-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620564" comment="xstream-parent-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342350" comment="xstream-parent is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21350</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21350" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21350" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21350" ref_url="https://www.suse.com/security/cve/CVE-2021-21350" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1840-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0832-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KO2SBWPIR6ZPUOQHOD4PSDGYT53T5TZY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1840-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APETSNTGJFG76V7J5X4K4LWA77F5743O/" source="SUSE-SU"/>
    <description>
    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to execute arbitrary code only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21350/">CVE-2021-21350</cve>
	<bugzilla href="https://bugzilla.suse.com/1184380">SUSE bug 1184380</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496554" comment="xstream-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342347" comment="xstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620562" comment="xstream-benchmark-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342348" comment="xstream-benchmark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620563" comment="xstream-javadoc-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342349" comment="xstream-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620564" comment="xstream-parent-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342350" comment="xstream-parent is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21351</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21351" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21351" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21351" ref_url="https://www.suse.com/security/cve/CVE-2021-21351" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008912.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1840-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0832-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KO2SBWPIR6ZPUOQHOD4PSDGYT53T5TZY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1840-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APETSNTGJFG76V7J5X4K4LWA77F5743O/" source="SUSE-SU"/>
    <description>
    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21351/">CVE-2021-21351</cve>
	<bugzilla href="https://bugzilla.suse.com/1184796">SUSE bug 1184796</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009496554" comment="xstream-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342347" comment="xstream is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620562" comment="xstream-benchmark-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342348" comment="xstream-benchmark is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620563" comment="xstream-javadoc-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342349" comment="xstream-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009620564" comment="xstream-parent-1.4.16-3.8.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009342350" comment="xstream-parent is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21372</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21372" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21372" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21372" ref_url="https://www.suse.com/security/cve/CVE-2021-21372" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0618-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NV5NCUH7W5BZXNXEYHHUQGISDZUK64IU/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0628-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3KP4YJ5PY3MI63TQDVZA6BQHCQPAXBGB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10095-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HM5F2H5AWO4WRQSTOWMODGKMXAHHBVRH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10101-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SNDISR45BBTIWW5MDTIQOSRHOEV3XUKF/" source="SUSE-SU"/>
    <description>
    Nimble is a package manager for the Nim programming language. In Nim release version before versions 1.2.10 and 1.4.4, Nimble doCmd is used in different places and can be leveraged to execute arbitrary commands. An attacker can craft a malicious entry in the packages.json package list to trigger code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-24"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21372/">CVE-2021-21372</cve>
	<bugzilla href="https://bugzilla.suse.com/1185083">SUSE bug 1185083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707627" comment="nim-1.6.6-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009351816" comment="nim is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21373</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21373" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21373" ref_url="https://www.suse.com/security/cve/CVE-2021-21373" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0618-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NV5NCUH7W5BZXNXEYHHUQGISDZUK64IU/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0628-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3KP4YJ5PY3MI63TQDVZA6BQHCQPAXBGB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10095-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HM5F2H5AWO4WRQSTOWMODGKMXAHHBVRH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10101-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SNDISR45BBTIWW5MDTIQOSRHOEV3XUKF/" source="SUSE-SU"/>
    <description>
    Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.nim-lang.org/packages.json. An attacker able to perform MitM can deliver a modified package list containing malicious software packages. If the packages are installed and used the attack escalates to untrusted code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-24"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21373/">CVE-2021-21373</cve>
	<bugzilla href="https://bugzilla.suse.com/1185084">SUSE bug 1185084</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707627" comment="nim-1.6.6-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009351816" comment="nim is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21374</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21374" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21374" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21374" ref_url="https://www.suse.com/security/cve/CVE-2021-21374" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0618-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NV5NCUH7W5BZXNXEYHHUQGISDZUK64IU/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0628-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3KP4YJ5PY3MI63TQDVZA6BQHCQPAXBGB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10095-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HM5F2H5AWO4WRQSTOWMODGKMXAHHBVRH/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10101-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SNDISR45BBTIWW5MDTIQOSRHOEV3XUKF/" source="SUSE-SU"/>
    <description>
    Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS without full verification of the SSL/TLS certificate due to the default setting of httpClient. An attacker able to perform MitM can deliver a modified package list containing malicious software packages. If the packages are installed and used the attack escalates to untrusted code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-24"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21374/">CVE-2021-21374</cve>
	<bugzilla href="https://bugzilla.suse.com/1185085">SUSE bug 1185085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009707627" comment="nim-1.6.6-bp153.2.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009351816" comment="nim is signed with openSUSE key"/>
</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121409" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21409</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21409" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21409" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21409" ref_url="https://www.suse.com/security/cve/CVE-2021-21409" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010800.html" source="SUSE-SU"/>
    <description>
    Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers &amp; clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that enables request smuggling. The content-length header is not correctly validated if the request only uses a single Http2HeaderFrame with the endStream set to to true. This could lead to request smuggling if the request is proxied to a remote peer and translated to HTTP/1.1. This is a followup of GHSA-wm47-8v5p-wjpj/CVE-2021-21295 which did miss to fix this one case. This was fixed as part of 4.1.61.Final.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21409/">CVE-2021-21409</cve>
	<bugzilla href="https://bugzilla.suse.com/1184203">SUSE bug 1184203</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680689" comment="netty-4.1.75-150200.4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009347974" comment="netty is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680690" comment="netty-javadoc-4.1.75-150200.4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009347975" comment="netty-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009680691" comment="netty-poms-4.1.75-150200.4.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009347976" comment="netty-poms is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20212145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-2145</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-2145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2145" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-2145" ref_url="https://www.suse.com/security/cve/CVE-2021-2145" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2021:0723-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H2VYFQN75RCOBQFQCIU4LU7E32CGO4SK/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0977-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ATNJPOC23AR5PQLUDKUL5FXOOPOM3VDD/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-2145/">CVE-2021-2145</cve>
	<bugzilla href="https://bugzilla.suse.com/1185211">SUSE bug 1185211</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624198" comment="python3-virtualbox-6.1.22-lp153.2.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231803" comment="python3-virtualbox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624199" comment="virtualbox-6.1.22-lp153.2.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624200" comment="virtualbox-devel-6.1.22-lp153.2.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624201" comment="virtualbox-guest-desktop-icons-6.1.22-lp153.2.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624202" comment="virtualbox-guest-source-6.1.22-lp153.2.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166864" comment="virtualbox-guest-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624203" comment="virtualbox-guest-tools-6.1.22-lp153.2.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624204" comment="virtualbox-guest-x11-6.1.22-lp153.2.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624205" comment="virtualbox-host-source-6.1.22-lp153.2.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624206" comment="virtualbox-kmp-default-6.1.22_k5.3.18_59.5-lp153.2.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009286913" comment="virtualbox-kmp-default is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624207" comment="virtualbox-kmp-preempt-6.1.22_k5.3.18_59.5-lp153.2.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009291432" comment="virtualbox-kmp-preempt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624208" comment="virtualbox-qt-6.1.22-lp153.2.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624209" comment="virtualbox-vnc-6.1.22-lp153.2.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009166871" comment="virtualbox-vnc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009624210" comment="virtualbox-websrv-6.1.22-lp153.2.3.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20212154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-2154</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-2154" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2154" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-2154" ref_url="https://www.suse.com/security/cve/CVE-2021-2154" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2634-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009263.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2605-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HCF3OMGBRJLQHPHAF7JZMSOEDMTGPZY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2616-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CIBQJA52DDSVBOYKKQO4M2QLZ3Q6SVJ2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2617-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/R6NDRIJNIJ22E65XJ6O44JMLQOV7THNM/" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.7.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2154/">CVE-2021-2154</cve>
	<bugzilla href="https://bugzilla.suse.com/1185872">SUSE bug 1185872</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626432" comment="libmariadbd-devel-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009338686" comment="libmariadbd-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626433" comment="libmariadbd19-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009338687" comment="libmariadbd19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626456" comment="libmysqld-devel-10.2.39-3.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626457" comment="libmysqld19-10.2.39-3.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626434" comment="mariadb-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626652" comment="mariadb-bench-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626435" comment="mariadb-client-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626436" comment="mariadb-errormessages-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626651" comment="mariadb-galera-10.4.20-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009178284" comment="mariadb-galera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626653" comment="mariadb-rpm-macros-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009338688" comment="mariadb-rpm-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626654" comment="mariadb-test-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626437" comment="mariadb-tools-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20212161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-2161</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-2161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2161" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-2161" ref_url="https://www.suse.com/security/cve/CVE-2021-2161" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1314-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008676.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009315.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009422.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0719-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KGMX3TVL2LOHFGYNJZIU2YSG4IKEZZAM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1176-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/A3CHP6PJ4RPID7WVQKA2X34TN5RNEXQW/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1455-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GRBHNCR5KDMAYD3N3CDRPQWW3T6HIBNY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2798-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QMTWQGCU5SAOKIQIUH6IN4LEQOIC2PS6/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3615-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5VOJHYCWQ5VVLZ6J4OKIW2JS6MBT7VLM/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. It can also be exploited by supplying untrusted data to APIs in the specified Component. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2161/">CVE-2021-2161</cve>
	<bugzilla href="https://bugzilla.suse.com/1185056">SUSE bug 1185056</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653986" comment="java-1_8_0-openj9-1.8.0.312-3.18.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009298898" comment="java-1_8_0-openj9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653987" comment="java-1_8_0-openj9-accessibility-1.8.0.312-3.18.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009298899" comment="java-1_8_0-openj9-accessibility is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653988" comment="java-1_8_0-openj9-demo-1.8.0.312-3.18.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009298900" comment="java-1_8_0-openj9-demo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653989" comment="java-1_8_0-openj9-devel-1.8.0.312-3.18.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009298901" comment="java-1_8_0-openj9-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653990" comment="java-1_8_0-openj9-headless-1.8.0.312-3.18.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009298902" comment="java-1_8_0-openj9-headless is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653991" comment="java-1_8_0-openj9-javadoc-1.8.0.312-3.18.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009298903" comment="java-1_8_0-openj9-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653992" comment="java-1_8_0-openj9-src-1.8.0.312-3.18.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009298904" comment="java-1_8_0-openj9-src is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627144" comment="java-1_8_0-openjdk-1.8.0.302-3.55.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627231" comment="java-1_8_0-openjdk-accessibility-1.8.0.302-3.55.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627145" comment="java-1_8_0-openjdk-demo-1.8.0.302-3.55.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627146" comment="java-1_8_0-openjdk-devel-1.8.0.302-3.55.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627147" comment="java-1_8_0-openjdk-headless-1.8.0.302-3.55.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627232" comment="java-1_8_0-openjdk-javadoc-1.8.0.302-3.55.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009627233" comment="java-1_8_0-openjdk-src-1.8.0.302-3.55.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20212163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-2163</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-2163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2163" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-2163" ref_url="https://www.suse.com/security/cve/CVE-2021-2163" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:1314-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008676.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1980-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1989-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009422.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14875-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021374.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0719-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KGMX3TVL2LOHFGYNJZIU2YSG4IKEZZAM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0776-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5NU2NP3UWZ4SXHVJIVENLSU4X5TAKTHL/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0933-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UP4BA2GSD3EW2BMQV2VFVG2F3GMETZ5M/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1455-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GRBHNCR5KDMAYD3N3CDRPQWW3T6HIBNY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1666-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CMIXIE2QCSQNEBZOFYWWIWYINHYQA6A5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1989-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BNSY4TLUBETGRMX7GD6NXLOWEVJP6B4Z/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3615-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5VOJHYCWQ5VVLZ6J4OKIW2JS6MBT7VLM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0108-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5GEO4VASAXOQQYTQGGNCUBC3ZY3RFQT4/" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2163/">CVE-2021-2163</cve>
	<bugzilla href="https://bugzilla.suse.com/1185055">SUSE bug 1185055</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694768" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231592" comment="java-11-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009694769" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009231596" comment="java-11-openjdk-headless is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662459" comment="java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623770" comment="java-1_8_0-ibm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662537" comment="java-1_8_0-ibm-32bit-1.8.0_sr7.0-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623771" comment="java-1_8_0-ibm-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662460" comment="java-1_8_0-ibm-alsa-1.8.0_sr7.0-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623772" comment="java-1_8_0-ibm-alsa is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662538" comment="java-1_8_0-ibm-demo-1.8.0_sr7.0-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623773" comment="java-1_8_0-ibm-demo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662461" comment="java-1_8_0-ibm-devel-1.8.0_sr7.0-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623774" comment="java-1_8_0-ibm-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662539" comment="java-1_8_0-ibm-devel-32bit-1.8.0_sr7.0-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623775" comment="java-1_8_0-ibm-devel-32bit is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662462" comment="java-1_8_0-ibm-plugin-1.8.0_sr7.0-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623776" comment="java-1_8_0-ibm-plugin is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009662540" comment="java-1_8_0-ibm-src-1.8.0_sr7.0-3.53.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009623777" comment="java-1_8_0-ibm-src is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653986" comment="java-1_8_0-openj9-1.8.0.312-3.18.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009298898" comment="java-1_8_0-openj9 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653987" comment="java-1_8_0-openj9-accessibility-1.8.0.312-3.18.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009298899" comment="java-1_8_0-openj9-accessibility is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653988" comment="java-1_8_0-openj9-demo-1.8.0.312-3.18.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009298900" comment="java-1_8_0-openj9-demo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653989" comment="java-1_8_0-openj9-devel-1.8.0.312-3.18.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009298901" comment="java-1_8_0-openj9-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653990" comment="java-1_8_0-openj9-headless-1.8.0.312-3.18.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009298902" comment="java-1_8_0-openj9-headless is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653991" comment="java-1_8_0-openj9-javadoc-1.8.0.312-3.18.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009298903" comment="java-1_8_0-openj9-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009653992" comment="java-1_8_0-openj9-src-1.8.0.312-3.18.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009298904" comment="java-1_8_0-openj9-src is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497125" comment="java-1_8_0-openjdk-1.8.0.292-3.52.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625315" comment="java-1_8_0-openjdk-accessibility-1.8.0.292-3.52.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497126" comment="java-1_8_0-openjdk-demo-1.8.0.292-3.52.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497127" comment="java-1_8_0-openjdk-devel-1.8.0.292-3.52.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009497128" comment="java-1_8_0-openjdk-headless-1.8.0.292-3.52.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009621130" comment="java-1_8_0-openjdk-javadoc-1.8.0.292-3.52.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009625316" comment="java-1_8_0-openjdk-src-1.8.0.292-3.52.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20212166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-2166</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-2166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2166" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-2166" ref_url="https://www.suse.com/security/cve/CVE-2021-2166" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2634-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009263.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2605-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HCF3OMGBRJLQHPHAF7JZMSOEDMTGPZY/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2616-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CIBQJA52DDSVBOYKKQO4M2QLZ3Q6SVJ2/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2617-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/R6NDRIJNIJ22E65XJ6O44JMLQOV7THNM/" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-05-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2166/">CVE-2021-2166</cve>
	<bugzilla href="https://bugzilla.suse.com/1185870">SUSE bug 1185870</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626432" comment="libmariadbd-devel-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009338686" comment="libmariadbd-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626433" comment="libmariadbd19-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009338687" comment="libmariadbd19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626456" comment="libmysqld-devel-10.2.39-3.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626457" comment="libmysqld19-10.2.39-3.40.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009177123" comment="libmysqld19 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626434" comment="mariadb-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626652" comment="mariadb-bench-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626435" comment="mariadb-client-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626436" comment="mariadb-errormessages-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626651" comment="mariadb-galera-10.4.20-3.9.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009178284" comment="mariadb-galera is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626653" comment="mariadb-rpm-macros-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009338688" comment="mariadb-rpm-macros is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626654" comment="mariadb-test-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009626437" comment="mariadb-tools-10.5.11-3.3.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21702</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21702" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21702" ref_url="https://www.suse.com/security/cve/CVE-2021-21702" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008338.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008348.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14668-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008508.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012985.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0305-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/657MMLMT2VMDWZEGPTHXVDBDN5UVZV2Y/" source="SUSE-SU"/>
    <description>
    In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21702/">CVE-2021-21702</cve>
	<bugzilla href="https://bugzilla.suse.com/1182049">SUSE bug 1182049</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501287" comment="apache2-mod_php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501288" comment="php7-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723659" comment="php7-bcmath-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723660" comment="php7-bz2-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723661" comment="php7-calendar-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501292" comment="php7-ctype-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723663" comment="php7-curl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723664" comment="php7-dba-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723665" comment="php7-devel-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501296" comment="php7-dom-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723653" comment="php7-embed-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230509" comment="php7-embed is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723667" comment="php7-enchant-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723668" comment="php7-exif-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723669" comment="php7-fastcgi-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723670" comment="php7-fileinfo-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723624" comment="php7-firebird-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723671" comment="php7-fpm-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723672" comment="php7-ftp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723673" comment="php7-gd-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723674" comment="php7-gettext-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723675" comment="php7-gmp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501306" comment="php7-iconv-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723677" comment="php7-intl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501308" comment="php7-json-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723679" comment="php7-ldap-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723680" comment="php7-mbstring-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501311" comment="php7-mysql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723682" comment="php7-odbc-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723683" comment="php7-opcache-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723684" comment="php7-openssl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723685" comment="php7-pcntl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501316" comment="php7-pdo-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501317" comment="php7-pgsql-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723688" comment="php7-phar-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723689" comment="php7-posix-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723690" comment="php7-readline-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723691" comment="php7-shmop-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723692" comment="php7-snmp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723693" comment="php7-soap-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723694" comment="php7-sockets-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723695" comment="php7-sodium-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230510" comment="php7-sodium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501326" comment="php7-sqlite-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723697" comment="php7-sysvmsg-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723698" comment="php7-sysvsem-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723699" comment="php7-sysvshm-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009724322" comment="php7-test-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009270016" comment="php7-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723700" comment="php7-tidy-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501331" comment="php7-tokenizer-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501332" comment="php7-xmlreader-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723703" comment="php7-xmlrpc-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009501334" comment="php7-xmlwriter-7.4.6-3.17.1 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723705" comment="php7-xsl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723706" comment="php7-zip-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723707" comment="php7-zlib-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
</criteria>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:202121703" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2021-21703</title>
    <affected family="unix">
            <platform>openSUSE Leap 15.3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2021-21703" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21703" source="CVE"/>
    <reference ref_id="SUSE CVE-2021-21703" ref_url="https://www.suse.com/security/cve/CVE-2021-21703" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3726-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009744.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3943-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010332.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012985.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1570-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RQSJP4Z6SALIQMUAEV267NSJB6EATBOB/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3943-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D5SCXUGIHHCMMDJ4KQPRDMJZB4DQFEII/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0679-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/O33XW3SB7IZV5RQWCSZCBFQE4OBWACOB/" source="SUSE-SU"/>
    <description>
    In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the main process and write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and writes, which can be used to escalate privileges from local unprivileged user to the root user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-25"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21703/">CVE-2021-21703</cve>
	<bugzilla href="https://bugzilla.suse.com/1192050">SUSE bug 1192050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:opensuse:leap:15.3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009616492" comment="openSUSE Leap 15.3 is installed"/>
			<criteria operator="OR">
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723657" comment="apache2-mod_php7-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723658" comment="php7-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723659" comment="php7-bcmath-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723660" comment="php7-bz2-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723661" comment="php7-calendar-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723662" comment="php7-ctype-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723663" comment="php7-curl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723664" comment="php7-dba-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723665" comment="php7-devel-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723666" comment="php7-dom-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723653" comment="php7-embed-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230509" comment="php7-embed is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723667" comment="php7-enchant-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723668" comment="php7-exif-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723669" comment="php7-fastcgi-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723670" comment="php7-fileinfo-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723624" comment="php7-firebird-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723671" comment="php7-fpm-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723672" comment="php7-ftp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723673" comment="php7-gd-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723674" comment="php7-gettext-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723675" comment="php7-gmp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723676" comment="php7-iconv-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723677" comment="php7-intl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723678" comment="php7-json-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723679" comment="php7-ldap-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723680" comment="php7-mbstring-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723681" comment="php7-mysql-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723682" comment="php7-odbc-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723683" comment="php7-opcache-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723684" comment="php7-openssl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723685" comment="php7-pcntl-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723686" comment="php7-pdo-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723687" comment="php7-pgsql-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723688" comment="php7-phar-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723689" comment="php7-posix-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723690" comment="php7-readline-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723691" comment="php7-shmop-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723692" comment="php7-snmp-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723693" comment="php7-soap-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723694" comment="php7-sockets-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723695" comment="php7-sodium-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009230510" comment="php7-sodium is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723696" comment="php7-sqlite-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723697" comment="php7-sysvmsg-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723698" comment="php7-sysvsem-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723699" comment="php7-sysvshm-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009724322" comment="php7-test-7.4.33-150200.3.46.2 is installed"/>
	<criterion test_ref="oval:org.opensuse.security:tst:2009270016" comment="php7-test is signed with openSUSE key"/>
</criteria>
				<criteria operator="AND">
	<criterion test_ref="oval:org.opensuse.security:tst:2009723700" comment="php7-tidy-7.4.